$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft File: MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json) Hash identifier: zvxDxWg3/LDrghZn77BTRpExqzj2snQ9hwR0dCmfpRY= Subject key identifier: C9:7A:7E:52:5B:18:D6:9D:AF:0A:28:FE:EE:F8:CB:38:A8:A0:EA:3F Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft Manifest number: 96 Signing time: Sun 19 Oct 2025 09:38:20 +0000 Manifest this update: Sun 19 Oct 2025 09:38:19 +0000 Manifest next update: Sun 26 Oct 2025 09:38:19 +0000 Files and hashes: 1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: 9ozlVmP8wnrWrXr9+ye6m4i8LnwaOsi8QiqzOUI6Y14=) 2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Validity Not Before: Oct 19 09:38:19 2025 GMT Not After : Oct 26 09:38:19 2025 GMT Subject: CN=68f4b18c-0e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:2f:88:8f:09:bb:a0:51:32:39:30:67:9f: 66:96:a9:3b:82:cd:d1:d0:69:93:5f:54:43:cc:dc: 3d:31:c8:e1:ff:c1:ee:c2:61:c5:b8:39:29:67:2c: 40:a1:85:77:af:6c:04:17:09:56:3b:e2:e9:2a:2d: 7b:7e:a1:83:0e:89:f1:ec:4c:60:ab:c3:41:3a:57: d8:97:48:0c:54:ad:79:91:f9:69:01:69:66:0c:6a: 4c:15:c9:1c:34:b9:ac:7e:4b:fc:78:b7:c8:67:88: f1:23:96:e7:ad:b2:a7:44:31:a4:b8:81:f6:9e:c6: 5b:fa:5a:c4:40:88:92:6d:02:34:2b:b6:2c:11:95: 97:f2:94:90:33:91:0d:d8:6f:a5:88:c3:91:c5:2b: a4:94:9f:11:3a:e9:cc:f3:24:fe:3a:52:78:ec:79: 86:06:53:f8:70:71:f7:3a:7e:a9:0a:e2:a1:2f:9f: 46:dc:65:b2:9b:d0:dd:7f:28:7c:2e:39:0a:d0:00: 46:03:66:1b:26:d4:33:a0:1e:93:76:37:42:25:92: dc:33:e9:14:98:e8:17:97:78:15:6a:a2:b6:76:73: ad:3d:d9:f2:09:4e:d8:18:b4:8b:05:d4:21:b6:bf: c3:a3:04:2a:fb:4b:9c:78:58:ab:9c:a3:88:1b:4e: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7A:7E:52:5B:18:D6:9D:AF:0A:28:FE:EE:F8:CB:38:A8:A0:EA:3F X509v3 Authority Key Identifier: keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:41:47:92:8f:f8:f5:bb:54:20:10:bb:64:b8:9f:d1:40:be: c5:91:3f:48:f4:fb:5d:b7:e2:37:73:96:85:4e:ca:df:3b:f9: 0a:b5:ee:2c:d6:36:48:68:ef:0c:77:4a:2a:59:55:0f:da:7e: 65:df:6f:e2:7c:24:b8:e5:63:c4:75:9b:30:c1:75:85:2a:85: 3f:08:4e:b4:1e:f5:4b:eb:97:81:7b:d2:09:c6:16:e6:de:11: 2b:7f:63:e3:6b:42:28:f6:bf:8b:22:97:35:15:90:70:37:dc: c5:a6:2d:84:de:84:20:b2:40:f8:1f:19:0a:ea:68:84:37:88: f7:eb:6d:60:6d:1c:76:e9:07:38:3d:6b:11:10:c7:fe:43:01: 2c:0f:d3:c5:d6:68:c4:4b:87:04:d9:88:78:48:d4:c1:d8:00: ec:55:71:2d:58:3e:fa:9d:4c:4a:60:6c:77:72:a7:8b:e6:bf: 5e:10:97:4e:c8:4a:1f:7d:0e:0d:30:1f:4b:33:ac:e5:bf:4b: 34:f2:9a:19:49:0e:fc:48:c8:8d:10:24:24:a1:e7:64:9e:4a: 36:26:7a:8f:87:7e:33:25:52:72:29:bd:14:c1:43:45:ff:ba: 13:1f:79:4d:fe:d3:31:49:62:a7:3b:ac:44:f3:a1:ad:b9:f9: d1:e8:b2:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4QkIxMTAvBgNVBAUTKDMxQUM5NjQ3QzdGODcwQTY2QkEyREU3ODg1NDRDRDhD MzI2QkRGRjkwHhcNMjUxMDE5MDkzODE5WhcNMjUxMDI2MDkzODE5WjAYMRYwFAYD VQQDEw02OGY0YjE4Yy0wZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWMviI8Ju6BRMjkwZ59mlqk7gs3R0GmTX1RDzNw9Mcjh/8HuwmHFuDkpZyxA oYV3r2wEFwlWO+LpKi17fqGDDonx7Exgq8NBOlfYl0gMVK15kflpAWlmDGpMFckc NLmsfkv8eLfIZ4jxI5bnrbKnRDGkuIH2nsZb+lrEQIiSbQI0K7YsEZWX8pSQM5EN 2G+liMORxSuklJ8ROunM8yT+OlJ47HmGBlP4cHH3On6pCuKhL59G3GWym9Ddfyh8 LjkK0ABGA2YbJtQzoB6TdjdCJZLcM+kUmOgXl3gVaqK2dnOtPdnyCU7YGLSLBdQh tr/DowQq+0uceFirnKOIG05mGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl6flJb GNadrwoo/u74yziooOo/MB8GA1UdIwQYMBaAFDGslkfH+HCma6LeeIVEzYwya9/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMThCQi82QTBCMjA1NEM4 QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9NYXlXUjhmNGNLWnJvdDU0aFVUTmpESnIz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01heVdSOGY0Y0tacm90NTRoVVROakRKcjNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MThCQi82QTBCMjA1NEM4QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9NYXlXUjhmNGNL WnJvdDU0aFVUTmpESnIzX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfQUeSj/j1u1QgELtkuJ/RQL7FkT9I9Ptdt+I3c5aFTsrfO/kKte4s 1jZIaO8Md0oqWVUP2n5l32/ifCS45WPEdZswwXWFKoU/CE60HvVL65eBe9IJxhbm 3hErf2Pja0Io9r+LIpc1FZBwN9zFpi2E3oQgskD4HxkK6miEN4j3621gbRx26Qc4 PWsREMf+QwEsD9PF1mjES4cE2Yh4SNTB2ADsVXEtWD76nUxKYGx3cqeL5r9eEJdO yEoffQ4NMB9LM6zlv0s08poZSQ78SMiNECQkoedknko2JnqPh34zJVJyKb0UwUNF /7oTH3lN/tMxSWKnO6xE86GtufnR6LJJ -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:26 2025 by rpki-client