$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: Pn6sAgEv9IG+tGiZ2Mapshp1Y4oYy/YeFziD0Qf21yE= Subject key identifier: 9D:87:DC:6B:B1:D9:A8:9D:F3:9F:97:57:2B:43:D5:AE:C5:76:08:82 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 1B Signing time: Sun 19 Oct 2025 11:25:49 +0000 Manifest this update: Sun 19 Oct 2025 11:25:49 +0000 Manifest next update: Sun 26 Oct 2025 11:25:49 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: 89M0vQIXRvl4t7OarhSwsk6RsXzo4nIEMPzAgIfRAGo=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nG9sdc441APZ2AYq+eucZAUUY/j7wEx0tfcPV/Vx/Zg=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Oct 19 11:25:49 2025 GMT Not After : Oct 26 11:25:49 2025 GMT Subject: CN=68f4cabd-a156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:fb:d8:5a:1e:df:6c:55:06:87:99:5d:1c: 4c:85:b9:dd:9b:fa:62:7d:5e:d1:02:3b:c0:60:67: c5:df:f8:ab:4b:4e:22:36:c9:46:9e:8a:5c:41:3d: 1a:ca:3d:b4:ed:b2:d6:0d:aa:8e:fc:a8:b0:a4:bb: 52:fc:6e:60:56:10:23:57:1f:5f:60:2e:5e:e5:88: f2:74:b4:a5:96:4e:80:fd:6a:5d:41:be:1b:e8:9e: 24:55:d8:63:de:d1:c0:bb:69:46:1b:e1:b0:56:07: 7b:24:c7:46:84:6d:32:96:37:b6:70:26:a4:d2:69: 2f:83:e6:9c:d7:15:d1:17:26:64:07:ff:3a:5d:fe: cf:81:ae:7e:8b:c3:d0:7f:20:30:02:47:07:d2:ac: 92:47:25:5e:b1:25:b6:86:a8:3b:3e:a7:d8:45:14: b5:df:9c:54:0e:47:55:c7:6c:eb:75:dd:8c:1e:c8: ff:c4:23:31:a2:17:7e:01:39:d7:1f:af:7f:ff:60: d4:5c:00:15:52:75:71:28:1f:34:6d:e4:05:ad:60: d1:31:6f:1c:f6:1a:cf:6f:85:e0:8f:de:a0:7c:c5: e8:4f:2c:41:00:11:99:f2:b1:39:e0:79:0d:3a:8a: d9:2a:52:cb:df:a1:5e:d7:dd:57:40:1b:d2:a2:9c: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:87:DC:6B:B1:D9:A8:9D:F3:9F:97:57:2B:43:D5:AE:C5:76:08:82 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:65:31:92:89:4e:fa:ba:bb:5e:58:f0:c1:51:c8:56:27:0a: 49:e7:c0:e4:19:9b:1f:f9:48:57:5a:51:2d:e4:67:2d:1c:74: da:bf:ba:78:83:88:5e:99:b3:26:c9:4f:cb:2a:5b:3a:ae:32: 5d:2f:e0:ab:ab:f7:4b:64:84:c3:a4:4c:1e:cf:8d:bd:2b:58: d5:86:58:e2:a8:63:80:ca:28:e0:c6:f4:52:b7:cb:b5:2d:9c: eb:fd:86:50:c4:8f:de:87:f3:da:02:08:c8:bd:66:36:dd:f8: e4:84:37:42:4b:29:d0:1a:2f:34:cc:56:d5:7a:fd:33:05:c0: 84:a3:26:e9:fa:a0:3b:cf:2c:62:0c:5c:56:2e:f7:ae:fb:4a: a8:cf:c5:7b:a5:4e:7a:4a:90:63:f7:c9:0f:a0:77:11:45:d4: 91:7a:47:97:32:da:82:47:00:7b:27:22:b1:5a:66:aa:84:ca: 59:ce:d1:af:0c:88:64:6e:26:72:3e:81:fc:4d:e5:f3:a9:67: ad:06:4b:66:58:9e:7a:cb:c5:d4:0f:ec:da:fb:58:2e:1d:3e: 4f:82:c1:00:76:29:a2:35:dc:2d:b2:36:c7:52:3a:2f:6e:8e: e0:43:8b:c8:16:85:4b:ed:83:44:e3:4f:3c:1c:6a:20:ea:5f: e3:1e:2f:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNTEwMTkxMTI1NDlaFw0yNTEwMjYxMTI1NDlaMBgxFjAUBgNV BAMTDTY4ZjRjYWJkLWExNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEe/vYWh7fbFUGh5ldHEyFud2b+mJ9XtECO8BgZ8Xf+KtLTiI2yUaeilxBPRrK PbTtstYNqo78qLCku1L8bmBWECNXH19gLl7liPJ0tKWWToD9al1BvhvoniRV2GPe 0cC7aUYb4bBWB3skx0aEbTKWN7ZwJqTSaS+D5pzXFdEXJmQH/zpd/s+Brn6Lw9B/ IDACRwfSrJJHJV6xJbaGqDs+p9hFFLXfnFQOR1XHbOt13YweyP/EIzGiF34BOdcf r3//YNRcABVSdXEoHzRt5AWtYNExbxz2Gs9vheCP3qB8xehPLEEAEZnysTngeQ06 itkqUsvfoV7X3VdAG9KinGL/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnYfca7HZ qJ3zn5dXK0PVrsV2CIIwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGRlMZKJTvq6u15Y8MFRyFYnCknnwOQZmx/5SFdaUS3kZy0cdNq/uniD iF6ZsybJT8sqWzquMl0v4Kur90tkhMOkTB7Pjb0rWNWGWOKoY4DKKODG9FK3y7Ut nOv9hlDEj96H89oCCMi9Zjbd+OSEN0JLKdAaLzTMVtV6/TMFwISjJun6oDvPLGIM XFYu9677SqjPxXulTnpKkGP3yQ+gdxFF1JF6R5cy2oJHAHsnIrFaZqqEylnO0a8M iGRuJnI+gfxN5fOpZ60GS2ZYnnrLxdQP7Nr7WC4dPk+CwQB2KaI13C2yNsdSOi9u juBDi8gWhUvtg0TjTzwcaiDqX+MeL48= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:00 2025 by rpki-client