$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: lMmr0fJfMoEa1G2+Ja/HQ4hIeN83YYT/hIhJKXc6SqE= Subject key identifier: 6E:25:56:ED:C2:8B:68:BF:5D:E6:DF:B8:DF:06:20:CD:A4:FD:E2:49 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: A3 Signing time: Sun 19 Oct 2025 09:28:43 +0000 Manifest this update: Sun 19 Oct 2025 09:28:43 +0000 Manifest next update: Sun 26 Oct 2025 09:28:43 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: 1BmynacTOW//vJ/eJYu2GW0b1mcAC3/UvD6OmLDN20A=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Oct 19 09:28:43 2025 GMT Not After : Oct 26 09:28:43 2025 GMT Subject: CN=68f4af4b-0ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:0c:87:f6:27:5f:c5:95:2e:45:80:2c:b5: bb:21:ba:4e:57:25:38:86:03:56:3a:ba:f7:a0:ae: 75:84:36:81:69:8c:cd:a2:94:9d:bf:16:62:76:31: ea:cf:66:a7:50:39:90:77:3c:ca:fc:fa:f2:b2:a1: d6:47:48:e3:0d:5d:80:3c:7f:0f:6e:65:81:f7:8f: a0:5f:1b:29:66:b8:80:b7:2e:2f:5b:d1:93:c4:d5: f8:a0:04:73:ef:51:82:7a:95:ee:d9:ac:08:0d:b2: 76:a2:d3:15:3b:f1:1c:1f:39:76:38:7e:12:9b:98: a2:1d:ba:cd:61:76:44:70:fb:e8:9f:16:27:2a:e8: f9:9b:d7:a7:73:99:6f:5c:b0:3e:15:ab:0b:f0:5e: 82:99:0f:66:75:44:da:87:cf:92:a4:20:6c:6f:29: c7:93:ae:18:6d:2c:cd:08:5c:ec:00:eb:d1:57:6b: 57:dd:99:4b:46:26:30:58:6a:3e:a1:6f:2c:e3:5a: 03:ee:88:67:ff:01:dc:6f:78:a1:5c:08:89:04:3d: bf:e3:0c:0e:bf:c2:44:2f:46:14:38:a4:30:65:b6: c3:e2:cf:a5:85:2f:42:91:80:db:3c:c7:85:a4:2a: c8:5a:bb:fe:5e:6f:d4:ee:3f:3b:be:c3:9f:32:4d: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:25:56:ED:C2:8B:68:BF:5D:E6:DF:B8:DF:06:20:CD:A4:FD:E2:49 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ef:fb:d8:d3:19:69:9a:65:5b:0e:58:4f:92:a3:72:68:8e: 4f:45:63:2f:d1:19:c1:89:97:42:b1:cf:10:8d:cd:c9:cc:e2: e4:f3:de:4e:ef:87:9b:7c:87:d0:ab:ee:64:58:f7:df:b5:67: 9c:17:e3:07:bf:5e:b7:03:a4:aa:6f:dc:44:5d:b0:2c:66:0e: 01:28:b2:b0:81:83:0e:35:58:01:5d:89:c8:1f:01:df:00:2d: a9:3f:35:6c:f2:90:da:2f:9f:9a:2f:a1:cc:a1:55:d3:d1:44: 5a:6b:c2:38:a6:7c:00:0c:31:21:5e:dd:12:76:5d:7b:62:12: 26:ab:18:cd:8a:67:85:55:87:25:4c:d1:f5:64:55:fc:17:46: 0f:f1:46:a5:49:36:83:d6:cc:17:06:43:d2:8b:65:ea:4b:dd: eb:19:e9:4b:84:28:3f:0b:f3:c4:86:da:e1:df:a2:7c:b9:f9: 46:79:76:09:15:68:d2:ef:06:ec:f7:bd:ae:6f:e2:cc:38:6d: 1a:24:2e:a5:e5:83:1b:d1:9c:10:76:96:2c:f0:7c:09:67:c1: 28:54:63:f8:54:cb:8a:7e:4a:50:2c:af:8a:0e:70:f5:87:7c: 43:68:ff:a7:50:9a:80:25:c3:89:12:cb:9a:74:3c:35:37:83: fd:1a:07:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx N0QwMjExQjUwHhcNMjUxMDE5MDkyODQzWhcNMjUxMDI2MDkyODQzWjAYMRYwFAYD VQQDEw02OGY0YWY0Yi0wYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJQMh/YnX8WVLkWALLW7IbpOVyU4hgNWOrr3oK51hDaBaYzNopSdvxZidjHq z2anUDmQdzzK/PrysqHWR0jjDV2APH8PbmWB94+gXxspZriAty4vW9GTxNX4oARz 71GCepXu2awIDbJ2otMVO/EcHzl2OH4Sm5iiHbrNYXZEcPvonxYnKuj5m9enc5lv XLA+FasL8F6CmQ9mdUTah8+SpCBsbynHk64YbSzNCFzsAOvRV2tX3ZlLRiYwWGo+ oW8s41oD7ohn/wHcb3ihXAiJBD2/4wwOv8JEL0YUOKQwZbbD4s+lhS9CkYDbPMeF pCrIWrv+Xm/U7j87vsOfMk3c9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4lVu3C i2i/XebfuN8GIM2k/eJJMB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq ZFFockxQams0R2tYMENFYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI7/vY0xlpmmVbDlhPkqNyaI5PRWMv0RnBiZdCsc8Qjc3JzOLk895O 74ebfIfQq+5kWPfftWecF+MHv163A6Sqb9xEXbAsZg4BKLKwgYMONVgBXYnIHwHf AC2pPzVs8pDaL5+aL6HMoVXT0URaa8I4pnwADDEhXt0Sdl17YhImqxjNimeFVYcl TNH1ZFX8F0YP8UalSTaD1swXBkPSi2XqS93rGelLhCg/C/PEhtrh36J8uflGeXYJ FWjS7wbs972ub+LMOG0aJC6l5YMb0ZwQdpYs8HwJZ8EoVGP4VMuKfkpQLK+KDnD1 h3xDaP+nUJqAJcOJEsuadDw1N4P9GgfF -----END CERTIFICATE-----Generated at Mon Oct 20 15:24:19 2025 by rpki-client