$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: bdrEXT5VdW+4fSxrvtETyIhr/kl6UjaYMQ1AF9UOpJY= Subject key identifier: FA:03:32:F3:FE:D2:E3:FE:6D:50:86:72:AE:8A:B8:73:7A:D5:78:2A Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 01D6 Signing time: Sun 19 Oct 2025 05:17:53 +0000 Manifest this update: Sun 19 Oct 2025 05:17:52 +0000 Manifest next update: Sun 26 Oct 2025 05:17:52 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: aWiB0rf/IXw7h8UNh/DM5whRw+80BcnAa7Il8XQsHUE=) 2: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=) 3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Oct 19 05:17:52 2025 GMT Not After : Oct 26 05:17:52 2025 GMT Subject: CN=68f47481-7d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:1e:3f:31:5a:46:18:ea:77:fc:94:d3:2a: e8:b6:d8:d9:f8:c3:79:74:1a:d0:88:4c:4c:bc:5a: 01:d6:07:15:c2:36:58:35:44:42:38:11:de:80:de: e7:99:23:32:89:19:a9:7f:a6:35:5c:01:af:92:d9: d3:c9:8d:3e:96:36:4c:d9:df:1f:84:3d:b6:f2:6a: f6:a1:b6:e7:23:de:0c:d3:02:9b:6e:9f:fc:4a:96: de:b9:81:64:ea:aa:9f:da:38:10:e4:f5:a8:d1:54: 7a:98:c8:78:29:13:17:36:6e:6e:07:a4:34:f6:dd: ca:72:79:10:10:51:02:1b:ed:90:f0:b2:bd:d3:8f: 32:a0:50:a5:72:6e:25:a7:c2:b8:c4:4f:0b:2f:bf: 07:65:4e:a9:2c:88:4f:85:f4:d9:1b:2a:67:74:2b: cc:70:51:04:47:7a:b1:ee:de:c8:c7:33:bf:3f:15: 6b:fb:6c:57:22:57:99:5c:7b:e3:07:a3:b7:94:fb: 32:08:a5:d1:97:54:0f:57:68:26:90:01:49:b3:21: ec:df:bd:25:5d:cf:da:eb:32:1e:cc:a0:b7:aa:6c: 6b:4c:6e:5b:b8:14:0a:a7:7c:7e:0a:87:29:48:29: 55:b3:6f:97:68:1f:3b:68:bd:9d:42:8c:f0:22:41: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:03:32:F3:FE:D2:E3:FE:6D:50:86:72:AE:8A:B8:73:7A:D5:78:2A X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:05:c0:3d:2e:6d:28:31:a0:f9:c7:b4:6d:2b:71:95:ec:a9: 8b:50:21:80:0f:3d:91:ea:84:4d:8a:36:d9:e3:f1:d0:2c:0e: d3:bd:b5:3b:94:7c:17:39:69:e4:c0:ac:58:da:bf:e8:de:72: 3b:0a:85:87:58:0e:d8:43:cc:b8:63:01:c7:9a:b9:c0:c6:86: 2f:19:82:b5:69:a3:af:9c:a6:d3:6b:b9:e3:b7:0b:6c:cd:a4: 3d:af:8b:2f:17:26:8d:96:93:cb:0f:27:c0:18:d3:78:ee:33: 67:81:8f:58:68:cc:8b:f9:5e:3a:6b:5e:ee:56:31:1e:94:75: 7d:f1:81:7f:4b:0b:ee:af:1d:20:04:0c:74:7b:d2:84:31:92: 3a:c2:11:c7:25:9c:11:b4:b3:85:ad:63:62:e7:88:d6:87:e0: 23:20:72:f5:a0:6b:96:48:42:57:06:66:1c:fa:ed:25:38:a7: 0b:2d:37:43:34:44:02:31:0a:00:56:2f:8f:17:45:20:c2:14: 3e:f2:35:5f:f9:ec:3a:0a:49:aa:e6:d7:6f:c7:d6:23:40:3d: 5e:33:a0:61:4d:7b:2a:00:03:e1:ec:f4:83:36:08:d7:b1:5e: 32:69:8b:15:9f:3d:b5:86:82:a5:1d:11:04:4d:32:97:90:b9: 7b:fe:11:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjUxMDE5MDUxNzUyWhcNMjUxMDI2MDUxNzUyWjAYMRYwFAYD VQQDEw02OGY0NzQ4MS03ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36wePzFaRhjqd/yU0yrottjZ+MN5dBrQiExMvFoB1gcVwjZYNURCOBHegN7n mSMyiRmpf6Y1XAGvktnTyY0+ljZM2d8fhD228mr2obbnI94M0wKbbp/8SpbeuYFk 6qqf2jgQ5PWo0VR6mMh4KRMXNm5uB6Q09t3KcnkQEFECG+2Q8LK9048yoFClcm4l p8K4xE8LL78HZU6pLIhPhfTZGypndCvMcFEER3qx7t7IxzO/PxVr+2xXIleZXHvj B6O3lPsyCKXRl1QPV2gmkAFJsyHs370lXc/a6zIezKC3qmxrTG5buBQKp3x+Cocp SClVs2+XaB87aL2dQozwIkFjjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoDMvP+ 0uP+bVCGcq6KuHN61XgqMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlBcA9Lm0oMaD5x7RtK3GV7KmLUCGADz2R6oRNijbZ4/HQLA7TvbU7 lHwXOWnkwKxY2r/o3nI7CoWHWA7YQ8y4YwHHmrnAxoYvGYK1aaOvnKbTa7njtwts zaQ9r4svFyaNlpPLDyfAGNN47jNngY9YaMyL+V46a17uVjEelHV98YF/Swvurx0g BAx0e9KEMZI6whHHJZwRtLOFrWNi54jWh+AjIHL1oGuWSEJXBmYc+u0lOKcLLTdD NEQCMQoAVi+PF0UgwhQ+8jVf+ew6Ckmq5tdvx9YjQD1eM6BhTXsqAAPh7PSDNgjX sV4yaYsVnz21hoKlHREETTKXkLl7/hG7 -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:57 2025 by rpki-client