$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: EszJG9FxwGnaAgCGhFaQBK/w4xgBj8TrvnoG/pkipng= Subject key identifier: 58:9A:CE:63:06:6E:AC:BD:2F:1E:3E:88:4D:64:C4:AE:7E:9F:2C:86 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 01FF Signing time: Sun 19 Oct 2025 04:48:09 +0000 Manifest this update: Sun 19 Oct 2025 04:48:08 +0000 Manifest next update: Sun 26 Oct 2025 04:48:08 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: mlsjGBdWj/JDNOkd+gHwUeNqXu9HhTw+FNcTMamcNTQ=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: agT8B/KOnCHYQpfkAexNJsFp5T4PhjfgQqzkODGUs5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Oct 19 04:48:08 2025 GMT Not After : Oct 26 04:48:08 2025 GMT Subject: CN=68f46d88-606f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:b4:97:60:ab:fc:7c:5e:04:6f:f9:05:ea: 81:02:bc:eb:ca:42:3c:53:e7:d8:6f:c8:d1:b4:f3: c2:b8:99:1b:d2:20:b8:b1:ba:38:07:2f:4e:60:32: f5:37:f4:45:29:ee:79:3a:24:ca:16:cc:64:36:6e: af:a9:16:eb:25:5d:d9:27:c3:f3:d1:72:c2:6f:b0: 2a:d9:af:6d:84:6e:ca:34:cd:02:57:d0:0d:cc:6a: 45:7d:81:80:24:f5:5f:c1:34:15:81:52:fc:02:c5: bb:43:23:2d:a5:e1:60:22:0f:d9:35:d5:5e:b5:21: 9c:56:b2:a7:11:12:b7:99:87:5c:c5:de:52:7d:dc: 65:59:b5:70:8d:95:98:7b:b8:53:41:7f:70:e1:f3: bf:02:2c:3b:1d:e5:e6:6d:dc:a2:cf:59:83:84:08: 1a:19:c3:56:03:ae:5c:67:cd:4d:47:a4:32:df:ad: 89:06:c3:96:42:15:12:9a:d8:17:14:4c:9f:b8:9a: d8:28:31:1a:92:70:50:a3:21:24:c7:df:53:13:bf: 93:b0:74:c4:18:a7:e6:f0:8b:c3:1b:25:3c:c5:56: d9:c2:82:72:55:32:0e:f1:be:39:a8:fb:0b:e8:55: 0c:61:ef:b7:85:5c:c7:ef:5e:f0:f4:be:2c:85:81: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9A:CE:63:06:6E:AC:BD:2F:1E:3E:88:4D:64:C4:AE:7E:9F:2C:86 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:46:b1:d4:79:ec:26:da:f6:21:66:f5:97:62:72:de:40:b6: 33:bc:ef:71:7b:7f:3e:73:17:54:cb:ac:7c:9d:d3:3e:9a:1d: de:df:61:27:bf:fc:7f:df:55:ba:4f:a1:ee:bc:06:a7:19:13: a0:ec:40:92:c9:00:f9:1f:01:b1:e3:ba:9c:1a:b8:6e:1e:f4: 57:d8:24:d8:5f:91:ce:d8:15:e0:5f:cf:f4:42:5c:ae:c4:22: 19:21:7d:9a:89:ea:af:99:9d:5e:74:31:a4:fd:ba:8c:bd:9f: 9d:e1:6f:4b:9b:28:8c:4d:ed:6b:8b:ea:d1:47:de:90:ef:a0: af:5d:93:6f:0b:df:77:50:dc:31:21:be:44:c9:ac:ba:5f:5a: c8:a2:55:52:5f:2f:5f:a7:23:3a:5d:3e:b4:1a:5d:33:86:35: d4:72:4c:36:13:2e:dd:de:0c:ec:3b:33:09:03:5d:ae:d2:ee: 53:16:5d:73:03:51:8f:f3:38:03:ac:b8:5a:09:e3:6a:4a:4c: 50:bf:ec:88:a2:5d:55:66:50:41:e7:b7:e0:53:d1:60:66:65: 90:b8:c4:60:50:2e:b5:21:f0:fc:d4:8c:47:05:08:38:0e:2a: 89:02:8a:d3:54:fb:52:d5:c8:a8:7b:30:66:48:18:c2:e9:f8: 1b:fc:b2:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjUxMDE5MDQ0ODA4WhcNMjUxMDI2MDQ0ODA4WjAYMRYwFAYD VQQDEw02OGY0NmQ4OC02MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsK0l2Cr/HxeBG/5BeqBArzrykI8U+fYb8jRtPPCuJkb0iC4sbo4By9OYDL1 N/RFKe55OiTKFsxkNm6vqRbrJV3ZJ8Pz0XLCb7Aq2a9thG7KNM0CV9ANzGpFfYGA JPVfwTQVgVL8AsW7QyMtpeFgIg/ZNdVetSGcVrKnERK3mYdcxd5SfdxlWbVwjZWY e7hTQX9w4fO/Aiw7HeXmbdyiz1mDhAgaGcNWA65cZ81NR6Qy362JBsOWQhUSmtgX FEyfuJrYKDEaknBQoyEkx99TE7+TsHTEGKfm8IvDGyU8xVbZwoJyVTIO8b45qPsL 6FUMYe+3hVzH717w9L4shYET+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiazmMG bqy9Lx4+iE1kxK5+nyyGMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVRrHUeewm2vYhZvWXYnLeQLYzvO9xe38+cxdUy6x8ndM+mh3e32En v/x/31W6T6HuvAanGROg7ECSyQD5HwGx47qcGrhuHvRX2CTYX5HO2BXgX8/0Qlyu xCIZIX2aieqvmZ1edDGk/bqMvZ+d4W9LmyiMTe1ri+rRR96Q76CvXZNvC993UNwx Ib5Eyay6X1rIolVSXy9fpyM6XT60Gl0zhjXUckw2Ey7d3gzsOzMJA12u0u5TFl1z A1GP8zgDrLhaCeNqSkxQv+yIol1VZlBB57fgU9FgZmWQuMRgUC61IfD81IxHBQg4 DiqJAorTVPtS1cioezBmSBjC6fgb/LKv -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:58 2025 by rpki-client