$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json) Hash identifier: AqDV7cmo8pIaXUWoo1HvlKZL1399V3KrMnCjVFNF3wc= Subject key identifier: 97:71:C4:C1:A3:39:62:63:4B:FD:BA:0D:77:BF:00:C0:71:6D:02:A0 Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft Manifest number: 74 Signing time: Sun 19 Oct 2025 10:10:37 +0000 Manifest this update: Sun 19 Oct 2025 10:10:37 +0000 Manifest next update: Sun 26 Oct 2025 10:10:37 +0000 Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: 3vHPUbTxW8VHM8OULrzYUIMFVV3p1KSceipjdt4RKV8=) 2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Validity Not Before: Oct 19 10:10:37 2025 GMT Not After : Oct 26 10:10:37 2025 GMT Subject: CN=68f4b91d-c266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:05:b9:62:e4:c3:bc:14:bf:34:cd:51:97: ad:ee:2d:d9:e3:b7:d0:0b:37:1d:27:5d:ee:7d:87: d3:cb:db:42:21:f7:42:f1:b5:ea:e8:82:dd:4f:f1: ea:d5:1f:ee:e5:18:e0:ee:c3:43:9f:36:18:f4:af: b7:0c:d7:91:45:62:26:23:32:45:97:66:5e:d0:e7: 6f:b0:43:73:a5:74:0d:af:54:5f:34:a1:49:a1:78: 05:f5:fa:f2:6b:57:b9:1a:9d:79:bd:58:09:57:ec: 85:bc:77:a7:5d:97:fe:c6:7f:41:bd:51:d5:23:21: c8:96:db:9a:a4:f9:fa:8f:92:8a:bf:29:7a:36:cb: c5:65:7c:26:ee:7c:0a:a6:6e:a2:87:57:3e:80:f0: 45:c8:e3:00:c0:2a:df:9f:8c:3c:4b:96:b5:b7:2e: 83:db:db:8f:5e:36:e8:28:74:7e:75:71:83:b5:39: 1b:a0:c7:d3:e6:09:7d:26:66:e8:3b:0f:84:52:d8: 49:4e:03:95:52:eb:e7:ee:d8:b0:c2:5d:9b:00:ff: fa:21:2d:d8:b0:16:45:f1:7b:ec:65:cb:cf:eb:a3: 6d:8e:72:04:79:00:30:c6:b8:c5:46:3f:b3:45:8a: e8:aa:6e:ac:ab:69:9a:fd:ce:fd:45:90:fa:79:d6: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:71:C4:C1:A3:39:62:63:4B:FD:BA:0D:77:BF:00:C0:71:6D:02:A0 X509v3 Authority Key Identifier: keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:89:11:8c:a2:24:e9:2f:4d:cd:a6:e9:1b:57:1c:b1:63:60: 57:a7:24:05:79:c1:8f:83:3c:ef:58:36:82:9f:55:b4:5e:ae: d7:df:43:a4:bf:3c:e1:09:f3:3e:cb:63:45:87:43:89:b4:a9: a8:c9:d2:a7:1d:c4:54:f5:01:03:b6:d3:ca:99:79:2c:1c:99: cf:cf:fd:4b:ab:2b:8e:3e:8a:f7:91:79:dd:0b:a9:15:8f:04: 70:f3:12:fc:92:d3:c1:3b:f1:97:c5:35:05:13:3f:39:24:64: e1:c2:38:79:d6:ad:df:12:a2:ee:30:c8:04:87:37:fc:5c:21: 42:15:de:2d:ed:63:9f:5b:cb:e9:b4:f5:84:af:13:1b:fc:38: ef:46:76:7e:fd:46:85:fb:34:c6:f7:fd:df:19:58:f4:74:2c: 81:c4:83:4d:4f:e1:f0:f3:f5:8d:df:1d:75:31:80:29:68:84: f6:8a:d3:9d:57:16:18:5b:4a:e6:c2:30:d7:ba:88:d8:d0:35: ed:84:df:8e:f8:5e:b0:0a:b1:2e:79:31:f2:4e:d1:0d:26:cb: e6:61:17:f7:7e:81:12:8c:04:48:d4:85:cc:9b:8f:93:a9:c7: 93:c3:96:e2:7e:70:13:b0:7a:20:d5:67:58:90:9e:93:a8:cc: 5a:e2:7f:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz QTYzQzQ0OTAeFw0yNTEwMTkxMDEwMzdaFw0yNTEwMjYxMDEwMzdaMBgxFjAUBgNV BAMTDTY4ZjRiOTFkLWMyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrKAW5YuTDvBS/NM1Rl63uLdnjt9ALNx0nXe59h9PL20Ih90Lxterogt1P8erV H+7lGODuw0OfNhj0r7cM15FFYiYjMkWXZl7Q52+wQ3OldA2vVF80oUmheAX1+vJr V7kanXm9WAlX7IW8d6ddl/7Gf0G9UdUjIciW25qk+fqPkoq/KXo2y8VlfCbufAqm bqKHVz6A8EXI4wDAKt+fjDxLlrW3LoPb249eNugodH51cYO1ORugx9PmCX0mZug7 D4RS2ElOA5VS6+fu2LDCXZsA//ohLdiwFkXxe+xly8/ro22OcgR5ADDGuMVGP7NF iuiqbqyraZr9zv1FkPp51qsbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl3HEwaM5 YmNL/boNd78AwHFtAqAwHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2 NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4 VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAqJEYyiJOkvTc2m6RtXHLFjYFenJAV5wY+DPO9YNoKfVbRertffQ6S/ POEJ8z7LY0WHQ4m0qajJ0qcdxFT1AQO208qZeSwcmc/P/UurK44+iveRed0LqRWP BHDzEvyS08E78ZfFNQUTPzkkZOHCOHnWrd8Sou4wyASHN/xcIUIV3i3tY59by+m0 9YSvExv8OO9Gdn79RoX7NMb3/d8ZWPR0LIHEg01P4fDz9Y3fHXUxgClohPaK051X FhhbSubCMNe6iNjQNe2E3474XrAKsS55MfJO0Q0my+ZhF/d+gRKMBEjUhcybj5Op x5PDluJ+cBOweiDVZ1iQnpOozFrif98= -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:03 2025 by rpki-client