$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json) Hash identifier: 1kRXJBaXjuNjZMl1ULvkRejRZaj0vG/ao8P444wnySo= Subject key identifier: F6:1D:E9:61:B9:76:E6:46:0A:52:35:B4:CB:96:BF:FF:A0:7D:80:DA Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Certificate serial: 0571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft Manifest number: 056C Signing time: Sun 19 Oct 2025 01:02:13 +0000 Manifest this update: Sun 19 Oct 2025 01:02:12 +0000 Manifest next update: Sun 26 Oct 2025 01:02:12 +0000 Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: kpAOHRcK5tInelZ8R/ffxvc8VkhEUHurNkNoAYRwWw8=) 2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: 68/9CqYRkzm0ius//S97EiCu+9Aa9Wpy/boYkEQX4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Validity Not Before: Oct 19 01:02:12 2025 GMT Not After : Oct 26 01:02:12 2025 GMT Subject: CN=68f43895-ee5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:bd:76:fc:71:9f:3e:e5:a1:35:79:f5:12: 01:72:2a:bd:33:9f:c5:86:0e:39:98:ce:6d:1a:7f: db:55:f2:99:00:26:d1:97:17:8a:68:b5:45:86:f1: 82:61:ec:ff:25:e8:9f:40:16:2b:c0:93:35:f4:50: 24:37:5f:15:f5:0f:26:93:28:6c:42:ee:33:19:4c: cf:80:cf:e1:67:44:7d:53:66:4c:77:c3:df:d5:b7: a5:c2:75:6e:3b:aa:47:54:12:34:1b:73:61:e1:39: 6e:3f:99:7f:f0:2f:61:3e:77:4e:c6:7e:5e:46:59: 10:55:dc:79:2d:f8:a7:01:e7:84:f1:0a:1a:83:14: b9:74:06:ee:9b:98:c3:82:69:d1:b0:23:57:a4:5c: 7b:bc:f5:3c:8d:ce:ac:cb:69:5e:db:23:67:48:a5: 66:96:da:d4:de:82:a1:7f:46:a6:21:5a:ec:0a:36: b1:40:05:d0:1b:73:c3:c6:13:cf:a7:dc:4f:05:b3: 91:dd:71:12:f5:47:b0:dd:86:8c:17:eb:d1:35:90: 32:2c:86:43:6e:1d:a7:09:98:d3:51:79:f7:10:c6: 63:06:ff:ca:aa:86:e0:90:c0:42:db:fe:13:35:45: ff:3b:0e:50:02:15:b6:2e:87:52:9c:72:c6:4c:46: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1D:E9:61:B9:76:E6:46:0A:52:35:B4:CB:96:BF:FF:A0:7D:80:DA X509v3 Authority Key Identifier: keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:96:9c:7b:8d:1f:6a:1e:8b:5f:b8:bb:5e:97:50:0e:2d:10: f2:75:54:4a:5f:b7:a1:01:07:6a:fe:34:7c:db:ab:b0:b1:31: 89:31:a8:ae:a4:43:b1:26:9f:bf:cf:9e:dc:aa:4f:9d:75:4e: 4d:22:22:fd:07:72:47:e9:5a:3d:68:38:3e:ee:7d:70:ec:a5: 48:81:c3:ba:8a:53:b2:2c:d1:2e:cf:89:f3:bf:72:98:6e:a6: 34:ab:3d:f2:20:2d:eb:d4:46:bf:57:27:75:7b:ff:ea:36:64: 11:8e:a3:76:e7:69:97:e4:50:87:91:68:81:e0:24:ce:69:c9: f9:6b:26:02:35:f2:28:58:28:5a:03:90:51:dc:48:46:ff:2c: a5:78:9f:18:34:0e:ab:f8:fa:1a:72:d6:43:13:0f:4f:a5:2d: 0f:fc:dd:16:6d:3b:56:c7:e0:b2:ef:d9:37:46:52:d4:02:4a: fa:d3:5f:3e:32:cb:4d:7e:60:0c:29:07:3e:31:61:97:86:d1: ce:a4:da:37:4a:f3:26:8f:97:ec:a3:17:ef:76:34:c8:a0:5d: bc:26:b4:4b:aa:8c:8f:03:d4:45:68:dd:bb:09:65:8a:62:2d: 13:35:e7:1e:29:5f:cb:71:ce:37:17:03:93:17:26:29:d1:51: 56:e8:e3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF NDdDNkI4RkUwHhcNMjUxMDE5MDEwMjEyWhcNMjUxMDI2MDEwMjEyWjAYMRYwFAYD VQQDEw02OGY0Mzg5NS1lZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMu9dvxxnz7loTV59RIBciq9M5/Fhg45mM5tGn/bVfKZACbRlxeKaLVFhvGC Yez/JeifQBYrwJM19FAkN18V9Q8mkyhsQu4zGUzPgM/hZ0R9U2ZMd8Pf1belwnVu O6pHVBI0G3Nh4TluP5l/8C9hPndOxn5eRlkQVdx5LfinAeeE8QoagxS5dAbum5jD gmnRsCNXpFx7vPU8jc6sy2le2yNnSKVmltrU3oKhf0amIVrsCjaxQAXQG3PDxhPP p9xPBbOR3XES9Uew3YaMF+vRNZAyLIZDbh2nCZjTUXn3EMZjBv/KqobgkMBC2/4T NUX/Ow5QAhW2LodSnHLGTEaRkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYd6WG5 duZGClI1tMuWv/+gfYDaMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM OHZaamwzaHFiQWprZkd1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBglpx7jR9qHotfuLtel1AOLRDydVRKX7ehAQdq/jR826uwsTGJMaiu pEOxJp+/z57cqk+ddU5NIiL9B3JH6Vo9aDg+7n1w7KVIgcO6ilOyLNEuz4nzv3KY bqY0qz3yIC3r1Ea/Vyd1e//qNmQRjqN252mX5FCHkWiB4CTOacn5ayYCNfIoWCha A5BR3EhG/yyleJ8YNA6r+PoactZDEw9PpS0P/N0WbTtWx+Cy79k3RlLUAkr6018+ MstNfmAMKQc+MWGXhtHOpNo3SvMmj5fsoxfvdjTIoF28JrRLqoyPA9RFaN27CWWK Yi0TNeceKV/Lcc43FwOTFyYp0VFW6OM2 -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:51 2025 by rpki-client