$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: DaX3/LZ5VC79xAJpOaCGXJkiJOa39IFYaZSoBrDGtTc= Subject key identifier: 4A:BA:60:42:75:3A:A6:7F:2D:8A:E8:26:9D:9E:6C:F7:D0:52:C1:D1 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 1764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 175A Signing time: Sat 18 Oct 2025 17:00:41 +0000 Manifest this update: Sat 18 Oct 2025 17:00:41 +0000 Manifest next update: Sat 25 Oct 2025 17:00:41 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: 3Xn+46QWUul6RAN4fmEN05G86kg2GZy4X0WnGKzSlck=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5988 (0x1764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Oct 18 17:00:41 2025 GMT Not After : Oct 25 17:00:41 2025 GMT Subject: CN=68f3c7b9-a7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:6a:8c:42:28:27:4b:6b:94:51:73:ed:7f: d4:cd:35:e1:74:f7:32:3b:0c:64:95:5c:88:27:bb: 9c:dc:fd:5c:01:c5:ec:ef:88:a1:aa:d0:56:1f:6a: 5f:1a:6e:9e:8d:ca:d2:4f:f8:3b:7c:a7:80:fe:91: 27:d9:76:96:51:0a:f9:c3:c7:4e:54:d1:83:c5:20: 0a:95:11:c5:42:f7:95:4b:ab:29:a2:0f:fc:b6:d0: 5a:4a:68:b4:92:0c:e7:bf:b9:0b:67:59:40:42:54: 51:b6:e1:87:98:f8:b1:24:5d:da:04:04:10:43:be: fc:f2:3e:ed:43:e6:59:fa:77:37:a3:f5:46:fa:45: 2d:1f:4b:f0:f8:bc:23:6f:14:87:5e:94:75:30:a6: 3c:85:0d:57:d6:6d:af:4f:9d:f7:8c:e0:88:3e:fb: 4c:2d:4f:4d:23:8a:bf:e0:e8:3a:55:cd:b3:32:2f: df:36:2c:6c:ee:29:a9:fb:99:79:8a:bb:c1:e3:86: 0c:5d:a0:04:ef:1a:09:d5:a2:6d:ea:80:c6:22:c8: 07:d3:f8:05:0e:e1:0e:6c:30:e8:d5:b7:45:80:3d: 4e:6b:eb:e0:0c:b8:40:75:21:89:1b:67:49:a1:5f: 69:6b:13:c0:f0:f5:13:6b:c8:9a:07:0a:2b:45:87: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BA:60:42:75:3A:A6:7F:2D:8A:E8:26:9D:9E:6C:F7:D0:52:C1:D1 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:90:31:40:86:7f:81:b3:b8:38:6e:60:2c:90:48:04:81:20: ee:f5:90:95:d4:97:f9:3e:49:58:4f:fc:45:1c:2b:39:74:1a: 10:52:cd:2c:f2:44:3d:40:18:a3:47:62:d6:ca:70:06:3a:80: 67:95:ed:48:56:bd:31:ea:4a:ee:66:39:14:b3:0a:f6:13:09: 0f:05:1b:e5:c8:a8:86:96:cc:15:2f:d2:0e:09:4e:b8:fb:07: 11:5c:6f:78:cf:43:d9:bf:73:89:7d:ad:af:a7:cd:42:0b:62: 9c:8f:d7:49:e8:0a:1b:a5:aa:75:72:f2:d5:2a:7d:1e:92:a9: 1c:55:1a:13:86:87:d3:28:03:4b:47:07:5a:74:45:e5:00:a7: 26:1f:fd:7e:4e:51:99:fb:a0:04:c7:78:6a:fe:f7:c6:97:b6: 38:33:15:a3:d3:a1:48:77:00:d4:6b:8e:89:e7:19:0f:58:93: 45:85:37:87:c4:0f:16:ef:2e:8a:98:a8:7a:54:82:bf:44:13: 23:1d:24:86:fa:9c:80:73:57:21:e9:dd:f3:9f:2e:77:99:df: 98:9b:70:e9:a9:86:3f:de:f1:b1:06:1e:f0:4c:d1:b2:46:34: b4:96:21:5e:76:01:15:3a:9c:d5:47:bd:34:16:0e:74:45:99: b9:e3:c2:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjUxMDE4MTcwMDQxWhcNMjUxMDI1MTcwMDQxWjAYMRYwFAYD VQQDEw02OGYzYzdiOS1hN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2FqjEIoJ0trlFFz7X/UzTXhdPcyOwxklVyIJ7uc3P1cAcXs74ihqtBWH2pf Gm6ejcrST/g7fKeA/pEn2XaWUQr5w8dOVNGDxSAKlRHFQveVS6spog/8ttBaSmi0 kgznv7kLZ1lAQlRRtuGHmPixJF3aBAQQQ7788j7tQ+ZZ+nc3o/VG+kUtH0vw+Lwj bxSHXpR1MKY8hQ1X1m2vT533jOCIPvtMLU9NI4q/4Og6Vc2zMi/fNixs7imp+5l5 irvB44YMXaAE7xoJ1aJt6oDGIsgH0/gFDuEObDDo1bdFgD1Oa+vgDLhAdSGJG2dJ oV9paxPA8PUTa8iaBworRYe7LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq6YEJ1 OqZ/LYroJp2ebPfQUsHRMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4kDFAhn+Bs7g4bmAskEgEgSDu9ZCV1Jf5PklYT/xFHCs5dBoQUs0s 8kQ9QBijR2LWynAGOoBnle1IVr0x6kruZjkUswr2EwkPBRvlyKiGlswVL9IOCU64 +wcRXG94z0PZv3OJfa2vp81CC2Kcj9dJ6Aobpap1cvLVKn0ekqkcVRoThofTKANL RwdadEXlAKcmH/1+TlGZ+6AEx3hq/vfGl7Y4MxWj06FIdwDUa46J5xkPWJNFhTeH xA8W7y6KmKh6VIK/RBMjHSSG+pyAc1ch6d3zny53md+Ym3DpqYY/3vGxBh7wTNGy RjS0liFedgEVOpzVR700Fg50RZm548L6 -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:48 2025 by rpki-client