$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: nD5KdyirEMbuvFzSBibpXXx2JIlYHIJThbscZKGUoUk= Subject key identifier: CD:6E:E3:56:D2:89:11:AC:FC:B7:67:D6:13:E5:96:AE:1B:E6:3D:1D Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: 0108 Signing time: Sun 19 Oct 2025 07:52:19 +0000 Manifest this update: Sun 19 Oct 2025 07:52:18 +0000 Manifest next update: Sun 26 Oct 2025 07:52:18 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: tZiQ15RMFSr5cXEiWbdJeE9+RRh8yRUFpPnGssL8tJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Oct 19 07:52:18 2025 GMT Not After : Oct 26 07:52:18 2025 GMT Subject: CN=68f498b2-4546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:cf:0b:30:ea:a8:0d:bb:52:d0:61:09:b2: 13:b4:33:b0:f4:c8:84:7f:b1:cf:7d:14:b2:ff:67: 20:c6:6f:ee:27:e7:80:34:9c:f1:9a:69:06:52:f5: 34:93:db:41:95:71:6b:c6:a9:b9:15:e8:5f:e8:61: df:7e:be:ef:a5:53:24:bf:b0:3c:49:09:c3:91:5d: 6b:5b:4c:7f:b8:e2:70:3c:1c:59:fc:0a:9d:df:03: 4a:46:28:f1:76:a3:35:2d:d0:f0:5c:8c:50:85:9c: cc:1e:12:4f:c4:8d:92:86:b4:53:eb:90:1c:d4:31: c7:a7:7f:69:87:4d:5b:2a:77:2c:68:bc:c7:81:77: e9:9c:ec:0c:49:72:09:f8:51:a0:ed:09:3e:0c:70: fa:dc:8f:c6:8b:d8:b1:0b:04:27:47:54:f7:37:55: 5c:47:18:69:46:8a:da:7c:2a:ef:72:64:4f:12:c5: 50:60:2a:b0:c3:58:98:85:4b:14:85:36:3b:a8:9a: 92:40:5b:e0:8c:a2:00:f1:1c:3f:26:56:53:99:85: ab:b8:fe:84:50:45:f2:e8:6b:d3:0b:15:4f:10:aa: a0:d1:b5:f0:53:c3:57:35:13:11:38:c2:d9:a5:68: cb:86:27:bd:c5:39:ba:b0:40:39:b6:6a:c5:0b:35: ef:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:E3:56:D2:89:11:AC:FC:B7:67:D6:13:E5:96:AE:1B:E6:3D:1D X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:80:bb:20:6f:39:f1:dd:91:61:e2:70:0f:c8:21:17:30:99: 6a:0c:5e:be:6d:79:2b:be:79:a0:4f:b8:63:df:12:7b:b0:48: e8:90:5a:a7:bf:69:b3:82:24:71:05:b2:41:b3:9d:e7:d8:d0: 91:36:00:7f:86:c3:2a:f8:ea:b7:97:a6:1c:5c:4c:37:36:ad: 5a:f8:a0:e0:52:74:4f:ca:b0:07:32:a1:57:84:1b:31:ca:4d: 59:74:96:ae:bc:bd:f8:f0:7c:1f:ed:ae:71:38:a7:17:3f:de: 05:78:0b:bc:6a:85:9c:06:64:9d:5c:e6:58:a6:79:dc:77:e5: 24:6f:f3:a6:97:28:e1:e7:e5:61:14:26:6c:16:92:bf:76:38: 3c:90:73:88:74:97:34:0f:f2:d8:bc:2a:0d:ea:8a:0e:c7:2d: 45:29:b0:19:e8:80:75:70:d3:20:ef:db:ee:f0:1d:22:d7:80: c3:b4:b0:c2:7e:9c:ba:4f:b8:a1:56:60:c6:a6:5e:bb:e3:69: ca:8b:f8:e4:bd:22:02:1e:fd:e7:4b:8c:96:6b:e5:e9:09:1e: 38:9c:0b:93:a2:bf:a9:d1:70:83:c5:db:48:ed:f6:a8:2d:03: 67:3a:80:20:88:3a:bf:af:08:d9:83:68:e0:8b:3d:1b:c7:3a: 52:50:26:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUxMDE5MDc1MjE4WhcNMjUxMDI2MDc1MjE4WjAYMRYwFAYD VQQDEw02OGY0OThiMi00NTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h7PCzDqqA27UtBhCbITtDOw9MiEf7HPfRSy/2cgxm/uJ+eANJzxmmkGUvU0 k9tBlXFrxqm5Fehf6GHffr7vpVMkv7A8SQnDkV1rW0x/uOJwPBxZ/Aqd3wNKRijx dqM1LdDwXIxQhZzMHhJPxI2ShrRT65Ac1DHHp39ph01bKncsaLzHgXfpnOwMSXIJ +FGg7Qk+DHD63I/Gi9ixCwQnR1T3N1VcRxhpRorafCrvcmRPEsVQYCqww1iYhUsU hTY7qJqSQFvgjKIA8Rw/JlZTmYWruP6EUEXy6GvTCxVPEKqg0bXwU8NXNRMROMLZ pWjLhie9xTm6sEA5tmrFCzXvywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1u41bS iRGs/Ldn1hPllq4b5j0dMB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArgLsgbznx3ZFh4nAPyCEXMJlqDF6+bXkrvnmgT7hj3xJ7sEjokFqn v2mzgiRxBbJBs53n2NCRNgB/hsMq+Oq3l6YcXEw3Nq1a+KDgUnRPyrAHMqFXhBsx yk1ZdJauvL348Hwf7a5xOKcXP94FeAu8aoWcBmSdXOZYpnncd+Ukb/Omlyjh5+Vh FCZsFpK/djg8kHOIdJc0D/LYvCoN6ooOxy1FKbAZ6IB1cNMg79vu8B0i14DDtLDC fpy6T7ihVmDGpl6742nKi/jkvSICHv3nS4yWa+XpCR44nAuTor+p0XCDxdtI7fao LQNnOoAgiDq/rwjZg2jgiz0bxzpSUCZd -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:30 2025 by rpki-client