$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json) Hash identifier: bvsmqwjv6H56EImLbPiaj2UdRjlGuxhBh/tKACuIRyg= Subject key identifier: B7:0C:C3:18:C1:57:5E:22:A2:72:CC:FA:FD:1D:21:92:01:58:C2:DB Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft Manifest number: A4 Signing time: Sun 19 Oct 2025 09:31:49 +0000 Manifest this update: Sun 19 Oct 2025 09:31:49 +0000 Manifest next update: Sun 26 Oct 2025 09:31:49 +0000 Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: tuntO7BNX5oEqg/ZtFp7HwBgnwZ3X57zboFnHR4k4Mc=) 2: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: WZhBMu7Q96yyexU6/LjhPKv/Y/5r7dFEd8P6eg0tmKI=) 3: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: EaTt3iw3MzXPWI97iilJv7Qv6QDIZy/BFYmUeT7y7BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Oct 19 09:31:49 2025 GMT Not After : Oct 26 09:31:49 2025 GMT Subject: CN=68f4b005-7cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:c9:27:36:ae:b3:ee:b2:d9:da:65:52:db: b4:af:1d:7f:b7:8b:82:2d:44:87:c9:13:1d:4b:b8: 94:46:75:37:97:eb:99:9a:9f:43:23:66:14:9f:bf: c3:f1:b1:f1:30:60:3c:61:bd:92:2a:5f:6b:89:ba: 55:f8:c1:56:6b:e6:fa:7d:d5:5e:2e:6c:4c:f8:af: b0:74:2b:8b:68:94:ab:5c:63:ce:2f:78:a0:2a:2e: 53:63:29:ae:f7:64:42:b2:02:f6:91:50:2b:26:27: a4:e3:65:4c:ce:68:32:d9:51:52:2f:59:f1:57:72: 2d:f1:7e:72:f9:6e:43:21:e6:c0:5a:db:55:52:46: c6:38:a0:c1:45:9f:62:07:b7:28:30:fd:1f:f7:d1: a1:87:74:5c:31:2a:fb:29:7b:9a:26:47:7d:e1:2b: 66:04:8b:e4:c5:0f:69:5e:ff:82:83:23:11:f7:2a: 61:ce:b1:09:fe:f8:87:dd:87:dd:f8:1f:65:43:87: 89:17:cd:38:50:2f:c6:0f:40:38:ba:4c:a0:81:83: 26:41:69:7e:ab:07:dd:14:21:10:2b:80:4d:f0:84: fa:ac:f9:06:c7:28:eb:5a:81:56:d9:82:9c:4b:9e: a0:cd:da:7f:54:62:6f:31:9a:39:8f:e2:3b:95:3e: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0C:C3:18:C1:57:5E:22:A2:72:CC:FA:FD:1D:21:92:01:58:C2:DB X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:b1:52:f2:df:75:e9:78:59:f4:35:fb:5b:b9:26:34:01: 1a:9d:36:dc:a3:51:76:e2:8b:d7:2a:31:a5:2b:0b:fb:59:04: c4:46:ef:82:5c:39:7a:4e:09:65:eb:59:33:63:c2:6a:24:03: ee:bf:74:e9:d2:24:a3:36:06:c6:a7:0e:f8:ce:a0:37:d1:c3: 87:18:f4:14:02:33:d8:c3:41:a1:5c:7f:80:8c:d8:46:3e:2b: ba:d7:fb:bf:56:38:2f:ac:97:bc:e2:bb:fd:aa:59:2e:8b:e1: 2a:ca:7c:7b:3d:41:ab:89:29:72:7b:17:8c:5d:9e:87:c1:f5: 27:fd:83:95:56:a3:2a:0f:15:8f:05:c6:18:29:f2:51:30:66: 63:39:6b:03:a8:5d:9a:95:b8:c8:9b:1a:90:fc:85:07:07:ef: 33:1d:13:11:d4:5e:36:4f:19:7e:88:9f:5c:41:06:58:82:57: 90:f0:92:5d:d5:e6:5b:f2:c6:7e:4a:de:31:24:85:e5:d9:ec: 6d:a7:91:1f:85:e0:cb:2b:fd:bb:a3:75:7b:26:07:8d:b6:f8: a6:ec:0d:36:42:fd:53:fc:de:c2:37:c2:8a:f1:8d:32:e6:c9: bc:3e:7b:fc:f9:c1:25:dc:38:3b:63:8b:3e:cc:fa:ea:8e:18: ce:20:dc:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMEExMTAvBgNVBAUTKDY3MEUzQTA2NzIxNjg0QUI0NzNCQkJFNUNDMjJDRjA1 RDAyNEJGNkQwHhcNMjUxMDE5MDkzMTQ5WhcNMjUxMDI2MDkzMTQ5WjAYMRYwFAYD VQQDEw02OGY0YjAwNS03Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Z7JJzaus+6y2dplUtu0rx1/t4uCLUSHyRMdS7iURnU3l+uZmp9DI2YUn7/D 8bHxMGA8Yb2SKl9ribpV+MFWa+b6fdVeLmxM+K+wdCuLaJSrXGPOL3igKi5TYymu 92RCsgL2kVArJiek42VMzmgy2VFSL1nxV3It8X5y+W5DIebAWttVUkbGOKDBRZ9i B7coMP0f99Ghh3RcMSr7KXuaJkd94StmBIvkxQ9pXv+CgyMR9yphzrEJ/viH3Yfd +B9lQ4eJF804UC/GD0A4ukyggYMmQWl+qwfdFCEQK4BN8IT6rPkGxyjrWoFW2YKc S56gzdp/VGJvMZo5j+I7lT4znQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcMwxjB V14ionLM+v0dIZIBWMLbMB8GA1UdIwQYMBaAFGcOOgZyFoSrRzu75cwizwXQJL9t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUwQS9EQUY2RDczNkI3 MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hLdEhPN3ZsekNMUEJkQWt2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3YyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUwQS9EQUY2RDczNkI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hL dEhPN3ZsekNMUEJkQWt2MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdSLFS8t916XhZ9DX7W7kmNAEanTbco1F24ovXKjGlKwv7WQTERu+C XDl6Tgll61kzY8JqJAPuv3Tp0iSjNgbGpw74zqA30cOHGPQUAjPYw0GhXH+AjNhG Piu61/u/VjgvrJe84rv9qlkui+Eqynx7PUGriSlyexeMXZ6HwfUn/YOVVqMqDxWP BcYYKfJRMGZjOWsDqF2albjImxqQ/IUHB+8zHRMR1F42Txl+iJ9cQQZYgleQ8JJd 1eZb8sZ+St4xJIXl2extp5EfheDLK/27o3V7JgeNtvim7A02Qv1T/N7CN8KK8Y0y 5sm8Pnv8+cEl3Dg7Y4s+zPrqjhjOINxf -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:38 2025 by rpki-client