$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft File: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json) Hash identifier: zPsk0/T5HWh1jfBuJzRQPGyO0uzBNQ9/KxpJBpMWWjw= Subject key identifier: 54:34:6C:5D:06:65:EB:29:51:34:3F:F4:26:50:D6:4E:D3:5A:CC:77 Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft Manifest number: 052D Signing time: Sun 19 Oct 2025 01:15:58 +0000 Manifest this update: Sun 19 Oct 2025 01:15:58 +0000 Manifest next update: Sun 26 Oct 2025 01:15:58 +0000 Files and hashes: 1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: /FKPPxEC7cStrnFAeLU0v6QWrAuM/cs2NyWTTRBJDwg=) 2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: DgUDwmkN0T0UntF7QmQLHNafJtdHs9vt+l0U9HNHmvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Validity Not Before: Oct 19 01:15:58 2025 GMT Not After : Oct 26 01:15:58 2025 GMT Subject: CN=68f43bce-192c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:f0:a1:a4:98:eb:bf:21:5c:1a:3a:4a:69: 84:1b:d3:e8:17:2e:f2:aa:c5:f1:40:91:f4:aa:5c: 4b:d8:b6:aa:59:1d:c9:51:18:a9:0f:90:66:eb:90: ab:dc:45:c5:cc:c2:cd:9a:11:f6:f9:9a:18:1d:4a: 06:12:39:80:5b:ba:80:1a:2e:45:c5:20:77:90:5f: 95:98:82:06:03:d5:0a:40:45:44:e5:91:13:30:f9: 47:7e:d2:58:d3:41:d0:cd:09:cb:f8:7a:05:ed:be: d3:9a:24:cf:99:2d:81:73:18:24:e5:2c:51:97:55: 88:aa:f4:cc:4d:64:d1:ae:54:56:cc:fe:1c:84:86: 26:3a:0b:86:46:e5:5f:b0:a5:92:ea:33:22:aa:86: cf:4d:e2:cc:27:d8:16:8b:e1:d6:9e:8c:a7:66:64: 3f:54:a1:87:27:86:18:1a:31:61:75:33:c7:e6:f0: 58:40:e0:ff:e2:73:7c:15:94:bf:62:b3:96:ff:14: e4:b0:56:25:ec:df:f5:43:e5:b8:c8:02:e3:80:73: 6b:fd:c8:d3:82:88:f1:2b:a9:d4:00:a4:18:d3:e4: 5f:3a:d2:20:23:79:e4:1c:f3:bd:b0:01:05:4e:f6: 14:11:97:d1:ef:5f:cc:02:64:e5:38:a3:6f:fc:c0: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:34:6C:5D:06:65:EB:29:51:34:3F:F4:26:50:D6:4E:D3:5A:CC:77 X509v3 Authority Key Identifier: keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e1:50:37:9a:40:a2:9c:68:25:d9:37:df:fa:46:b2:f4:c3: 49:b4:3c:01:f6:84:ce:1a:95:0c:1b:41:4a:c2:d1:c8:36:a5: 79:54:f9:47:5a:d3:bb:8f:7d:a2:9c:91:b6:0e:6b:b1:00:88: 92:cd:6a:a9:5b:9a:7f:61:13:a0:1d:fb:87:fa:bc:d6:88:46: bd:68:41:27:a4:2b:a7:77:c8:90:d5:a5:f1:36:0e:81:d6:d7: 03:d8:69:24:c9:af:ea:72:fc:8c:42:7b:44:0e:33:3a:34:bf: 2e:01:de:97:ba:ee:be:c5:67:52:b5:51:84:8e:a4:16:c2:83: 36:e3:cf:93:b3:12:e0:f0:25:90:94:7a:f6:e8:e1:ee:92:00: 92:66:ff:5a:87:af:ec:7f:28:d5:bb:e0:b4:3a:ec:12:55:a0: 52:8a:3e:57:e9:6c:47:d5:41:d4:b3:d9:3b:25:ea:c7:19:13: b9:84:91:bd:2b:f9:77:5e:d0:6f:d5:f2:4f:88:3a:bc:e7:b0: 41:21:3e:ef:41:c5:ba:f3:3f:6b:00:f2:8b:91:3c:3f:ee:17: 30:2d:aa:5d:ab:7e:a8:ff:0e:e4:cc:30:55:90:8c:bc:96:2c: 74:ec:de:3a:83:8c:a2:e9:b0:ba:67:17:bb:51:b8:32:25:58: 4b:23:bf:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy NjA1NzUzRUYwHhcNMjUxMDE5MDExNTU4WhcNMjUxMDI2MDExNTU4WjAYMRYwFAYD VQQDEw02OGY0M2JjZS0xOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE/woaSY678hXBo6SmmEG9PoFy7yqsXxQJH0qlxL2LaqWR3JURipD5Bm65Cr 3EXFzMLNmhH2+ZoYHUoGEjmAW7qAGi5FxSB3kF+VmIIGA9UKQEVE5ZETMPlHftJY 00HQzQnL+HoF7b7TmiTPmS2Bcxgk5SxRl1WIqvTMTWTRrlRWzP4chIYmOguGRuVf sKWS6jMiqobPTeLMJ9gWi+HWnoynZmQ/VKGHJ4YYGjFhdTPH5vBYQOD/4nN8FZS/ YrOW/xTksFYl7N/1Q+W4yALjgHNr/cjTgojxK6nUAKQY0+RfOtIgI3nkHPO9sAEF TvYUEZfR71/MAmTlOKNv/MAoNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ0bF0G ZespUTQ/9CZQ1k7TWsx3MB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQwQy84MTRGNkQwNDFBMUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdv NGJMZFlQaVBZN29tQlhVLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA34VA3mkCinGgl2Tff+kay9MNJtDwB9oTOGpUMG0FKwtHINqV5VPlH WtO7j32inJG2DmuxAIiSzWqpW5p/YROgHfuH+rzWiEa9aEEnpCund8iQ1aXxNg6B 1tcD2Gkkya/qcvyMQntEDjM6NL8uAd6Xuu6+xWdStVGEjqQWwoM248+TsxLg8CWQ lHr26OHukgCSZv9ah6/sfyjVu+C0OuwSVaBSij5X6WxH1UHUs9k7JerHGRO5hJG9 K/l3XtBv1fJPiDq857BBIT7vQcW68z9rAPKLkTw/7hcwLapdq36o/w7kzDBVkIy8 lix07N46g4yi6bC6Zxe7UbgyJVhLI78Y -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:37 2025 by rpki-client