$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: E9K4TzpFKKUVbqm+r5BbUjOJtq+FsGzFj46j0jxSThg= Subject key identifier: F2:52:23:CA:CB:7F:42:80:74:B2:79:27:2A:AD:9C:7D:08:DA:50:69 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 0705 Signing time: Sat 18 Oct 2025 23:48:51 +0000 Manifest this update: Sat 18 Oct 2025 23:48:50 +0000 Manifest next update: Sat 25 Oct 2025 23:48:50 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: y16n+1Y6fHK7NnVZjeVhL9BB4w+m+ncVfjnIzVdUvzs=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Oct 18 23:48:50 2025 GMT Not After : Oct 25 23:48:50 2025 GMT Subject: CN=68f42763-5f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:5a:85:79:9a:a5:bf:20:02:82:98:aa:ba: 0d:57:05:ee:c4:c0:5b:74:0a:88:8b:35:eb:23:0d: 47:c9:e2:fc:5c:d1:f9:85:bd:57:4a:4a:a7:3d:07: 7a:01:61:cd:8e:5f:31:3b:be:ad:83:e2:de:92:49: cf:40:25:46:63:9c:01:04:2a:11:a5:aa:c0:c1:8b: 71:84:28:92:e2:07:91:59:eb:97:08:3e:46:af:40: 36:65:df:fc:91:9e:ff:95:04:39:1e:ff:c6:e2:3e: 8e:54:96:38:e8:db:e5:b2:54:0a:f4:16:03:af:28: 33:09:fa:a3:f2:95:48:c0:99:ff:28:7b:66:af:7b: 85:cb:08:a0:c4:1e:b8:1e:af:3f:39:3d:88:fb:1c: fb:05:33:ba:97:47:53:17:a3:8e:c8:27:5a:93:35: 64:2a:f6:06:3a:85:ee:79:db:37:7e:b4:c3:ab:94: 37:1c:a9:bd:45:20:98:b6:b5:80:f5:24:af:a3:cc: 10:cb:c0:f3:66:b2:f0:a7:8b:61:4c:35:96:39:43: b4:7d:d8:4e:c5:27:96:f5:9c:f6:0a:ce:3a:12:d9: c7:eb:16:e5:33:5b:90:8c:77:36:2c:9c:47:13:7c: 25:ea:47:34:e6:08:4b:dd:69:cf:10:5d:1b:d6:6d: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:23:CA:CB:7F:42:80:74:B2:79:27:2A:AD:9C:7D:08:DA:50:69 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:21:ab:f8:fc:74:83:2f:86:8f:25:4e:d7:91:e5:38:6f: d7:92:6b:b6:9b:11:20:23:bf:39:0c:8f:77:91:37:ae:ea:84: 1c:41:29:c8:c6:14:c4:13:70:cd:d0:2a:fa:4d:cf:c4:a5:80: 5c:ac:f7:8a:3e:6c:cc:f6:b7:a9:32:6f:54:d4:b5:c0:6e:58: 12:c5:3c:8e:da:b0:0a:bc:f5:77:8b:c5:92:5d:85:d4:da:71: c2:b4:97:ac:ea:36:94:58:d0:5e:1b:04:92:cb:f3:29:a3:b7: 65:2e:72:86:2d:f1:9a:4c:4f:10:37:a7:7c:e3:70:80:e7:56: 70:13:36:95:0c:ca:ee:27:04:c4:94:8a:dc:e0:dc:6a:ef:65: 71:6f:05:a0:51:8f:5f:6b:64:63:83:d5:17:fb:d1:77:2e:9d: fc:01:dc:83:1e:a9:fa:69:d4:49:ee:d5:a1:e6:89:1e:52:7f: f2:98:94:8c:af:06:f5:56:ed:8b:0f:32:f8:62:48:65:05:bf: e8:56:ff:5e:9c:ae:fa:55:d4:a9:d0:70:7a:ba:15:d3:bb:b5: 34:5b:b7:15:c1:0c:d3:b7:62:47:0c:e0:96:56:1f:7c:85:87: 85:5f:a3:d6:bd:f4:f1:a2:28:da:69:88:c9:3f:d7:47:46:97: 79:52:cf:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUxMDE4MjM0ODUwWhcNMjUxMDI1MjM0ODUwWjAYMRYwFAYD VQQDEw02OGY0Mjc2My01ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtilahXmapb8gAoKYqroNVwXuxMBbdAqIizXrIw1HyeL8XNH5hb1XSkqnPQd6 AWHNjl8xO76tg+LekknPQCVGY5wBBCoRparAwYtxhCiS4geRWeuXCD5Gr0A2Zd/8 kZ7/lQQ5Hv/G4j6OVJY46NvlslQK9BYDrygzCfqj8pVIwJn/KHtmr3uFywigxB64 Hq8/OT2I+xz7BTO6l0dTF6OOyCdakzVkKvYGOoXueds3frTDq5Q3HKm9RSCYtrWA 9SSvo8wQy8DzZrLwp4thTDWWOUO0fdhOxSeW9Zz2Cs46EtnH6xblM1uQjHc2LJxH E3wl6kc05ghL3WnPEF0b1m0WDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJSI8rL f0KAdLJ5JyqtnH0I2lBpMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwSiGr+Px0gy+GjyVO15HlOG/Xkmu2mxEgI785DI93kTeu6oQcQSnI xhTEE3DN0Cr6Tc/EpYBcrPeKPmzM9repMm9U1LXAblgSxTyO2rAKvPV3i8WSXYXU 2nHCtJes6jaUWNBeGwSSy/Mpo7dlLnKGLfGaTE8QN6d843CA51ZwEzaVDMruJwTE lIrc4Nxq72VxbwWgUY9fa2Rjg9UX+9F3Lp38AdyDHqn6adRJ7tWh5okeUn/ymJSM rwb1Vu2LDzL4YkhlBb/oVv9enK76VdSp0HB6uhXTu7U0W7cVwQzTt2JHDOCWVh98 hYeFX6PWvfTxoijaaYjJP9dHRpd5Us8/ -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:24 2025 by rpki-client