$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: 6320RB49jyyYpSJhssvvGX1iK9gkgRhZu5hLAGjgzPo= Subject key identifier: 9A:B7:9C:11:02:F0:47:2C:6A:32:60:41:C7:8A:E9:CF:D9:17:76:79 Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 059C Signing time: Sun 19 Oct 2025 00:56:06 +0000 Manifest this update: Sun 19 Oct 2025 00:56:05 +0000 Manifest next update: Sun 26 Oct 2025 00:56:05 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: AVUp1kWmM00CZh0A5s0ndTTNy+x98uY3xjnNYx4u31I=) 2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: VYKklQ7sC0GnSlFJLoi6ilrtCn1QqOw+2GAk4IP7i50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Oct 19 00:56:05 2025 GMT Not After : Oct 26 00:56:05 2025 GMT Subject: CN=68f43726-bc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:04:fd:25:c2:e9:4a:b8:1c:bd:39:f5:dd: 83:3f:90:03:ae:a6:db:bd:d7:ae:e6:5c:24:48:91: 55:83:af:e2:de:f0:ca:fe:9c:4c:af:9c:54:75:02: 2b:20:2e:47:de:d6:a0:b6:0f:ad:ee:e5:6e:cd:53: 63:8a:1d:27:3a:d4:fd:da:0a:3c:ce:7d:d7:2f:82: 90:b0:8f:5a:cc:1e:11:9f:cf:b7:91:5d:33:55:67: 21:bb:20:db:c3:c9:e2:67:3f:ac:04:7d:75:06:b4: 37:1d:a4:26:8a:8f:fc:9e:6e:c7:38:79:c3:ff:d7: 7c:23:8e:ca:69:66:75:f6:31:b8:ce:00:fc:e3:d8: 71:f2:15:04:db:6a:7e:99:63:94:6e:d4:c0:48:1f: 2c:61:ce:30:87:ab:6c:d1:c1:ac:17:7d:b1:14:9d: 6a:85:ed:3f:e1:25:a5:36:9b:61:11:72:22:f2:62: d8:44:96:96:48:35:bd:f2:1b:81:89:97:a1:d6:87: 43:1e:f0:a2:65:43:11:57:ac:6e:24:48:fa:fe:36: c6:f3:66:7a:54:cd:d9:ef:82:a5:81:92:d7:9c:f0: da:90:79:f0:6f:ff:c5:18:f2:ce:3b:b5:09:54:07: ba:8e:32:95:0e:ff:03:08:18:24:51:2f:06:b4:69: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B7:9C:11:02:F0:47:2C:6A:32:60:41:C7:8A:E9:CF:D9:17:76:79 X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:30:b6:67:cc:20:db:03:8b:7f:47:5e:ff:45:62:82:dc:e3: b2:7c:54:36:7f:3a:ed:d6:ed:bb:ed:2b:0a:e2:ca:d1:66:41: e0:36:71:4d:40:77:98:d2:ec:18:14:58:88:d4:38:b3:0a:ed: 89:72:ca:35:72:ac:70:93:c3:73:9e:8e:30:f4:90:e2:23:93: 86:24:50:ee:b7:4a:88:5d:72:aa:0f:48:c4:61:0f:83:be:b2: d7:96:6a:f7:7b:06:e7:1e:48:b1:ad:0b:1d:fb:87:ff:c4:76: 43:4b:e9:6e:13:09:c3:43:8d:a9:89:f3:14:a0:37:25:51:1d: 37:b5:07:24:6f:9b:1e:62:d6:64:7f:9e:10:e9:d5:81:28:20: 97:7e:bc:12:26:c5:7b:34:ed:4d:1d:17:07:35:ed:98:a3:65: 13:2f:c0:66:9b:6e:3b:d4:80:48:8b:80:48:a2:28:ad:31:e2: 41:56:42:36:ce:50:21:e7:42:61:ef:49:ba:b5:c9:ce:75:48: a6:7a:51:5f:19:2f:7a:16:de:8c:9c:70:09:c8:05:58:c3:df: f1:f5:7e:e0:af:74:f9:87:92:b4:2a:ec:32:b1:ed:9a:be:ad: 25:ea:b9:54:16:e6:68:ef:e7:1f:75:80:d5:d7:87:20:09:09: 11:9b:3d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjUxMDE5MDA1NjA1WhcNMjUxMDI2MDA1NjA1WjAYMRYwFAYD VQQDEw02OGY0MzcyNi1iYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgsE/SXC6Uq4HL059d2DP5ADrqbbvdeu5lwkSJFVg6/i3vDK/pxMr5xUdQIr IC5H3tagtg+t7uVuzVNjih0nOtT92go8zn3XL4KQsI9azB4Rn8+3kV0zVWchuyDb w8niZz+sBH11BrQ3HaQmio/8nm7HOHnD/9d8I47KaWZ19jG4zgD849hx8hUE22p+ mWOUbtTASB8sYc4wh6ts0cGsF32xFJ1qhe0/4SWlNpthEXIi8mLYRJaWSDW98huB iZeh1odDHvCiZUMRV6xuJEj6/jbG82Z6VM3Z74KlgZLXnPDakHnwb//FGPLOO7UJ VAe6jjKVDv8DCBgkUS8GtGlQAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq3nBEC 8EcsajJgQceK6c/ZF3Z5MB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaMLZnzCDbA4t/R17/RWKC3OOyfFQ2fzrt1u277SsK4srRZkHgNnFN QHeY0uwYFFiI1DizCu2Jcso1cqxwk8Nzno4w9JDiI5OGJFDut0qIXXKqD0jEYQ+D vrLXlmr3ewbnHkixrQsd+4f/xHZDS+luEwnDQ42pifMUoDclUR03tQckb5seYtZk f54Q6dWBKCCXfrwSJsV7NO1NHRcHNe2Yo2UTL8Bmm2471IBIi4BIoiitMeJBVkI2 zlAh50Jh70m6tcnOdUimelFfGS96Ft6MnHAJyAVYw9/x9X7gr3T5h5K0Kuwyse2a vq0l6rlUFuZo7+cfdYDV14cgCQkRmz22 -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:16 2025 by rpki-client