$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: /3IKoYaifg2F2TLtqheeUsgiF5eEjENZO6397kwPv5E= Subject key identifier: 59:7C:41:17:AB:D4:CB:AD:ED:E1:9E:50:C6:61:BE:97:41:4E:DF:C9 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0CA0 Signing time: Sat 18 Oct 2025 18:58:50 +0000 Manifest this update: Sat 18 Oct 2025 18:58:50 +0000 Manifest next update: Sat 25 Oct 2025 18:58:50 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: dwHqzBuqifOaHLHAkR+rjlIw8AOfC1quqnTjxKHGZMo=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: 9FmnWb9pui6Pv8KaY3QdF38c9SeSZeT0GfsxD7+8mfg=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: bcKs3JCB0Pnfj/bjvQqBTGxWS9Rxr52rn9mWhFguD3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Oct 18 18:58:50 2025 GMT Not After : Oct 25 18:58:50 2025 GMT Subject: CN=68f3e36a-9b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e9:8f:87:f0:88:09:8d:75:f5:dd:a7:4a:45: 0d:6b:c7:67:ce:1d:82:1d:8a:29:79:86:27:6c:18: d9:3c:cc:e6:93:3a:03:13:c8:3a:a5:00:95:d7:ca: 47:d4:34:38:b0:5f:e6:3b:42:25:42:d1:15:6f:c3: a8:cb:0e:60:c8:ab:60:98:1e:db:ba:42:e1:d4:eb: 91:31:35:9d:b1:76:75:0d:e6:b1:fb:36:c1:bb:c8: 48:d5:25:fe:6f:17:e0:09:31:3d:4d:04:dc:4b:02: a4:c2:03:ba:fd:bb:87:83:95:76:ca:69:f5:43:df: f8:c6:f7:ea:3c:93:4e:c8:94:05:7a:23:c9:ce:42: 77:0e:41:3b:7b:b7:52:04:49:2c:cf:30:1f:39:7d: ca:59:55:0f:c7:7c:2c:28:be:c6:24:bf:23:db:3c: 5e:5b:12:03:7d:07:fe:f0:23:25:83:63:6f:67:ae: 18:d9:8a:cc:77:24:cf:97:b3:8d:f5:1b:9d:23:e4: 10:4e:63:e8:56:db:c9:08:91:77:9f:c8:1a:63:93: 20:ff:76:6c:83:04:c7:41:47:a3:46:d0:e9:8b:15: 37:98:3a:e6:3d:15:81:f0:1b:b8:50:81:b8:9d:8a: 32:dc:e1:e5:04:ff:2f:8d:9b:a3:e9:ae:01:da:ec: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7C:41:17:AB:D4:CB:AD:ED:E1:9E:50:C6:61:BE:97:41:4E:DF:C9 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d8:93:23:aa:1a:3f:b2:ee:d4:e0:d7:1f:16:6d:dd:26:1c: d3:0a:36:8a:fd:7d:d6:d8:9f:c9:17:aa:df:a1:e5:a1:e0:c0: 33:f4:64:ae:26:31:10:df:a2:0c:da:d3:5e:76:94:cd:6d:43: 1e:29:57:ff:b2:0a:bc:93:ba:ba:cd:e9:d4:e6:e8:c7:ef:ab: 5d:fe:ff:29:dd:79:0a:e0:df:35:3b:ea:c9:57:3c:b1:a9:47: fd:9c:d0:e1:07:99:eb:9c:30:67:d9:1d:c6:f2:a2:d2:0f:3f: 89:c6:2b:9b:13:30:96:ee:19:3f:7c:a7:67:9c:ef:1d:49:7e: 67:58:77:25:5e:af:40:6c:26:1d:e0:c6:5b:78:80:3c:8a:f0: 1e:6c:45:f4:6e:10:49:73:c0:a2:d7:78:ca:f1:f3:8f:63:a1: 97:c8:ce:c1:36:93:38:ed:97:35:64:96:4f:82:20:c6:5b:2b: 18:83:eb:79:ce:36:83:a8:ca:17:da:3f:35:ee:0c:39:95:fa: d5:2d:0f:02:a0:dd:93:72:26:fd:41:b7:82:08:22:c6:54:21: 6b:01:a4:d5:46:e4:02:31:20:b0:ec:33:94:34:0f:4b:6b:f0: b0:db:8f:4b:4f:18:4f:4f:46:1d:49:5c:c8:8c:c1:c5:19:1b: f7:a5:e0:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjUxMDE4MTg1ODUwWhcNMjUxMDI1MTg1ODUwWjAYMRYwFAYD VQQDEw02OGYzZTM2YS05YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5umPh/CICY119d2nSkUNa8dnzh2CHYopeYYnbBjZPMzmkzoDE8g6pQCV18pH 1DQ4sF/mO0IlQtEVb8Ooyw5gyKtgmB7bukLh1OuRMTWdsXZ1Deax+zbBu8hI1SX+ bxfgCTE9TQTcSwKkwgO6/buHg5V2ymn1Q9/4xvfqPJNOyJQFeiPJzkJ3DkE7e7dS BEkszzAfOX3KWVUPx3wsKL7GJL8j2zxeWxIDfQf+8CMlg2NvZ64Y2YrMdyTPl7ON 9RudI+QQTmPoVtvJCJF3n8gaY5Mg/3ZsgwTHQUejRtDpixU3mDrmPRWB8Bu4UIG4 nYoy3OHlBP8vjZuj6a4B2uypKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl8QRer 1Mut7eGeUMZhvpdBTt/JMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR2JMjqho/su7U4NcfFm3dJhzTCjaK/X3W2J/JF6rfoeWh4MAz9GSu JjEQ36IM2tNedpTNbUMeKVf/sgq8k7q6zenU5ujH76td/v8p3XkK4N81O+rJVzyx qUf9nNDhB5nrnDBn2R3G8qLSDz+JxiubEzCW7hk/fKdnnO8dSX5nWHclXq9AbCYd 4MZbeIA8ivAebEX0bhBJc8Ci13jK8fOPY6GXyM7BNpM47Zc1ZJZPgiDGWysYg+t5 zjaDqMoX2j817gw5lfrVLQ8CoN2Tcib9QbeCCCLGVCFrAaTVRuQCMSCw7DOUNA9L a/Cw249LTxhPT0YdSVzIjMHFGRv3peAg -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:03 2025 by rpki-client