$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: tO0exYsL0Sh56UQeWszsBjUdaI7k2i0JLfS5SvGfnwo= Subject key identifier: E1:8F:86:A2:E7:16:45:25:A6:10:43:E9:1B:1B:8C:F8:C9:56:8F:DC Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 0620 Signing time: Sun 19 Oct 2025 00:22:26 +0000 Manifest this update: Sun 19 Oct 2025 00:22:25 +0000 Manifest next update: Sun 26 Oct 2025 00:22:25 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: MsTX8QDdB0G3CzhkHfmslOUB9VNVr9oEmfLXkwYlCN4=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: Oct 19 00:22:25 2025 GMT Not After : Oct 26 00:22:25 2025 GMT Subject: CN=68f42f42-f22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:0e:f6:65:9a:60:12:f4:33:35:87:d0:7c: a9:2d:22:5d:da:0b:a4:3a:78:aa:ac:ec:13:58:38: 67:fa:a3:fc:46:cb:e1:a2:c1:df:a8:fc:a9:61:4c: 8a:4e:62:e8:3e:f4:dd:1a:01:76:11:2e:70:0d:a7: 6d:26:2f:ee:b3:a8:ae:06:45:e0:51:56:4b:23:52: a6:c2:b6:61:20:8e:26:9c:76:c3:31:8a:0e:73:f1: 56:4f:31:0a:7d:99:be:c8:88:1e:57:7e:dd:75:65: 47:16:86:53:79:8e:2f:95:de:fb:d2:75:e7:3f:d6: 61:f8:6a:36:6c:9b:32:78:a8:0e:dc:07:6e:af:9b: f6:bb:60:f7:c6:91:bd:63:f1:3b:e9:3e:73:2a:d0: c7:da:ca:7d:a8:48:cf:e9:2c:60:5c:7c:1c:59:af: 4e:b5:a5:89:e7:d3:32:92:4a:88:7f:9d:f6:07:0f: dc:c4:45:8d:80:15:da:f8:61:09:90:31:43:a6:2b: f6:60:b3:40:81:47:e3:8d:b0:45:c3:28:5a:65:f9: 00:3a:43:a3:e5:0f:5a:2a:4e:78:bd:a6:92:69:ff: 1e:bd:5c:e6:fd:89:c6:da:c4:2e:a6:de:6f:38:7c: 3b:cf:4c:57:a9:32:65:c3:5a:fb:f9:2b:6a:1a:db: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8F:86:A2:E7:16:45:25:A6:10:43:E9:1B:1B:8C:F8:C9:56:8F:DC X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e3:7a:07:91:13:06:90:61:a7:a7:29:25:d3:b0:ce:a6:c2: 5d:10:c1:e3:69:a0:9e:bd:a5:22:49:86:ea:ca:81:23:00:94: 0f:06:bb:91:07:b9:ee:ed:4b:9e:62:32:4d:08:61:74:c0:12: b5:99:30:4f:b2:bd:3e:ff:97:c1:df:e6:b7:54:b3:6c:66:8d: 81:3c:de:35:12:bd:29:65:4f:87:28:ef:94:06:1c:04:23:e9: dc:6e:80:1d:09:fd:50:7a:7d:de:c8:95:8f:41:7e:b5:d0:00: 59:21:88:20:db:37:ef:b0:89:83:54:c2:80:67:2f:c4:4e:e0: 47:d3:23:e9:5a:ee:6a:7d:07:7f:af:57:3d:bf:91:6c:08:df: 09:6b:aa:64:0b:ed:5a:01:4b:25:48:d5:94:b7:e7:71:cd:f7: dc:27:8a:c9:e2:86:3a:64:37:48:2b:1e:d7:7b:62:1b:de:f8: 11:2a:b2:43:34:8a:33:2f:5e:84:42:6d:d3:45:3c:d6:4d:22: 8d:1e:50:ae:87:c4:dc:d4:f1:ae:ee:e9:eb:da:38:b3:15:83: 03:fd:40:05:bc:89:a0:77:0f:03:ec:d2:d8:2a:ab:0e:31:60: 59:f1:a2:51:86:e4:bf:61:74:88:35:23:dc:f7:05:a5:84:65: 3b:70:9f:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUxMDE5MDAyMjI1WhcNMjUxMDI2MDAyMjI1WjAYMRYwFAYD VQQDEw02OGY0MmY0Mi1mMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiUO9mWaYBL0MzWH0HypLSJd2gukOniqrOwTWDhn+qP8RsvhosHfqPypYUyK TmLoPvTdGgF2ES5wDadtJi/us6iuBkXgUVZLI1KmwrZhII4mnHbDMYoOc/FWTzEK fZm+yIgeV37ddWVHFoZTeY4vld770nXnP9Zh+Go2bJsyeKgO3Adur5v2u2D3xpG9 Y/E76T5zKtDH2sp9qEjP6SxgXHwcWa9OtaWJ59MykkqIf532Bw/cxEWNgBXa+GEJ kDFDpiv2YLNAgUfjjbBFwyhaZfkAOkOj5Q9aKk54vaaSaf8evVzm/YnG2sQupt5v OHw7z0xXqTJlw1r7+StqGtsyIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGPhqLn FkUlphBD6RsbjPjJVo/cMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD43oHkRMGkGGnpykl07DOpsJdEMHjaaCevaUiSYbqyoEjAJQPBruR B7nu7UueYjJNCGF0wBK1mTBPsr0+/5fB3+a3VLNsZo2BPN41Er0pZU+HKO+UBhwE I+ncboAdCf1Qen3eyJWPQX610ABZIYgg2zfvsImDVMKAZy/ETuBH0yPpWu5qfQd/ r1c9v5FsCN8Ja6pkC+1aAUslSNWUt+dxzffcJ4rJ4oY6ZDdIKx7Xe2Ib3vgRKrJD NIozL16EQm3TRTzWTSKNHlCuh8Tc1PGu7unr2jizFYMD/UAFvImgdw8D7NLYKqsO MWBZ8aJRhuS/YXSINSPc9wWlhGU7cJ9q -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:55 2025 by rpki-client