$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: 1gjry3s9jwDab6AUohyFK32Y/mLlYZ5fAD7yRoLuBY8= Subject key identifier: 98:8C:91:1A:9C:83:D3:C9:84:52:40:1A:69:32:CD:62:78:7C:B8:F6 Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: CC Signing time: Sun 19 Oct 2025 08:49:41 +0000 Manifest this update: Sun 19 Oct 2025 08:49:41 +0000 Manifest next update: Sun 26 Oct 2025 08:49:41 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: qElWnh32PufXj5XZtkiyI3GnxT2+EpVkstHb7jMy/8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Oct 19 08:49:41 2025 GMT Not After : Oct 26 08:49:41 2025 GMT Subject: CN=68f4a625-362e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:df:3b:af:0e:2a:d6:d6:10:68:df:dd:3b: 63:08:52:ea:85:c4:6f:b6:83:18:d4:cb:d8:39:40: 3a:af:b8:cf:8f:52:fc:c2:76:8a:ae:31:f2:b1:85: be:09:ab:37:77:bf:f6:f1:00:f1:98:9c:11:76:23: a7:4b:e1:05:f3:ce:88:65:91:c1:dd:5b:4e:7a:69: e1:0b:8f:68:88:69:b9:de:9e:8d:c9:3a:04:98:81: 6c:aa:29:6e:94:78:47:ce:cc:18:35:f7:83:32:b3: bd:dd:e4:f3:18:2d:fe:f9:65:96:ca:a5:37:e8:11: 2f:af:48:55:d9:c2:1d:74:94:5f:5d:2e:7b:f3:1d: 6e:ad:1c:8c:12:f5:82:fa:08:93:81:29:23:c6:37: 50:3e:7d:d4:a5:7d:5f:0e:0f:69:46:d5:7b:07:d6: 78:45:d1:75:f8:89:10:0f:88:93:d5:b1:e1:98:16: f6:13:75:bd:b7:11:74:56:33:0b:83:94:a4:22:3e: a1:a1:fd:76:7f:23:a0:1c:9d:d6:30:38:ed:ac:43: f0:51:29:34:ad:5d:d6:c6:43:90:3c:85:cc:ff:04: c1:02:30:bf:5d:82:75:ba:28:05:d5:bf:3c:31:1f: 55:9f:98:41:4d:a4:63:93:61:43:e4:80:03:5b:81: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8C:91:1A:9C:83:D3:C9:84:52:40:1A:69:32:CD:62:78:7C:B8:F6 X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ee:0a:72:17:ee:45:d4:58:cb:41:ca:37:28:97:c6:9c:71: 88:f1:7d:ec:54:f1:e3:f6:26:ea:8d:5d:88:85:90:a6:f3:97: 9d:e1:bc:53:1c:45:9a:ea:e5:6a:87:ba:87:a3:b0:0f:7b:4c: a0:d5:28:42:74:41:67:98:63:d6:23:0e:09:44:e3:54:97:a7: 2a:d7:16:26:c3:34:18:c0:91:1d:50:cf:24:13:ec:f6:28:39: 76:9d:c1:62:cf:d2:d5:f0:c9:03:9a:14:37:b2:df:4c:30:33: 45:90:13:59:cb:63:73:29:3a:08:b2:6b:3c:4c:6f:5d:fa:07: 34:4c:10:ec:2f:26:ff:2d:e2:e1:4d:01:7f:a8:ad:0b:f3:b8: c9:76:e4:b6:a8:85:c7:dc:ba:a3:d4:df:ea:fa:88:58:d4:fe: 77:9e:8c:9a:fd:3d:8d:fb:7c:18:57:37:68:e6:2b:b9:f2:83: f7:b3:0d:e3:fd:07:c2:4b:f4:b6:25:aa:d7:39:5e:4d:c6:79: d2:03:ae:b9:97:de:d1:18:d0:dd:3d:93:4e:6e:82:9f:75:ae: 52:3b:75:ba:d4:0c:2b:e7:f3:7e:d9:ba:28:57:6c:ce:84:4b: 1c:f8:da:28:d0:5c:01:b7:0a:ef:86:75:a6:65:52:26:f1:ee: dd:27:b3:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjUxMDE5MDg0OTQxWhcNMjUxMDI2MDg0OTQxWjAYMRYwFAYD VQQDEw02OGY0YTYyNS0zNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0XfO68OKtbWEGjf3TtjCFLqhcRvtoMY1MvYOUA6r7jPj1L8wnaKrjHysYW+ Cas3d7/28QDxmJwRdiOnS+EF886IZZHB3VtOemnhC49oiGm53p6NyToEmIFsqilu lHhHzswYNfeDMrO93eTzGC3++WWWyqU36BEvr0hV2cIddJRfXS578x1urRyMEvWC +giTgSkjxjdQPn3UpX1fDg9pRtV7B9Z4RdF1+IkQD4iT1bHhmBb2E3W9txF0VjML g5SkIj6hof12fyOgHJ3WMDjtrEPwUSk0rV3WxkOQPIXM/wTBAjC/XYJ1uigF1b88 MR9Vn5hBTaRjk2FD5IADW4GjHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiMkRqc g9PJhFJAGmkyzWJ4fLj2MB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj7gpyF+5F1FjLQco3KJfGnHGI8X3sVPHj9ibqjV2IhZCm85ed4bxT HEWa6uVqh7qHo7APe0yg1ShCdEFnmGPWIw4JRONUl6cq1xYmwzQYwJEdUM8kE+z2 KDl2ncFiz9LV8MkDmhQ3st9MMDNFkBNZy2NzKToIsms8TG9d+gc0TBDsLyb/LeLh TQF/qK0L87jJduS2qIXH3Lqj1N/q+ohY1P53noya/T2N+3wYVzdo5iu58oP3sw3j /QfCS/S2JarXOV5NxnnSA665l97RGNDdPZNOboKfda5SO3W61Awr5/N+2booV2zO hEsc+Noo0FwBtwrvhnWmZVIm8e7dJ7NH -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:52 2025 by rpki-client