$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: +PgyzKqKkw7oMdgFDXOv8cMO9LtnQXSui5LjX2wuBVw= Subject key identifier: AF:79:35:4B:00:57:54:2E:A6:0D:DB:AD:44:77:E9:3B:9C:66:C6:4A Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 089E Signing time: Sat 18 Oct 2025 21:42:49 +0000 Manifest this update: Sat 18 Oct 2025 21:42:48 +0000 Manifest next update: Sat 25 Oct 2025 21:42:48 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: 5rFsG1U57fBPBIrwteDAixfg7DiOZUGCc4qQBhPpGSA=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: Kko5Py9oYVoGdTuR3TmCVY6w0QuvDF7yamqA7Lq7XfE=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: gb3eIqGKtDZZMjsIarWLCbAcIGW3eUHFzm27i/K2y8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Oct 18 21:42:48 2025 GMT Not After : Oct 25 21:42:48 2025 GMT Subject: CN=68f409d9-34ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:29:18:ca:1f:71:b9:8c:98:97:cb:a0:db: 36:a6:8f:de:fa:4d:1d:ff:b7:d7:e8:14:58:64:94: 96:ae:76:57:e6:67:c7:20:f0:e5:93:6c:c8:26:29: 75:cf:14:d2:a2:6d:9c:13:76:47:dd:08:7d:ca:28: 75:36:a4:d6:98:f4:6e:cb:96:58:0e:fa:4c:af:e3: e0:78:4f:e2:87:02:18:bf:97:f9:83:20:eb:fb:43: 60:e7:9d:09:63:44:31:b8:f9:45:92:33:eb:d9:bb: ca:99:5a:ac:bd:ba:f2:de:cd:3a:b4:0f:0c:17:dc: d0:0f:1d:6c:53:de:49:c7:0c:15:a8:88:6f:9c:d8: ce:ca:e7:5f:bd:7f:c8:d6:7b:e4:b4:a7:c9:70:b4: b9:18:ad:ff:9f:1d:d2:19:3c:53:b4:6c:a9:84:0d: 11:3e:b0:5e:4e:74:1d:e2:91:97:4e:2f:9a:2a:8f: ac:de:8e:57:65:37:b8:5a:32:d1:e9:01:4e:8f:5b: 9a:e6:24:8f:c5:07:c6:12:f2:02:f9:ac:9b:1d:1a: bc:6c:64:6c:a9:3b:09:de:8f:ff:c2:c1:21:df:a9: e2:66:db:af:bb:bb:f8:e9:15:25:9d:33:d6:ee:88: 11:a6:d3:83:9c:32:2e:34:0d:1a:36:7b:3b:90:de: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:79:35:4B:00:57:54:2E:A6:0D:DB:AD:44:77:E9:3B:9C:66:C6:4A X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b3:1e:0b:d0:11:ca:ad:48:91:c6:8b:3d:58:6e:ad:7b:56: 24:d3:fc:65:b7:6a:ad:03:de:47:99:e1:82:41:5c:c5:78:c1: 56:a2:86:71:7b:28:48:e7:ec:cc:27:70:a8:52:d3:42:8c:71: a6:35:99:96:f7:b5:e0:4b:6a:14:b4:47:06:57:76:80:f7:09: 1c:df:8e:ba:46:93:99:04:28:b3:a9:b8:e9:21:c4:d7:54:25: 06:22:f6:c6:65:10:07:22:f7:d9:f7:8c:0b:e3:2e:d4:0a:2e: eb:bf:ff:75:f0:20:9d:89:ee:f0:fd:38:a5:13:30:f0:e9:91: 30:0c:cf:e1:5f:5c:0d:61:60:e2:a9:35:c2:12:61:23:c5:8c: cb:84:74:ba:c1:97:0c:0a:f4:de:fd:42:44:86:9d:80:2f:79: 99:c6:90:43:99:3d:a1:06:3a:16:20:19:ab:c7:f3:ae:f9:fc: b1:7d:a3:9b:7f:bd:41:a5:ef:bb:85:00:f4:97:4e:6a:4b:91: 50:1e:1c:1c:e6:38:43:03:05:28:a2:a4:b0:91:45:c5:ca:ee: d2:cf:f4:cf:f3:3e:e0:7c:39:55:34:1b:95:b7:cd:de:43:f7: ba:0a:54:1a:33:f4:fe:41:a7:cd:d8:a9:3b:91:0e:20:fe:aa: f6:53:d8:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUxMDE4MjE0MjQ4WhcNMjUxMDI1MjE0MjQ4WjAYMRYwFAYD VQQDEw02OGY0MDlkOS0zNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4gpGMofcbmMmJfLoNs2po/e+k0d/7fX6BRYZJSWrnZX5mfHIPDlk2zIJil1 zxTSom2cE3ZH3Qh9yih1NqTWmPRuy5ZYDvpMr+PgeE/ihwIYv5f5gyDr+0Ng550J Y0QxuPlFkjPr2bvKmVqsvbry3s06tA8MF9zQDx1sU95JxwwVqIhvnNjOyudfvX/I 1nvktKfJcLS5GK3/nx3SGTxTtGyphA0RPrBeTnQd4pGXTi+aKo+s3o5XZTe4WjLR 6QFOj1ua5iSPxQfGEvIC+aybHRq8bGRsqTsJ3o//wsEh36niZtuvu7v46RUlnTPW 7ogRptODnDIuNA0aNns7kN5wjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK95NUsA V1Qupg3brUR36TucZsZKMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjsx4L0BHKrUiRxos9WG6te1Yk0/xlt2qtA95HmeGCQVzFeMFWooZx eyhI5+zMJ3CoUtNCjHGmNZmW97XgS2oUtEcGV3aA9wkc3466RpOZBCizqbjpIcTX VCUGIvbGZRAHIvfZ94wL4y7UCi7rv/918CCdie7w/TilEzDw6ZEwDM/hX1wNYWDi qTXCEmEjxYzLhHS6wZcMCvTe/UJEhp2AL3mZxpBDmT2hBjoWIBmrx/Ou+fyxfaOb f71Bpe+7hQD0l05qS5FQHhwc5jhDAwUooqSwkUXFyu7Sz/TP8z7gfDlVNBuVt83e Q/e6ClQaM/T+QafN2Kk7kQ4g/qr2U9g6 -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:40 2025 by rpki-client