$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: /4MlkE2YVF4QiQ1mcFlv+oTxRJ483snYw5GN3iASR0Y= Subject key identifier: E9:25:27:05:5A:C2:6F:AC:50:8F:0C:0C:C7:B1:A6:09:C0:E4:72:66 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 08:32:06 +0000 Manifest this update: Sun 19 Oct 2025 08:32:06 +0000 Manifest next update: Sun 26 Oct 2025 08:32:06 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: aw1d1uiqzCzpusRDih7tKHeF0lnDmUzDfRRTjBSSZwo=) 2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: WZcZmgFPpXfORxvGM494Pr8Ava0fj6MltmQBEC1MNTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Oct 19 08:32:06 2025 GMT Not After : Oct 26 08:32:06 2025 GMT Subject: CN=68f4a206-c1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:4e:23:8d:61:9d:58:e7:8e:6b:09:54:b7: ec:a7:24:e8:c4:4c:a0:79:b2:04:e1:22:31:48:04: 7b:a4:4b:c0:6f:de:ee:6e:d4:a9:e0:1a:75:18:6f: 16:54:bf:ce:96:d7:b6:4a:66:26:fe:36:6d:51:28: 58:ff:3f:a4:04:69:f4:aa:c7:62:d1:e7:fb:a4:a4: 5a:33:a6:ce:32:6c:b2:cd:ff:59:51:16:28:17:ba: 8f:cd:79:f0:fc:63:47:bb:cb:47:3f:f3:5c:14:17: da:bd:6a:6e:d9:10:f5:46:7a:0c:3b:50:95:5b:90: 87:88:fc:14:56:63:1c:4a:a7:d7:a7:8e:9d:f1:f1: 91:c7:98:58:83:2e:ea:82:4d:03:c6:54:0a:a1:0b: fc:16:cb:60:04:bd:39:e6:5c:f1:fa:e0:f4:96:1b: 2b:8d:f5:b4:0c:12:ad:5c:be:36:26:0c:ed:d2:00: ed:83:d8:9f:8c:70:ca:86:36:b6:6a:c7:5a:ca:3c: 34:dc:a7:29:eb:6b:bb:ac:00:59:99:86:f4:ef:97: 53:5e:79:7d:49:52:66:1f:02:53:d9:ac:1f:11:36: 4c:e4:b9:8f:d2:d6:cd:3e:d4:e7:35:aa:ac:5f:59: a1:79:ab:57:a5:59:b6:93:94:5f:d5:d5:b3:03:5f: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:25:27:05:5A:C2:6F:AC:50:8F:0C:0C:C7:B1:A6:09:C0:E4:72:66 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c4:e6:46:9b:38:55:1d:8b:55:ea:2b:13:6a:7c:dc:ce:79: f3:07:d3:fd:ac:46:40:e3:7e:ad:45:b4:e1:a7:0b:3e:64:57: df:7a:5e:54:0f:b8:45:f2:de:49:e7:95:0c:0a:55:32:74:73: 8f:b2:43:34:4c:d1:28:ca:62:4b:56:f8:25:f4:ef:3b:c1:85: d4:c0:a4:38:2c:e3:db:52:42:9b:2a:a3:7e:a7:2e:dc:92:16: 9d:17:24:8b:e4:5e:b9:57:e9:30:37:7d:30:ea:de:65:66:83: 10:5f:ee:e8:64:54:62:86:51:e6:a2:79:47:a5:02:cc:4b:64: f1:23:41:82:f0:16:c6:91:5b:7e:df:32:d6:2a:39:5c:f7:ec: 8d:4c:f1:d6:49:a5:f5:9c:6e:1c:6b:60:b2:14:e2:66:5f:2c: 3c:10:c5:84:17:2b:04:a1:2d:fe:d1:21:35:f4:6c:b7:9d:89: 7d:fa:ef:80:7a:db:6b:d3:58:63:50:8a:27:ae:78:a2:1d:19: 33:2f:c0:5f:9c:22:84:ae:53:0d:1c:ef:e9:b0:98:25:46:b3: 46:07:74:9f:2f:01:78:35:d1:4c:02:79:93:01:c5:fc:28:c3: 0e:4d:c5:08:82:ce:b2:7c:3b:21:93:71:e4:36:f3:c2:aa:89: 46:6d:32:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjUxMDE5MDgzMjA2WhcNMjUxMDI2MDgzMjA2WjAYMRYwFAYD VQQDEw02OGY0YTIwNi1jMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9pOI41hnVjnjmsJVLfspyToxEygebIE4SIxSAR7pEvAb97ubtSp4Bp1GG8W VL/Olte2SmYm/jZtUShY/z+kBGn0qsdi0ef7pKRaM6bOMmyyzf9ZURYoF7qPzXnw /GNHu8tHP/NcFBfavWpu2RD1RnoMO1CVW5CHiPwUVmMcSqfXp46d8fGRx5hYgy7q gk0DxlQKoQv8FstgBL055lzx+uD0lhsrjfW0DBKtXL42Jgzt0gDtg9ifjHDKhja2 asdayjw03Kcp62u7rABZmYb075dTXnl9SVJmHwJT2awfETZM5LmP0tbNPtTnNaqs X1mheatXpVm2k5Rf1dWzA1/LkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOklJwVa wm+sUI8MDMexpgnA5HJmMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlxOZGmzhVHYtV6isTanzcznnzB9P9rEZA436tRbThpws+ZFffel5U D7hF8t5J55UMClUydHOPskM0TNEoymJLVvgl9O87wYXUwKQ4LOPbUkKbKqN+py7c khadFySL5F65V+kwN30w6t5lZoMQX+7oZFRihlHmonlHpQLMS2TxI0GC8BbGkVt+ 3zLWKjlc9+yNTPHWSaX1nG4ca2CyFOJmXyw8EMWEFysEoS3+0SE19Gy3nYl9+u+A ettr01hjUIonrniiHRkzL8BfnCKErlMNHO/psJglRrNGB3SfLwF4NdFMAnmTAcX8 KMMOTcUIgs6yfDshk3HkNvPCqolGbTI8 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:13 2025 by rpki-client