$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: xkM/B3ONrmSVaBFjyboVstar/ST51Ggdar6UiY8J4AE= Subject key identifier: 44:4B:33:0B:92:8F:E2:05:B6:50:6B:5F:A3:02:B9:59:D6:FC:9E:F3 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: C9 Signing time: Sun 19 Oct 2025 09:09:27 +0000 Manifest this update: Sun 19 Oct 2025 09:09:26 +0000 Manifest next update: Sun 26 Oct 2025 09:09:26 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: Gj9sXZAKRfL83Yi/EOciABnt2xW6KS5U0kHiwCJFINM=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: YrfoAaRH0TwvCd3/fpeLdhWkCOhZ1iXJCt8nCYQZbVA=) 3: 566D69C69DEF11F08AD06664C4F9AE02.roa (hash: ElOzDZKrPCoR9cjo2BzyLGjq0fxAHUzikC7WpFlXFyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Oct 19 09:09:26 2025 GMT Not After : Oct 26 09:09:26 2025 GMT Subject: CN=68f4aac6-da4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:b3:60:4b:2c:c2:3f:0a:11:6b:b6:97:9e: d0:d4:b6:0f:59:cc:2f:38:00:41:08:47:66:ef:d9: e7:39:a9:f5:8e:fc:15:4d:7b:2b:dc:32:c1:52:57: 17:43:86:05:10:e6:29:94:28:08:bc:70:d2:c2:68: 36:c5:41:ff:f4:47:1b:a6:a5:96:78:ed:be:6f:b8: 58:22:9a:a2:e2:53:a8:6f:07:50:ed:2c:4c:ab:e1: 00:d3:4c:bb:a2:3f:97:ae:6b:e0:33:84:2e:09:a1: 0b:d4:9e:5f:40:b7:4b:08:bb:01:38:18:69:43:4b: 41:88:8b:62:88:0d:cc:aa:96:6e:e6:df:e4:6e:02: 2f:7a:25:d0:0f:f1:68:89:88:ad:a4:e5:5b:bb:c7: 81:8e:50:7a:3a:16:da:06:7b:30:34:d0:73:e1:0b: 92:09:6f:7e:53:87:10:ad:94:bc:2e:d9:e6:6f:b8: bc:d8:f1:3f:67:9e:a1:72:a5:c0:66:99:5a:48:d1: c6:cb:ed:6c:0d:4f:42:f3:54:86:fc:7d:64:b4:47: ac:f6:b4:d5:01:3d:1c:ff:35:06:9b:c2:7f:50:25: 7c:37:62:d6:ef:05:4b:1b:c1:db:47:7a:90:70:9f: 51:cc:a3:a0:e5:74:0f:9c:d1:44:ab:c0:27:80:d2: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4B:33:0B:92:8F:E2:05:B6:50:6B:5F:A3:02:B9:59:D6:FC:9E:F3 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1a:ef:16:43:04:fe:72:e4:ca:66:47:24:f7:c3:af:ba:9b: 61:10:e5:2b:25:86:0b:e2:0b:69:23:31:90:7a:60:7e:e0:ff: 59:ec:2d:56:6e:7f:29:d8:63:e2:20:c8:f3:98:47:06:b4:bd: b5:0b:65:fe:81:ea:1e:27:9c:4c:8e:24:ff:02:06:5b:bf:0b: 9e:00:a0:b5:7b:5c:73:eb:f0:5c:b6:58:a4:ee:73:8e:10:37: 45:37:87:41:fb:4b:ef:4e:16:43:69:46:65:89:b7:f3:8f:9f: 80:36:84:82:eb:91:3d:76:1f:15:d2:7d:3c:69:2c:fa:fd:65: 1b:e1:d1:49:f0:e5:81:03:31:bf:ea:9a:03:ca:3c:4a:13:a1: dc:80:0a:45:c1:01:1b:e1:ef:15:a8:f3:6d:4f:06:e2:88:fc: 74:fd:cd:ba:c0:08:60:64:78:09:a2:e3:3f:5a:a7:ba:fe:86: 60:82:5b:e5:91:34:fc:44:97:38:53:2a:a8:82:8a:50:a0:5c: 2a:4d:fd:5d:9c:05:f6:18:54:e2:a4:1d:20:7a:13:7d:62:a7: 68:04:69:fa:ee:fc:d7:6b:14:5d:07:4e:f6:21:05:16:12:16: e2:6f:3e:4e:22:3c:19:78:6f:3e:63:a1:db:ee:94:e8:c4:8d: 57:4e:32:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjUxMDE5MDkwOTI2WhcNMjUxMDI2MDkwOTI2WjAYMRYwFAYD VQQDEw02OGY0YWFjNi1kYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXGzYEsswj8KEWu2l57Q1LYPWcwvOABBCEdm79nnOan1jvwVTXsr3DLBUlcX Q4YFEOYplCgIvHDSwmg2xUH/9EcbpqWWeO2+b7hYIpqi4lOobwdQ7SxMq+EA00y7 oj+XrmvgM4QuCaEL1J5fQLdLCLsBOBhpQ0tBiItiiA3MqpZu5t/kbgIveiXQD/Fo iYitpOVbu8eBjlB6OhbaBnswNNBz4QuSCW9+U4cQrZS8Ltnmb7i82PE/Z56hcqXA ZplaSNHGy+1sDU9C81SG/H1ktEes9rTVAT0c/zUGm8J/UCV8N2LW7wVLG8HbR3qQ cJ9RzKOg5XQPnNFEq8AngNI4qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERLMwuS j+IFtlBrX6MCuVnW/J7zMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMGu8WQwT+cuTKZkck98OvupthEOUrJYYL4gtpIzGQemB+4P9Z7C1W bn8p2GPiIMjzmEcGtL21C2X+geoeJ5xMjiT/AgZbvwueAKC1e1xz6/Bctlik7nOO EDdFN4dB+0vvThZDaUZlibfzj5+ANoSC65E9dh8V0n08aSz6/WUb4dFJ8OWBAzG/ 6poDyjxKE6HcgApFwQEb4e8VqPNtTwbiiPx0/c26wAhgZHgJouM/Wqe6/oZgglvl kTT8RJc4UyqogopQoFwqTf1dnAX2GFTipB0gehN9YqdoBGn67vzXaxRdB072IQUW Ehbibz5OIjwZeG8+Y6Hb7pToxI1XTjIO -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:22 2025 by rpki-client