$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: 1VLq1HpMjKHSlWLY++7KKZt5JV6Dj4XNcVQdFOGaVbQ= Subject key identifier: FE:E9:26:7A:27:70:39:38:19:3E:96:63:06:80:27:AF:83:B4:62:95 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 094B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 0939 Signing time: Sat 18 Oct 2025 21:20:10 +0000 Manifest this update: Sat 18 Oct 2025 21:20:09 +0000 Manifest next update: Sat 25 Oct 2025 21:20:09 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: 35O6cwxGndrSCRt4HxHCpqFU+lJiMb+YF1oqiWDo0PQ=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: 92JEuDCm1e9WQ8I7GIzUujJiphmCChYv7JlAxtt8zqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Oct 18 21:20:09 2025 GMT Not After : Oct 25 21:20:09 2025 GMT Subject: CN=68f40489-3d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:66:60:a9:af:9c:95:fd:12:c5:f1:5d:3c: 76:2e:d5:c3:2e:82:66:97:7d:0d:1f:39:06:99:51: a1:37:3b:73:ed:81:f5:34:d5:ee:98:7e:bf:ba:db: 3b:18:9b:45:5a:c1:6f:30:a0:59:11:f6:07:2b:84: 1c:f8:15:e4:23:64:96:80:29:39:cf:6b:65:17:28: 09:79:32:b0:a5:9c:f1:e5:8f:f7:af:16:2b:bc:4a: b2:74:9f:cc:bf:f8:17:62:7c:aa:fe:e2:12:ca:af: 67:32:bb:89:e5:69:cf:16:da:a2:d6:29:f7:f0:aa: eb:f0:01:f7:2e:fb:4f:5a:88:fc:6e:0a:12:a0:7e: da:ea:95:be:a1:47:3f:fa:62:22:ba:d9:5a:fa:8c: 6b:8a:4d:f3:05:a4:a3:5d:34:07:4d:de:f9:67:b5: 31:56:6b:26:d1:00:38:ac:22:f1:93:b0:f1:01:be: 26:e0:02:1a:20:cd:66:55:1a:fb:36:62:b5:06:1f: 47:47:5a:99:29:9e:f7:f1:ce:e9:ce:5f:bb:46:e8: 85:dd:59:d8:b5:1f:28:40:92:99:f1:4e:bf:a6:c1: dc:e1:36:02:0e:b9:21:01:f9:9b:c3:db:ac:f6:0e: 34:86:bd:5d:7f:3f:c0:07:1e:d3:f8:e0:e8:a7:43: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:26:7A:27:70:39:38:19:3E:96:63:06:80:27:AF:83:B4:62:95 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3f:75:97:af:fd:03:3f:bc:c8:5f:05:99:78:f4:ee:7a:fe: d8:13:5d:5d:ad:0d:db:df:29:3d:ee:94:54:9b:34:20:7b:37: b6:36:19:30:8e:41:bc:3a:43:fb:e3:c0:20:dc:9f:c6:58:9f: 23:ed:36:55:7e:d7:dd:a1:a0:ff:40:07:ce:ed:3a:6b:21:35: 03:95:50:18:2c:ac:0e:e9:63:03:60:cf:bf:33:35:d6:4b:03: c7:37:1a:41:1b:bd:41:c3:b0:be:b1:2e:67:d2:23:18:15:7a: d3:88:45:98:b9:1d:6c:e1:30:4d:e9:47:2a:51:4e:63:44:b9: 44:64:7f:4d:83:cb:27:46:18:6e:25:9d:54:25:11:70:23:78: 65:44:b1:5b:3b:90:6d:c2:6d:ea:5e:09:f6:62:b6:8e:7e:86: fc:25:5f:b0:23:41:76:c3:62:ed:95:40:19:3f:7a:46:cf:aa: 31:44:0c:d8:90:63:46:a7:2e:6b:ff:a8:00:ee:66:53:51:e5: a8:b1:7e:5d:cf:f4:33:b7:61:1a:f3:f4:a7:3e:6a:59:9c:c4: c3:40:75:e1:50:f7:e0:bf:94:6f:5b:6b:28:45:c0:dd:0f:18: 05:16:91:88:42:ea:15:e1:9c:ef:94:71:c9:5a:ed:65:e0:05: e5:0d:6c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjUxMDE4MjEyMDA5WhcNMjUxMDI1MjEyMDA5WjAYMRYwFAYD VQQDEw02OGY0MDQ4OS0zZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf9mYKmvnJX9EsXxXTx2LtXDLoJml30NHzkGmVGhNztz7YH1NNXumH6/uts7 GJtFWsFvMKBZEfYHK4Qc+BXkI2SWgCk5z2tlFygJeTKwpZzx5Y/3rxYrvEqydJ/M v/gXYnyq/uISyq9nMruJ5WnPFtqi1in38Krr8AH3LvtPWoj8bgoSoH7a6pW+oUc/ +mIiutla+oxrik3zBaSjXTQHTd75Z7UxVmsm0QA4rCLxk7DxAb4m4AIaIM1mVRr7 NmK1Bh9HR1qZKZ738c7pzl+7RuiF3VnYtR8oQJKZ8U6/psHc4TYCDrkhAfmbw9us 9g40hr1dfz/ABx7T+ODop0P6VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7pJnon cDk4GT6WYwaAJ6+DtGKVMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtP3WXr/0DP7zIXwWZePTuev7YE11drQ3b3yk97pRUmzQgeze2Nhkw jkG8OkP748Ag3J/GWJ8j7TZVftfdoaD/QAfO7TprITUDlVAYLKwO6WMDYM+/MzXW SwPHNxpBG71Bw7C+sS5n0iMYFXrTiEWYuR1s4TBN6UcqUU5jRLlEZH9Ng8snRhhu JZ1UJRFwI3hlRLFbO5Btwm3qXgn2YraOfob8JV+wI0F2w2LtlUAZP3pGz6oxRAzY kGNGpy5r/6gA7mZTUeWosX5dz/Qzt2Ea8/SnPmpZnMTDQHXhUPfgv5RvW2soRcDd DxgFFpGIQuoV4ZzvlHHJWu1l4AXlDWwl -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:22 2025 by rpki-client