$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: 4tTg2ymc2jmsYPZQXUZSAQ7tjeHOSGA4qL+6s67Y0PM= Subject key identifier: C9:3D:2D:E3:F8:8F:E2:3F:C4:FB:94:11:73:ED:A4:2D:11:53:8D:BD Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 34 Signing time: Sun 19 Oct 2025 11:07:28 +0000 Manifest this update: Sun 19 Oct 2025 11:07:28 +0000 Manifest next update: Sun 26 Oct 2025 11:07:28 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: SavrMCTsm8uvYwiwUG7MuXbwxwueolRNeJ6PPwQxGDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Oct 19 11:07:28 2025 GMT Not After : Oct 26 11:07:28 2025 GMT Subject: CN=68f4c670-2e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:9c:d0:79:1b:08:fd:b3:83:b5:84:f7:29: c8:f0:a6:1b:b7:96:e5:58:45:43:7c:55:5f:42:7b: d1:ad:21:c0:a7:17:e7:0b:9c:5b:88:b4:c1:75:6f: 74:81:9c:2b:82:6c:71:d5:48:10:76:e6:c7:a8:c3: 37:02:31:ba:dc:b5:7a:71:f6:55:db:d8:73:8b:f4: e7:ee:c7:9d:6d:7f:44:f4:e4:e3:b3:18:04:f5:91: 71:33:e7:cf:e8:4f:61:e3:b2:c4:08:0b:fd:02:40: 61:27:81:40:35:a7:84:28:e7:36:7a:2b:3b:78:2e: 9d:8f:9d:8f:b1:9c:c9:0c:d2:b0:0d:37:4d:73:09: 3c:32:9e:8b:c1:ab:e0:a2:1e:0e:c3:4f:f4:70:ba: 6e:a2:b8:d5:67:6e:d7:29:28:1a:9f:92:a1:1b:32: eb:e6:68:e4:2e:e5:d5:90:72:d3:9d:2c:cd:61:da: f7:a8:cd:d9:06:bb:a2:2b:fc:14:43:bb:29:52:b3: b0:64:d3:37:41:65:81:2d:e3:98:e7:24:a6:99:e8: 92:51:e8:b6:41:84:48:c6:cd:9c:dd:ea:f1:a8:48: 42:1c:c7:8e:7f:b2:a6:65:97:25:b1:60:2a:9c:b9: 48:6f:ba:94:47:c4:4f:42:92:3a:86:de:a6:db:4c: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3D:2D:E3:F8:8F:E2:3F:C4:FB:94:11:73:ED:A4:2D:11:53:8D:BD X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:6d:b9:00:bb:90:c4:a1:08:83:34:7b:72:f0:8a:19:ed:1b: f3:0f:31:e4:30:cd:83:0d:d8:7e:90:a7:db:6a:ef:2b:16:30: 60:fc:b2:d7:01:c8:28:af:86:80:fe:73:14:fd:7e:83:aa:d5: 94:f9:c1:fc:57:37:58:cd:f2:2b:84:23:17:95:a4:82:b7:bf: 46:35:7a:a0:2f:3d:e3:67:1a:e7:d8:be:23:3b:f5:bf:38:56: 6d:e8:36:3c:c7:99:39:04:a1:fc:d3:36:f7:0c:b4:15:e3:ca: 38:10:95:4e:f1:cc:3b:07:09:6a:0e:00:c3:52:b7:2a:58:0e: 81:33:3a:71:07:b5:83:97:48:dc:59:09:22:68:a6:e8:bd:14: 3c:2e:6f:f2:6d:0c:b5:e7:63:90:65:5f:6a:5c:84:87:2f:44: 3e:09:89:35:54:9d:25:89:94:01:b4:a2:91:01:94:50:aa:dd: 5b:37:00:8c:95:16:75:33:f4:2e:fd:8c:3b:98:84:e6:4e:af: 84:de:9d:a0:d9:39:9c:40:23:a4:c3:3e:4d:0a:27:09:eb:1f: 56:46:a8:d7:3b:fb:f0:9d:63:09:93:e5:75:a6:eb:99:83:1d: 00:e1:ca:54:95:2c:2f:df:e1:3e:5e:9b:24:e5:6c:f0:8b:89: 1e:85:a4:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNTEwMTkxMTA3MjhaFw0yNTEwMjYxMTA3MjhaMBgxFjAUBgNV BAMTDTY4ZjRjNjcwLTJlOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjV5zQeRsI/bODtYT3Kcjwphu3luVYRUN8VV9Ce9GtIcCnF+cLnFuItMF1b3SB nCuCbHHVSBB25seowzcCMbrctXpx9lXb2HOL9Ofux51tf0T05OOzGAT1kXEz58/o T2HjssQIC/0CQGEngUA1p4Qo5zZ6Kzt4Lp2PnY+xnMkM0rANN01zCTwynovBq+Ci Hg7DT/Rwum6iuNVnbtcpKBqfkqEbMuvmaOQu5dWQctOdLM1h2veozdkGu6Ir/BRD uylSs7Bk0zdBZYEt45jnJKaZ6JJR6LZBhEjGzZzd6vGoSEIcx45/sqZllyWxYCqc uUhvupRHxE9CkjqG3qbbTBiZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyT0t4/iP 4j/E+5QRc+2kLRFTjb0wHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHFtuQC7kMShCIM0e3LwihntG/MPMeQwzYMN2H6Qp9tq7ysWMGD8stcB yCivhoD+cxT9foOq1ZT5wfxXN1jN8iuEIxeVpIK3v0Y1eqAvPeNnGufYviM79b84 Vm3oNjzHmTkEofzTNvcMtBXjyjgQlU7xzDsHCWoOAMNStypYDoEzOnEHtYOXSNxZ CSJopui9FDwub/JtDLXnY5BlX2pchIcvRD4JiTVUnSWJlAG0opEBlFCq3Vs3AIyV FnUz9C79jDuYhOZOr4TenaDZOZxAI6TDPk0KJwnrH1ZGqNc7+/CdYwmT5XWm65mD HQDhylSVLC/f4T5emyTlbPCLiR6FpOc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:07:58 2025 by rpki-client