$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: C8BQl1EVOkn/dk7yazCu0IKQbuaImBzZkSv8Y81HL88= Subject key identifier: E6:C5:B4:11:B1:B0:95:47:C7:BA:4D:C7:8C:96:98:78:92:40:AB:33 Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 30 Signing time: Sun 19 Oct 2025 11:10:41 +0000 Manifest this update: Sun 19 Oct 2025 11:10:40 +0000 Manifest next update: Sun 26 Oct 2025 11:10:40 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: pNsgcyfKd+E00Mlc7YENOeYwZVvNxjSy4uQ5tG4wO5c=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: 2Z7ZXOjsrVXv6QpvLW3sNTYWE2LGQXJRgdUTVxtlGsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: Oct 19 11:10:40 2025 GMT Not After : Oct 26 11:10:40 2025 GMT Subject: CN=68f4c731-e298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:f4:be:33:d4:c4:ed:0c:99:b0:c9:5f:b9: 2d:e8:7d:5e:3e:3c:9c:9f:b8:47:32:42:ab:40:1f: 35:3a:99:c7:e4:ba:da:53:51:be:32:90:9d:d5:c5: 23:07:23:e8:25:4d:98:0f:12:07:71:60:b1:67:a5: 69:76:a0:bf:c5:2e:36:71:4c:29:4b:0b:d8:fb:7e: e8:69:e8:ed:7a:92:36:b5:d5:30:a4:7b:ba:98:a9: b4:91:96:f7:ed:a9:0e:4d:76:fb:7c:6f:e1:9d:63: 70:6f:43:36:a6:05:9c:91:b7:38:3f:c1:4d:83:33: 61:a5:a8:ad:8c:04:c3:f6:4e:38:82:b8:bb:29:0c: 17:27:39:57:12:cf:56:db:92:73:31:74:8a:05:25: b8:ad:71:a7:af:8e:13:3a:5d:f1:41:e0:b5:c1:a4: 8d:ef:3d:d3:dc:e6:f0:ec:e8:51:b9:b0:76:5b:2d: 8c:be:29:ec:76:0f:ce:b2:ba:cc:a2:d3:a8:39:3a: 3a:4f:80:bd:eb:eb:f3:ed:5d:27:3e:59:77:a9:19: 74:6d:e6:4c:8e:8e:32:9b:e2:3b:96:5f:5d:e1:ce: c3:a6:df:0f:8e:86:59:75:49:bc:2b:46:10:ab:fe: 5f:d2:3a:0f:be:dd:da:f2:c9:6e:00:7f:28:30:25: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C5:B4:11:B1:B0:95:47:C7:BA:4D:C7:8C:96:98:78:92:40:AB:33 X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:70:a2:07:90:3f:f1:71:b8:09:c2:48:76:93:0a:5e:8f:41: 10:10:86:11:86:50:25:24:bf:5e:bc:a8:64:0f:76:e9:e8:6e: ea:42:42:80:fe:2a:c3:e5:c7:79:e9:32:1a:c7:ec:94:00:0f: 79:c4:05:bc:2a:28:f2:a2:b6:b9:33:c6:b6:5c:43:c2:a0:20: 77:fc:72:03:5e:b3:fb:04:47:b1:ae:e9:5d:64:96:f3:7d:65: f2:fc:07:7d:91:f4:88:2b:a2:b7:d1:af:09:69:41:3e:f0:22: 88:de:5c:51:17:4b:7d:ec:25:20:04:9d:c9:9c:75:76:4b:8a: d2:fe:62:0b:cb:1d:c2:b0:64:6a:e0:07:9b:5d:3e:ff:1f:94: 35:75:da:ac:56:4c:56:1e:55:5f:1d:b1:ff:ae:6e:b2:1d:1e: aa:fc:2a:7c:c9:d4:cd:93:55:fa:c9:ae:ee:43:e9:98:bf:65: f4:38:ef:d0:05:2c:35:40:ce:bf:df:a5:4b:91:1c:29:ca:2b: 31:ec:68:3b:2c:a6:8c:98:54:b4:83:62:d4:d5:ff:05:81:97: 59:c5:cd:bd:71:73:56:43:0c:12:f4:19:b3:0b:70:5d:d6:aa: 65:46:55:8d:42:56:56:20:f2:d5:3e:18:7e:99:6f:a8:cc:cb: 77:65:03:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUVENTExMC8GA1UEBRMoNjY3ODE3OUE1REE4RTVFOTFFN0Q5RERGQzlGRjVCMzU0 M0VENEQ3NDAeFw0yNTEwMTkxMTEwNDBaFw0yNTEwMjYxMTEwNDBaMBgxFjAUBgNV BAMTDTY4ZjRjNzMxLWUyOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvj/S+M9TE7QyZsMlfuS3ofV4+PJyfuEcyQqtAHzU6mcfkutpTUb4ykJ3VxSMH I+glTZgPEgdxYLFnpWl2oL/FLjZxTClLC9j7fuhp6O16kja11TCke7qYqbSRlvft qQ5Ndvt8b+GdY3BvQzamBZyRtzg/wU2DM2GlqK2MBMP2TjiCuLspDBcnOVcSz1bb knMxdIoFJbitcaevjhM6XfFB4LXBpI3vPdPc5vDs6FG5sHZbLYy+Kex2D86yusyi 06g5OjpPgL3r6/PtXSc+WXepGXRt5kyOjjKb4juWX13hzsOm3w+Ohll1SbwrRhCr /l/SOg++3dryyW4AfygwJUBZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5sW0EbGw lUfHuk3HjJaYeJJAqzMwHwYDVR0jBBgwFoAUZngXml2o5ekefZ3fyf9bNUPtTXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRUQ1L0FGQTQ2NDY0Njcy RjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm5nWG1sMm81ZWtlZlozZnlmOWJOVVB0VFhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RUQ1L0FGQTQ2NDY0NjcyRjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVr ZWZaM2Z5ZjliTlVQdFRYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEFwogeQP/FxuAnCSHaTCl6PQRAQhhGGUCUkv168qGQPdunobupCQoD+ KsPlx3npMhrH7JQAD3nEBbwqKPKitrkzxrZcQ8KgIHf8cgNes/sER7Gu6V1klvN9 ZfL8B32R9IgrorfRrwlpQT7wIojeXFEXS33sJSAEncmcdXZLitL+YgvLHcKwZGrg B5tdPv8flDV12qxWTFYeVV8dsf+ubrIdHqr8KnzJ1M2TVfrJru5D6Zi/ZfQ479AF LDVAzr/fpUuRHCnKKzHsaDsspoyYVLSDYtTV/wWBl1nFzb1xc1ZDDBL0GbMLcF3W qmVGVY1CVlYg8tU+GH6Zb6jMy3dlA1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:16 2025 by rpki-client