$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json) Hash identifier: E6UdrVDd+WETanDKROCcNdIucwIJdBWO/Q2A5TeFOgw= Subject key identifier: 94:4E:55:5F:9A:AC:57:E2:1E:9D:F3:20:D9:6E:C2:CF:47:82:83:4F Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft Manifest number: AC Signing time: Sun 19 Oct 2025 09:20:10 +0000 Manifest this update: Sun 19 Oct 2025 09:20:09 +0000 Manifest next update: Sun 26 Oct 2025 09:20:09 +0000 Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: hoXOTtCP7lPDBheOMPP2lh5PY0FPWH090a20e3yxv1s=) 2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: iUCXkP/k8vFDK+xe4w0gGSkxJOnd/FNj32EaA1KJbt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Validity Not Before: Oct 19 09:20:09 2025 GMT Not After : Oct 26 09:20:09 2025 GMT Subject: CN=68f4ad49-49a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:3a:40:a0:4b:0b:91:53:98:76:3f:82:0b: f5:ba:76:3a:d6:6a:b6:6d:8f:a1:0b:fd:be:e0:42: 69:c9:28:d2:84:fe:6b:50:4a:0c:fd:ae:c5:0f:b9: 28:97:52:83:d8:9e:c4:79:26:de:24:29:e2:33:37: a7:c0:18:57:ac:a8:4e:a0:3c:a3:cd:06:f3:21:15: d2:77:20:77:8a:91:4e:42:e0:34:fe:20:ac:58:ca: c1:82:6d:02:ea:93:d2:8e:c2:47:6d:2d:e2:0c:69: 48:17:89:27:b1:3f:93:a3:53:12:67:c5:9d:72:1a: 7d:ed:bc:44:dc:0a:cb:b3:88:3c:7b:b0:d9:25:4f: a5:38:27:e8:ae:e9:5d:2a:65:ae:98:26:b4:fb:e3: 5e:4b:2f:e1:9a:e2:63:b8:60:9d:9c:63:72:01:97: 91:a1:2e:28:3a:cc:0d:4f:72:ec:d2:0e:fc:ac:ae: c0:04:d3:6c:10:85:56:da:aa:1d:c2:68:21:e2:e7: 22:76:98:a6:c3:25:46:8c:6f:2a:fb:ce:92:be:1c: 5b:c0:11:3b:d7:ce:c1:e1:ce:6c:63:3c:2f:f6:fe: df:05:38:f7:59:f1:51:81:3f:32:d5:5d:1b:7f:b8: bc:8c:c0:d0:8a:db:0d:2b:39:1f:03:ff:68:e5:26: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4E:55:5F:9A:AC:57:E2:1E:9D:F3:20:D9:6E:C2:CF:47:82:83:4F X509v3 Authority Key Identifier: keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:5b:7d:4c:32:04:36:56:aa:ed:9a:c1:d6:39:54:0f:22:0e: 67:f0:09:29:8d:b8:e6:c1:8b:78:92:45:b8:f8:bd:15:48:fb: d9:9a:33:10:b1:b7:5a:db:73:89:f6:74:c3:9f:f3:1e:4a:a7: 31:e0:8b:71:a3:40:58:11:1d:87:44:8d:be:4b:ff:4c:9d:46: ee:59:00:db:81:4d:29:16:fb:24:a0:3d:f9:3a:4e:f9:af:69: 98:03:f1:f9:db:2c:ee:8f:75:67:03:b8:ea:15:b1:8c:1a:b3: 52:b5:1f:03:b1:dd:59:e0:b3:5a:c9:1d:07:f8:7a:50:0a:ae: 43:14:72:85:f0:f4:46:47:e1:a1:94:6a:0a:e9:b6:79:98:25: 87:f1:0a:a0:bf:2d:95:b0:1d:50:aa:ba:e4:23:c3:33:17:c9: c0:95:b1:9e:5a:17:e0:ee:7d:17:1e:a2:cd:80:91:2b:e6:63: e8:d4:84:ce:ab:b9:28:6a:d7:64:ac:71:ac:3d:8f:46:10:ca: 79:d9:61:11:35:ad:9f:e0:7e:97:1f:f9:a1:26:2b:1e:e0:3b: 21:3c:81:98:ae:c1:fe:f4:1e:d1:85:46:a8:1a:71:ae:1e:bb: 91:2f:34:d8:64:0d:0e:14:06:93:09:a9:b7:08:0a:94:4a:74: 94:16:1f:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDZGN0U1OEQwODk2Mzg5RjdFN0ZFNEU4Nzk1QUE1NTVE NUM1NTUxODgwHhcNMjUxMDE5MDkyMDA5WhcNMjUxMDI2MDkyMDA5WjAYMRYwFAYD VQQDEw02OGY0YWQ0OS00OWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBk6QKBLC5FTmHY/ggv1unY61mq2bY+hC/2+4EJpySjShP5rUEoM/a7FD7ko l1KD2J7EeSbeJCniMzenwBhXrKhOoDyjzQbzIRXSdyB3ipFOQuA0/iCsWMrBgm0C 6pPSjsJHbS3iDGlIF4knsT+To1MSZ8Wdchp97bxE3ArLs4g8e7DZJU+lOCforuld KmWumCa0++NeSy/hmuJjuGCdnGNyAZeRoS4oOswNT3Ls0g78rK7ABNNsEIVW2qod wmgh4ucidpimwyVGjG8q+86SvhxbwBE7187B4c5sYzwv9v7fBTj3WfFRgT8y1V0b f7i8jMDQitsNKzkfA/9o5SZlcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJROVV+a rFfiHp3zINluws9HgoNPMB8GA1UdIwQYMBaAFG9+WNCJY4n35/5Oh5WqVV1cVVGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zQUJBODBBQUE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlmZm5fazZIbGFwVlhWeFZV WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zQUJBODBBQUE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlm Zm5fazZIbGFwVlhWeFZVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqW31MMgQ2VqrtmsHWOVQPIg5n8AkpjbjmwYt4kkW4+L0VSPvZmjMQ sbda23OJ9nTDn/MeSqcx4Itxo0BYER2HRI2+S/9MnUbuWQDbgU0pFvskoD35Ok75 r2mYA/H52yzuj3VnA7jqFbGMGrNStR8Dsd1Z4LNayR0H+HpQCq5DFHKF8PRGR+Gh lGoK6bZ5mCWH8Qqgvy2VsB1QqrrkI8MzF8nAlbGeWhfg7n0XHqLNgJEr5mPo1ITO q7koatdkrHGsPY9GEMp52WERNa2f4H6XH/mhJise4DshPIGYrsH+9B7RhUaoGnGu HruRLzTYZA0OFAaTCam3CAqUSnSUFh9W -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:46 2025 by rpki-client