$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: 0MQRF87j1iuKNrQUgHQiziCHg2eGxhRM2SCuYTtj69U= Subject key identifier: 7B:7C:92:9B:5E:E3:45:DA:4F:AB:3C:76:EE:18:82:D8:E5:CD:9C:BE Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B7D Signing time: Mon 20 Oct 2025 19:44:52 +0000 Manifest this update: Mon 20 Oct 2025 19:44:51 +0000 Manifest next update: Mon 27 Oct 2025 19:44:51 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: BFzPGMDw59U9ewQCnHulL6zyEPNLURFR6iTDREabwyg=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: orMTuhNCmn5/4lVWP0hvNJHm2iToMZFaKY4Tk1oMp1M=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: DQ4zjVC/izJ/mpi1KCeEh40z0Ktl3VHP629G9xZ43Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Oct 20 19:44:51 2025 GMT Not After : Oct 27 19:44:51 2025 GMT Subject: CN=68f69134-ffa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:d6:9e:28:1e:55:51:fc:09:5d:58:54:76: 81:86:e0:da:3b:b0:f5:de:80:2a:c6:2e:11:54:03: 0e:c2:36:5e:80:b8:26:f7:1e:58:17:bf:b3:b5:64: f9:35:9e:f5:65:e1:6b:c2:86:0a:e5:72:a7:32:ad: f6:40:ca:9d:b5:4a:49:86:4e:3a:ee:1f:6e:1a:b8: 58:44:98:49:e9:05:59:ba:19:e0:70:8b:63:14:4e: eb:8f:4f:49:3f:b9:44:e7:93:40:67:68:5b:a6:56: 92:a3:bc:15:40:2e:91:b8:b1:de:23:98:14:95:fb: e4:82:22:ea:aa:36:f6:43:0b:90:d4:1d:17:41:1d: 77:e3:4b:7a:4e:f9:e6:76:1c:ae:e1:a0:c7:d0:08: 25:9c:d0:55:cf:f6:b9:09:e7:da:ce:9f:c2:98:62: 48:af:b1:de:d3:47:88:5e:e1:56:7c:7d:82:3c:ba: 37:53:62:51:30:6b:06:e1:5b:06:72:93:9c:0c:b9: ed:9c:22:9c:1f:b9:d2:95:8d:d5:be:e4:b4:d6:17: b2:5a:33:2d:c7:40:67:df:0a:21:1d:63:b4:d0:19: 5a:10:2a:5e:fc:6d:0f:7d:64:d0:6f:09:f4:18:b4: db:05:9b:bb:49:34:dd:13:43:71:d2:4f:9e:df:95: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7C:92:9B:5E:E3:45:DA:4F:AB:3C:76:EE:18:82:D8:E5:CD:9C:BE X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:bd:66:aa:a1:54:f1:76:e1:42:b1:b5:8e:6f:5b:c3:44:bf: aa:bf:2a:de:63:08:73:67:a8:ff:9b:02:2c:ed:00:c9:90:dd: aa:de:1c:9a:cd:cc:dd:b0:14:fe:e3:14:f5:05:ce:ae:6f:8f: 44:71:85:d0:c3:54:be:8e:16:0c:64:89:77:14:37:26:4a:47: cf:6e:88:78:7a:7e:45:ba:00:d0:a6:1c:9a:b1:05:9c:fc:07: 3f:5e:85:6a:60:ab:ee:77:87:50:2c:50:ca:5b:0b:31:0a:00: de:09:d6:01:76:8e:00:56:a7:34:06:82:c4:1f:92:46:54:54: 79:a9:9f:f0:25:21:63:ed:f2:33:da:6f:7c:0f:0a:e9:1f:c7: 81:f0:23:e7:9b:a1:40:f1:8b:b9:f1:5e:b9:ec:a1:33:28:4b: 7b:e6:3f:fe:bd:05:ec:e0:58:28:72:a2:97:6d:fd:33:1f:a9: 6f:4a:e6:69:3d:f1:e2:c1:21:bc:bf:e6:b2:41:83:35:6a:15: 79:0c:3d:65:b4:9b:52:2b:d1:06:8f:6d:f5:07:73:06:1f:44: 46:4a:d0:24:15:81:87:19:ee:0c:20:81:15:9f:ee:d4:51:32: d1:0e:3e:79:58:94:a9:37:77:27:c8:d0:28:72:0f:51:7b:91: 3c:c3:33:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUxMDIwMTk0NDUxWhcNMjUxMDI3MTk0NDUxWjAYMRYwFAYD VQQDEw02OGY2OTEzNC1mZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzP/WnigeVVH8CV1YVHaBhuDaO7D13oAqxi4RVAMOwjZegLgm9x5YF7+ztWT5 NZ71ZeFrwoYK5XKnMq32QMqdtUpJhk467h9uGrhYRJhJ6QVZuhngcItjFE7rj09J P7lE55NAZ2hbplaSo7wVQC6RuLHeI5gUlfvkgiLqqjb2QwuQ1B0XQR1340t6Tvnm dhyu4aDH0AglnNBVz/a5Cefazp/CmGJIr7He00eIXuFWfH2CPLo3U2JRMGsG4VsG cpOcDLntnCKcH7nSlY3VvuS01heyWjMtx0Bn3wohHWO00BlaECpe/G0PfWTQbwn0 GLTbBZu7STTdE0Nx0k+e35V0yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt8kpte 40XaT6s8du4YgtjlzZy+MB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0vWaqoVTxduFCsbWOb1vDRL+qvyreYwhzZ6j/mwIs7QDJkN2q3hya zczdsBT+4xT1Bc6ub49EcYXQw1S+jhYMZIl3FDcmSkfPboh4en5FugDQphyasQWc /Ac/XoVqYKvud4dQLFDKWwsxCgDeCdYBdo4AVqc0BoLEH5JGVFR5qZ/wJSFj7fIz 2m98DwrpH8eB8CPnm6FA8Yu58V657KEzKEt75j/+vQXs4FgocqKXbf0zH6lvSuZp PfHiwSG8v+ayQYM1ahV5DD1ltJtSK9EGj231B3MGH0RGStAkFYGHGe4MIIEVn+7U UTLRDj55WJSpN3cnyNAocg9Re5E8wzMn -----END CERTIFICATE-----Generated at Tue Oct 21 04:53:16 2025 by rpki-client