$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: zkzteX72v+oQ7lCp1pNxT8oqUfp4n12rc0LAVrunQnc= Subject key identifier: 06:5A:FF:4B:80:62:E2:56:D9:BB:BB:F5:A3:AD:AB:40:6F:AC:33:F7 Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 11CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 11C6 Signing time: Mon 20 Oct 2025 17:37:55 +0000 Manifest this update: Mon 20 Oct 2025 17:37:54 +0000 Manifest next update: Mon 27 Oct 2025 17:37:54 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: PjQeN+LSyK2TWPtQQpWkqh6b8WxY4Jw5NGnwKYen2k4=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4559 (0x11cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Oct 20 17:37:54 2025 GMT Not After : Oct 27 17:37:54 2025 GMT Subject: CN=68f67372-ea51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cc:64:24:24:85:02:d4:de:5b:39:ed:7c:75: 47:11:86:30:51:df:77:30:b2:84:3b:7f:8f:7f:6d: b5:c7:66:74:cd:6f:28:f9:18:ac:84:c4:ea:5e:90: e7:b0:0e:c2:8d:2d:bb:82:61:ff:a1:6e:98:49:17: a9:d2:ff:08:30:2f:55:33:36:f0:7f:ef:0e:dd:98: c6:55:4e:4e:84:a3:df:23:db:96:6a:e8:aa:f2:8f: fc:5b:29:ae:b3:d9:8f:d4:d7:a5:e7:35:a3:7f:24: 72:09:7b:c1:1e:20:ed:84:48:55:34:58:ae:cb:f0: 01:38:9b:04:30:37:f9:5f:2d:51:37:f2:96:25:bf: 2f:26:a9:38:f3:f3:04:f9:36:8d:cf:dd:d2:f9:3d: f0:cc:c3:47:5b:54:ee:6c:59:79:7e:4f:53:0e:6a: b9:03:4f:5f:a5:0d:ad:68:81:ee:19:68:70:fc:a4: 06:ab:cb:ac:c4:a3:8d:e1:0e:be:5f:24:1b:8e:7a: 28:7e:92:09:82:1f:01:a2:af:bd:39:42:7a:d7:72: 78:08:4c:b0:a0:34:31:45:f1:7b:f5:9f:59:4b:a6: 05:36:22:44:9d:ea:23:a1:a6:5f:c5:4d:36:86:54: fe:fc:67:a1:80:35:ad:b4:a0:1e:c2:fe:8a:a5:ff: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5A:FF:4B:80:62:E2:56:D9:BB:BB:F5:A3:AD:AB:40:6F:AC:33:F7 X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c8:b1:85:4d:01:48:73:80:ef:da:7d:a0:51:40:d3:fe:d7: 6c:f4:b1:93:9a:43:db:d0:ab:7a:4e:a6:dd:9d:39:8a:46:a0: b2:35:d4:a3:2a:42:97:3b:ce:3b:01:75:d4:70:6d:9c:9a:d8: 11:4d:e1:18:80:f0:0c:52:c9:b4:22:24:97:66:d2:f5:69:12: 47:ae:a3:ae:a6:72:9f:db:eb:30:a0:b7:ee:4a:f9:60:e2:50: c5:95:ea:81:0d:df:86:cf:30:68:9f:5c:6c:af:7c:4e:76:bb: 87:d0:69:e4:63:98:0d:60:28:05:07:9d:33:73:e8:21:1d:e9: 33:c2:88:1a:40:90:22:0f:a7:a3:07:ed:4e:e0:fa:9f:64:32: ed:f9:84:f8:56:ff:5e:81:19:fe:61:c8:8e:45:0c:c2:89:81: 71:de:16:ca:d0:29:9d:25:c7:9c:3c:8c:46:c0:42:e8:06:5f: 6c:52:a7:1f:b4:7e:bb:38:ba:20:5e:ed:91:c4:cd:d2:7e:ba: b6:83:94:e1:ca:1c:e3:1b:45:9a:bd:84:3d:43:20:ff:dc:14: ca:06:f9:c4:2e:d2:a4:28:d0:a7:9a:f6:d3:e7:37:41:f3:e9: 5c:b8:11:da:96:44:45:13:bd:aa:d7:98:af:09:18:3f:1f:7c: 58:e9:fa:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjUxMDIwMTczNzU0WhcNMjUxMDI3MTczNzU0WjAYMRYwFAYD VQQDEw02OGY2NzM3Mi1lYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9MxkJCSFAtTeWzntfHVHEYYwUd93MLKEO3+Pf221x2Z0zW8o+RishMTqXpDn sA7CjS27gmH/oW6YSRep0v8IMC9VMzbwf+8O3ZjGVU5OhKPfI9uWauiq8o/8Wymu s9mP1Nel5zWjfyRyCXvBHiDthEhVNFiuy/ABOJsEMDf5Xy1RN/KWJb8vJqk48/ME +TaNz93S+T3wzMNHW1TubFl5fk9TDmq5A09fpQ2taIHuGWhw/KQGq8usxKON4Q6+ XyQbjnoofpIJgh8Boq+9OUJ613J4CEywoDQxRfF79Z9ZS6YFNiJEneojoaZfxU02 hlT+/GehgDWttKAewv6Kpf82owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZa/0uA YuJW2bu79aOtq0BvrDP3MB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJyLGFTQFIc4Dv2n2gUUDT/tds9LGTmkPb0Kt6TqbdnTmKRqCyNdSj KkKXO847AXXUcG2cmtgRTeEYgPAMUsm0IiSXZtL1aRJHrqOupnKf2+swoLfuSvlg 4lDFleqBDd+GzzBon1xsr3xOdruH0GnkY5gNYCgFB50zc+ghHekzwogaQJAiD6ej B+1O4PqfZDLt+YT4Vv9egRn+YciORQzCiYFx3hbK0CmdJcecPIxGwELoBl9sUqcf tH67OLogXu2RxM3Sfrq2g5ThyhzjG0WavYQ9QyD/3BTKBvnELtKkKNCnmvbT5zdB 8+lcuBHalkRFE72q15ivCRg/H3xY6frm -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:16 2025 by rpki-client