$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: O1ixrbEW8Ggslkmmu2WvPdH3lF6EG8F9ZRjCoNRtfS4= Subject key identifier: 13:D0:59:00:F7:CD:43:C0:52:B9:5D:8B:11:D2:7A:AB:66:B8:1C:9D Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 07F6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 07ED Signing time: Sat 18 Oct 2025 22:21:00 +0000 Manifest this update: Sat 18 Oct 2025 22:20:59 +0000 Manifest next update: Sat 25 Oct 2025 22:20:59 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: Y9wPUr5a3o7mvmQy6BHr9Tpc7VK/dOZooPAU5QTnDDY=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: qTxqjLafp1eHZVEFc07aPaguHdK/MmmTaVfaOIj+sXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2038 (0x7f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: Oct 18 22:20:59 2025 GMT Not After : Oct 25 22:20:59 2025 GMT Subject: CN=68f412cc-db67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:66:e9:43:8b:69:cf:48:3d:95:1a:0f:ef: 0a:33:81:88:c6:79:f1:88:04:5d:6e:34:bd:12:a8: de:18:f4:61:3b:58:be:f4:af:07:c0:20:44:34:b5: 21:20:67:6e:3b:e1:b8:16:c2:f4:0d:0b:ef:1f:5b: 21:64:13:d9:00:b0:b0:b7:e4:ef:ff:57:6d:7f:19: 95:27:7e:81:de:f8:cb:04:1a:2b:a8:4c:42:3c:d2: df:ab:ce:ed:69:46:8e:bb:5b:4b:7c:cf:b4:07:ef: a4:ef:60:0b:2d:a5:35:f5:5a:09:1f:8a:ff:27:6a: f8:f6:02:60:d4:9b:7d:9a:99:96:a6:c6:33:24:a9: 0a:65:2b:a7:ae:4c:74:42:39:c5:bd:80:01:03:6b: 5c:e6:65:53:b5:95:cf:ba:5a:9e:bf:a3:c5:99:57: 26:15:56:3b:9b:ba:3f:4a:df:5a:4c:c1:b2:e6:1b: d8:67:e6:c5:1c:73:77:c6:f7:2b:16:c6:7a:55:d7: 33:7e:b6:01:2d:a2:aa:35:74:30:fe:c7:c8:b0:77: c1:82:8a:66:be:8b:81:da:f3:5e:75:a0:3c:c8:5a: 3e:5c:15:0d:1b:a8:77:5f:7e:fb:dd:59:78:e9:c4: 59:25:be:b1:43:e4:5f:d8:2b:3d:ca:bd:97:33:18: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D0:59:00:F7:CD:43:C0:52:B9:5D:8B:11:D2:7A:AB:66:B8:1C:9D X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:40:29:fe:84:28:c9:85:2e:ae:5a:b8:7e:e6:ae:0e:27:ee: aa:87:c7:44:a5:b8:fc:3a:7d:dd:78:fd:d8:fc:a2:e5:6e:00: 48:da:b6:3c:a9:7a:20:7b:f9:1b:a4:f8:c2:cd:bc:ef:15:13: b9:65:71:e9:9f:14:c3:de:32:5a:71:27:e1:d8:d4:0e:1b:ad: bd:f8:7d:9d:1f:5b:4d:57:78:48:55:9f:9c:09:67:cc:0e:95: 63:12:2d:1b:d0:cb:5f:77:ac:09:ab:c0:e7:42:2a:86:7b:e3: 8f:e9:ad:86:49:32:06:f1:15:dd:f2:69:b7:68:cc:97:05:85: d9:37:3d:16:86:6d:67:ef:cb:5e:35:8c:87:c2:ca:f5:95:56: d5:14:67:f5:59:d1:07:aa:24:41:30:14:db:a2:6f:67:2e:88: 91:2d:ad:32:84:d5:ef:c4:96:12:fb:66:87:67:d5:86:30:b2: bd:a4:17:8e:62:a8:b5:e1:3c:5d:80:cb:d6:3d:26:25:13:9b: fa:6b:d2:88:e2:32:4b:ee:54:6a:1d:fd:35:4b:e5:70:47:37: 57:20:3d:a7:4c:bf:1a:a4:3c:7f:9c:db:8e:e7:76:1a:a2:cb: d0:dc:4f:86:8d:e8:cc:37:42:3a:14:9a:ed:f8:e5:fa:45:c9: 9a:7f:d8:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjUxMDE4MjIyMDU5WhcNMjUxMDI1MjIyMDU5WjAYMRYwFAYD VQQDEw02OGY0MTJjYy1kYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvthm6UOLac9IPZUaD+8KM4GIxnnxiARdbjS9EqjeGPRhO1i+9K8HwCBENLUh IGduO+G4FsL0DQvvH1shZBPZALCwt+Tv/1dtfxmVJ36B3vjLBBorqExCPNLfq87t aUaOu1tLfM+0B++k72ALLaU19VoJH4r/J2r49gJg1Jt9mpmWpsYzJKkKZSunrkx0 QjnFvYABA2tc5mVTtZXPulqev6PFmVcmFVY7m7o/St9aTMGy5hvYZ+bFHHN3xvcr FsZ6VdczfrYBLaKqNXQw/sfIsHfBgopmvouB2vNedaA8yFo+XBUNG6h3X3773Vl4 6cRZJb6xQ+Rf2Cs9yr2XMxhpUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPQWQD3 zUPAUrldixHSeqtmuBydMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwQCn+hCjJhS6uWrh+5q4OJ+6qh8dEpbj8On3deP3Y/KLlbgBI2rY8 qXoge/kbpPjCzbzvFRO5ZXHpnxTD3jJacSfh2NQOG629+H2dH1tNV3hIVZ+cCWfM DpVjEi0b0Mtfd6wJq8DnQiqGe+OP6a2GSTIG8RXd8mm3aMyXBYXZNz0Whm1n78te NYyHwsr1lVbVFGf1WdEHqiRBMBTbom9nLoiRLa0yhNXvxJYS+2aHZ9WGMLK9pBeO Yqi14TxdgMvWPSYlE5v6a9KI4jJL7lRqHf01S+VwRzdXID2nTL8apDx/nNuO53Ya osvQ3E+GjejMN0I6FJrt+OX6Rcmaf9iL -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:28 2025 by rpki-client