$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: chQw4RAYQ9SOr0qv83XOg1Wz4c6j1zfdRNAEQcAPemE= Subject key identifier: 31:48:8F:EE:CB:44:7E:B4:B4:CB:6B:57:34:56:15:66:25:4C:6C:39 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 0A08 Signing time: Sat 18 Oct 2025 20:50:06 +0000 Manifest this update: Sat 18 Oct 2025 20:50:04 +0000 Manifest next update: Sat 25 Oct 2025 20:50:04 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: grOo9LwU8AnPTS1LN+ak982kYo+9VA9n3FzF7CU/yI8=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Oct 18 20:50:04 2025 GMT Not After : Oct 25 20:50:04 2025 GMT Subject: CN=68f3fd7d-66d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:30:7d:17:20:a3:7d:ac:05:8f:70:aa:91: ea:13:5f:26:ed:46:a7:ac:8b:93:cd:1e:ec:61:18: 52:d2:cc:02:3d:3b:a4:ca:2a:79:8a:90:b6:4e:56: f0:88:c9:15:0a:f1:64:70:9a:4a:87:46:a4:8f:e9: c9:c5:eb:65:84:35:b5:d7:4d:c3:b4:c6:50:db:dc: 76:bc:77:12:63:e9:20:c7:d5:06:03:74:bd:0a:00: 35:27:51:68:de:9e:06:c2:ea:5b:85:70:7e:7f:8d: d9:55:6b:57:3b:e5:1f:74:ad:a5:7c:09:94:00:b8: 71:c4:0a:da:75:39:c7:31:e4:88:19:41:a4:b3:58: 69:ac:6c:02:1a:6b:5a:4f:08:6f:58:15:3a:4b:c7: 7c:db:e4:92:17:f4:97:e4:92:db:b9:7c:75:df:bc: b8:79:07:a1:ed:e6:ff:ad:75:38:33:b9:05:c6:be: d8:7f:5e:29:14:1d:02:67:20:e9:7e:c9:6c:e8:4b: cf:f2:d0:ca:da:71:0a:fd:04:36:51:6a:97:9e:30: 68:d8:8c:9d:e2:30:f8:e4:75:8b:15:dc:d1:0f:44: 70:a8:bc:45:37:25:72:60:9a:c7:95:8b:78:16:1d: c0:a9:8d:41:23:54:00:7b:92:6d:2a:96:52:7a:51: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:48:8F:EE:CB:44:7E:B4:B4:CB:6B:57:34:56:15:66:25:4C:6C:39 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:50:9b:8b:d8:92:29:a7:0b:7d:69:cf:05:7d:43:7e:ea:4e: c5:3a:f3:39:f1:f1:2e:8e:49:cf:03:0e:b0:41:31:a6:88:da: cf:45:fa:58:8e:86:2b:5c:23:74:37:8e:8f:d0:1e:c6:5f:14: 47:cc:6c:0b:c1:a2:61:51:c5:81:39:db:db:52:bc:3c:03:bc: fe:0c:ef:96:54:c7:24:70:c3:01:03:91:e7:b3:1c:0c:ed:0e: d4:98:a8:96:6c:0e:54:f5:31:69:aa:91:5f:f5:7f:cd:60:4c: 2b:8a:76:3f:09:ac:45:a8:d0:7b:eb:ad:ac:6c:d0:a5:96:a0: 3a:04:86:83:fc:0c:5e:b0:41:9d:fa:c9:9b:e0:06:e1:f6:f9: 5a:e1:ec:a5:70:43:56:1d:4e:33:45:18:c2:33:dd:b2:8a:c6: 44:24:a9:55:a7:09:ca:4c:e2:49:79:39:03:b9:76:a1:c2:91: 97:4d:fb:9a:ae:f2:8f:82:80:4c:9e:15:45:05:71:ff:bc:fc: 53:15:e2:f5:e5:05:cd:8d:a2:ad:7a:f8:c8:8e:38:28:f0:7e: d3:92:c0:4e:ca:34:70:e4:a3:39:97:72:f7:d2:cf:a0:69:21: 15:9a:d9:c4:4a:39:25:47:e1:bd:fb:26:74:3d:d5:42:42:7b: 45:2d:8c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUxMDE4MjA1MDA0WhcNMjUxMDI1MjA1MDA0WjAYMRYwFAYD VQQDEw02OGYzZmQ3ZC02NmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP8wfRcgo32sBY9wqpHqE18m7UanrIuTzR7sYRhS0swCPTukyip5ipC2Tlbw iMkVCvFkcJpKh0akj+nJxetlhDW1103DtMZQ29x2vHcSY+kgx9UGA3S9CgA1J1Fo 3p4GwupbhXB+f43ZVWtXO+UfdK2lfAmUALhxxAradTnHMeSIGUGks1hprGwCGmta TwhvWBU6S8d82+SSF/SX5JLbuXx137y4eQeh7eb/rXU4M7kFxr7Yf14pFB0CZyDp fsls6EvP8tDK2nEK/QQ2UWqXnjBo2Iyd4jD45HWLFdzRD0RwqLxFNyVyYJrHlYt4 Fh3AqY1BI1QAe5JtKpZSelEwQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFIj+7L RH60tMtrVzRWFWYlTGw5MB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvUJuL2JIppwt9ac8FfUN+6k7FOvM58fEujknPAw6wQTGmiNrPRfpY joYrXCN0N46P0B7GXxRHzGwLwaJhUcWBOdvbUrw8A7z+DO+WVMckcMMBA5HnsxwM 7Q7UmKiWbA5U9TFpqpFf9X/NYEwrinY/CaxFqNB7662sbNCllqA6BIaD/AxesEGd +smb4Abh9vla4eylcENWHU4zRRjCM92yisZEJKlVpwnKTOJJeTkDuXahwpGXTfua rvKPgoBMnhVFBXH/vPxTFeL15QXNjaKtevjIjjgo8H7TksBOyjRw5KM5l3L30s+g aSEVmtnESjklR+G9+yZ0PdVCQntFLYwX -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:06 2025 by rpki-client