$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json) Hash identifier: kDtIFVghL84RwhucBcXmv97CXJUehKqRqGch5CXMank= Subject key identifier: 11:E3:71:A7:8E:9E:BB:28:C6:C5:54:D4:34:AD:92:4D:28:A4:6D:F3 Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:06:35 +0000 Manifest this update: Sun 19 Oct 2025 08:06:35 +0000 Manifest next update: Sun 26 Oct 2025 08:06:35 +0000 Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: sz18UUPKT5faLXVWtRQxAX6+lQqOjmr4hT5VwnF6NTE=) 2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: jZ8rK9Cjwbx5cGtSyivoYRd59H87vJYDWLCVXZK0EWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Validity Not Before: Oct 19 08:06:35 2025 GMT Not After : Oct 26 08:06:35 2025 GMT Subject: CN=68f49c0b-02b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:f8:d4:07:ac:70:cc:8a:f8:04:c8:a8:4a: b4:3a:7b:43:de:27:1c:c7:54:7c:a2:44:38:b3:01: 86:80:1b:63:a7:e4:16:8f:76:62:90:b4:63:21:dd: 15:7a:9d:2d:a1:02:f2:25:b8:c4:20:12:ba:6d:fd: 30:28:df:87:b1:c9:94:a8:11:10:7e:6d:a7:77:a4: 97:6e:2d:4e:27:9f:b6:b8:33:62:52:04:ce:be:bc: fc:53:37:29:48:62:c8:33:97:b9:8d:59:70:f9:6d: fa:2e:79:98:79:e3:e9:6d:97:69:be:ae:46:31:4d: 99:7a:6c:2f:b5:3e:fc:a0:cb:59:dc:c1:4b:8b:9b: 87:5e:22:f9:d8:da:34:4b:b8:49:1b:5f:52:bd:e6: 85:98:f7:bf:fe:da:07:ae:fe:3b:eb:34:4e:3c:06: d8:cf:29:ce:72:66:3a:b7:70:a3:ee:3e:96:4d:98: 72:b0:0d:29:4e:64:c2:5c:18:d2:df:83:73:84:41: 2d:e1:6c:1b:d3:77:e9:ad:0a:ed:61:2f:6d:cb:69: 14:95:19:bb:67:36:9b:5a:81:32:ab:98:55:fc:14: 56:09:22:55:ba:de:84:00:be:ca:66:05:b6:d2:f2: 38:03:b5:95:55:d4:34:d9:b3:1c:2b:2d:c3:1a:64: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E3:71:A7:8E:9E:BB:28:C6:C5:54:D4:34:AD:92:4D:28:A4:6D:F3 X509v3 Authority Key Identifier: keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9b:23:60:ab:5f:5d:84:da:49:92:6a:c1:3a:dd:c2:98:13: 60:6d:5d:fc:d9:22:71:98:73:5c:be:23:6e:16:af:21:b1:c4: 5e:12:04:f6:66:ab:22:04:6f:ca:34:88:ac:fa:21:72:50:e4: 83:35:6b:34:48:a3:9f:b6:87:63:9e:00:27:32:e5:be:61:be: 3f:99:b1:9a:86:af:b4:2f:04:23:1d:34:34:2e:3f:35:af:21: 36:0c:06:aa:f7:a8:20:14:5a:4b:28:75:7b:14:95:8f:56:e3: 0e:cb:74:bd:47:8d:fd:a4:56:39:dd:6e:34:97:3a:e5:4d:f6: 3f:8d:54:9f:28:af:2e:1c:c4:fb:68:53:7d:1e:33:fb:d5:a5: f9:04:52:bb:84:9e:52:93:d0:ba:41:6b:05:6b:b1:cd:a5:08: 78:ff:e0:89:2d:12:35:a9:b2:f4:8f:81:8f:8d:0b:3e:10:1c: ab:76:ea:b7:51:76:2e:74:ef:fb:3d:d4:eb:b6:11:ce:01:5b: ec:61:74:cc:c3:ea:0d:62:ad:a6:79:3d:93:22:07:80:1d:85: 67:1c:8e:51:4b:20:20:42:dd:ca:de:14:54:e9:98:5c:cb:49: e7:3e:e6:32:48:07:99:2a:84:40:cc:1a:81:06:38:cf:ea:b5: 01:87:b4:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB NUM1QjQ5OEEwHhcNMjUxMDE5MDgwNjM1WhcNMjUxMDI2MDgwNjM1WjAYMRYwFAYD VQQDEw02OGY0OWMwYi0wMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNn41AescMyK+ATIqEq0OntD3iccx1R8okQ4swGGgBtjp+QWj3ZikLRjId0V ep0toQLyJbjEIBK6bf0wKN+HscmUqBEQfm2nd6SXbi1OJ5+2uDNiUgTOvrz8Uzcp SGLIM5e5jVlw+W36LnmYeePpbZdpvq5GMU2ZemwvtT78oMtZ3MFLi5uHXiL52No0 S7hJG19SveaFmPe//toHrv476zROPAbYzynOcmY6t3Cj7j6WTZhysA0pTmTCXBjS 34NzhEEt4Wwb03fprQrtYS9ty2kUlRm7ZzabWoEyq5hV/BRWCSJVut6EAL7KZgW2 0vI4A7WVVdQ02bMcKy3DGmTSIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHjcaeO nrsoxsVU1DStkk0opG3zMB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZFNi9EN0QzNjIzODMxRjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhv RlJ6RGN6cFFqSGlseGJTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArmyNgq19dhNpJkmrBOt3CmBNgbV382SJxmHNcviNuFq8hscReEgT2 ZqsiBG/KNIis+iFyUOSDNWs0SKOftodjngAnMuW+Yb4/mbGahq+0LwQjHTQ0Lj81 ryE2DAaq96ggFFpLKHV7FJWPVuMOy3S9R439pFY53W40lzrlTfY/jVSfKK8uHMT7 aFN9HjP71aX5BFK7hJ5Sk9C6QWsFa7HNpQh4/+CJLRI1qbL0j4GPjQs+EByrduq3 UXYudO/7PdTrthHOAVvsYXTMw+oNYq2meT2TIgeAHYVnHI5RSyAgQt3K3hRU6Zhc y0nnPuYySAeZKoRAzBqBBjjP6rUBh7S9 -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:15 2025 by rpki-client