$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: STjNN7o0ZZ2kq0AhY01jRKNoGZHKcYo6KbWo2jpFzE0= Subject key identifier: 6D:7D:33:65:B8:F7:9A:E8:D9:F0:0B:D1:40:8C:62:72:1C:87:EF:19 Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: AD Signing time: Sun 19 Oct 2025 09:21:14 +0000 Manifest this update: Sun 19 Oct 2025 09:21:13 +0000 Manifest next update: Sun 26 Oct 2025 09:21:13 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: DkRPNLPETsKpg12VMcNfL2J3sMRLFcMSBMPtas/8EOY=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Oct 19 09:21:13 2025 GMT Not After : Oct 26 09:21:13 2025 GMT Subject: CN=68f4ad89-488b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:19:01:3d:b3:69:75:a4:3c:f8:d0:35:3f: 13:36:71:ed:70:93:ee:9d:d8:49:49:e8:28:53:14: ef:08:81:e4:14:f0:13:6e:14:5a:97:1a:76:55:02: d1:e2:aa:ab:07:3b:72:24:cc:db:46:9c:19:4f:42: 2d:85:72:e8:18:8f:3f:67:de:87:09:dc:69:f8:45: ae:58:71:0f:3a:71:6d:ab:cb:fc:ea:19:4a:87:fb: cf:95:58:de:77:9f:5a:a7:0e:e0:2a:12:eb:e3:f5: 48:2e:8e:25:a0:7f:56:f6:22:30:c6:66:9b:3d:98: 53:10:d4:3e:72:be:02:d0:b7:ae:f8:d8:85:7e:fa: 14:ea:90:67:cd:3d:d1:4c:bc:b3:ee:ce:63:4e:27: a0:59:82:cd:0b:cd:1f:a1:82:f3:12:cd:4a:aa:f7: 43:27:64:ef:4f:a3:fd:be:cd:b7:b7:95:ca:1d:f6: 6a:91:a5:db:16:a5:1d:01:33:8e:3b:62:6c:a6:99: c2:bc:a7:db:0c:cd:eb:6d:77:53:12:d0:60:6f:c4: b1:c4:f6:70:bf:af:03:12:bc:85:a6:4e:13:b1:76: 51:8c:b2:32:c9:61:c2:b3:76:f1:c5:8f:47:26:60: 7a:5d:31:2d:54:9b:bb:75:51:f8:0a:1c:73:00:ce: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7D:33:65:B8:F7:9A:E8:D9:F0:0B:D1:40:8C:62:72:1C:87:EF:19 X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:89:79:95:67:4c:ff:19:22:ae:6b:f1:fc:45:1f:09:d8:57: af:d6:18:55:0f:bd:26:cb:4a:5a:d2:3a:bb:bd:1e:22:0b:fb: 83:4a:85:62:82:c2:bd:8d:1e:ad:22:15:63:c0:a6:3e:60:45: 05:07:94:bc:0d:bd:6f:bf:fa:1b:54:76:8a:28:95:ab:51:60: dd:ff:56:4a:01:29:e0:22:0c:15:85:2e:7f:0f:93:5e:b2:43: b3:bb:3e:82:8d:42:85:22:64:4e:bc:ff:f0:b2:8e:d6:bc:a6: f5:69:86:57:0f:d6:99:d7:53:9a:91:0e:98:04:f7:31:c7:7f: 18:ec:da:34:83:c1:cc:83:b5:de:a7:e4:11:74:d3:e9:79:1f: 0d:3f:bb:97:1c:7f:3a:8f:04:21:dc:7c:a5:7d:a4:f3:35:b7: 38:12:b7:4e:e4:b4:9b:95:17:46:50:ad:86:05:c7:eb:2e:f8: 4e:46:23:e9:bb:1e:9b:b1:a6:9d:48:e6:aa:86:ee:48:38:bb: 13:bc:ae:5d:df:82:13:41:84:82:85:03:91:72:e6:59:89:0b: e8:46:f5:59:e9:47:35:68:dd:94:66:61:68:52:34:1e:16:ad: 0a:20:60:10:33:a8:b1:7c:0f:f7:f8:d5:fa:7d:73:53:68:38: 75:56:fc:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1 NTk5OTYzRjIwHhcNMjUxMDE5MDkyMTEzWhcNMjUxMDI2MDkyMTEzWjAYMRYwFAYD VQQDEw02OGY0YWQ4OS00ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2oZAT2zaXWkPPjQNT8TNnHtcJPundhJSegoUxTvCIHkFPATbhRalxp2VQLR 4qqrBztyJMzbRpwZT0IthXLoGI8/Z96HCdxp+EWuWHEPOnFtq8v86hlKh/vPlVje d59apw7gKhLr4/VILo4loH9W9iIwxmabPZhTENQ+cr4C0Leu+NiFfvoU6pBnzT3R TLyz7s5jTiegWYLNC80foYLzEs1KqvdDJ2TvT6P9vs23t5XKHfZqkaXbFqUdATOO O2JsppnCvKfbDM3rbXdTEtBgb8SxxPZwv68DEryFpk4TsXZRjLIyyWHCs3bxxY9H JmB6XTEtVJu7dVH4ChxzAM7q/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG19M2W4 95ro2fAL0UCMYnIch+8ZMB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx NGFXRnlDZ0luRVJWbVpZX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBviXmVZ0z/GSKua/H8RR8J2Fev1hhVD70my0pa0jq7vR4iC/uDSoVi gsK9jR6tIhVjwKY+YEUFB5S8Db1vv/obVHaKKJWrUWDd/1ZKASngIgwVhS5/D5Ne skOzuz6CjUKFImROvP/wso7WvKb1aYZXD9aZ11OakQ6YBPcxx38Y7No0g8HMg7Xe p+QRdNPpeR8NP7uXHH86jwQh3HylfaTzNbc4ErdO5LSblRdGUK2GBcfrLvhORiPp ux6bsaadSOaqhu5IOLsTvK5d34ITQYSChQORcuZZiQvoRvVZ6Uc1aN2UZmFoUjQe Fq0KIGAQM6ixfA/3+NX6fXNTaDh1VvwV -----END CERTIFICATE-----Generated at Tue Oct 21 06:02:25 2025 by rpki-client