$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: tXbA37Kvk0Oev53kpq31xbi+JkF5Pp/nbshh6AOzqqQ= Subject key identifier: 38:00:EC:BF:77:8C:02:16:2F:5A:F3:7F:D8:B4:AA:66:83:2F:22:7B Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: EE Signing time: Sun 19 Oct 2025 08:21:35 +0000 Manifest this update: Sun 19 Oct 2025 08:21:34 +0000 Manifest next update: Sun 26 Oct 2025 08:21:34 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: ptB+3a6S/g2NqWgNomywW1SMGtjpi5DPhCAaHQWf2qk=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: NhOdHEmUoQd5YvUf9TabAJ2MpFyvN1YFKpx5g77iQO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Oct 19 08:21:34 2025 GMT Not After : Oct 26 08:21:34 2025 GMT Subject: CN=68f49f8e-923b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:bb:b5:f1:40:63:52:1e:21:88:5b:55:3b: 69:39:d0:59:87:51:3f:80:1c:72:f5:8e:b0:e8:b4: d6:4c:15:67:6e:66:af:de:1b:a6:7d:29:f2:4b:d8: e4:0b:be:60:7c:e1:12:a0:1c:03:87:fe:a5:fa:8a: cc:d0:55:6a:a4:a2:fb:0f:1a:b4:63:07:36:a6:fd: c4:80:c3:df:43:9a:e6:57:72:e2:e8:26:f0:03:b7: 00:f0:f1:bf:4b:42:d5:90:cd:3a:a5:f7:44:8d:4f: 4d:7a:84:b6:a0:f0:c6:3a:cc:c1:50:e1:85:3d:16: c5:cf:ec:51:a2:78:74:47:c2:5f:c0:fc:06:a1:5e: 0e:f5:47:b4:5e:0b:e9:31:a9:5e:67:49:d3:7f:8a: 9e:f9:a4:77:e8:9e:d1:d8:3b:9a:0f:ec:43:2b:8c: db:29:36:3e:6a:ab:ea:8d:f2:41:ea:46:73:97:eb: 7c:a5:2f:62:ae:9e:c4:f1:45:31:b3:5a:32:45:2b: 83:04:8a:11:9c:35:a2:98:8b:6b:2e:1b:69:e7:8c: dc:74:b9:cc:52:27:d0:92:82:4c:5f:1b:83:df:f4: 34:39:8d:98:35:ea:0f:eb:ea:c1:58:5d:8a:03:7f: d6:f9:9d:b1:a0:2b:5d:39:cb:23:36:58:d2:e6:89: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:00:EC:BF:77:8C:02:16:2F:5A:F3:7F:D8:B4:AA:66:83:2F:22:7B X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:49:76:6d:04:cd:dc:47:89:11:d4:a2:bf:76:c8:49:7b:a9: 01:52:35:68:9a:db:9c:a3:d0:7e:84:f7:56:d0:2b:81:4c:f8: 99:ec:99:e7:59:01:5b:1c:31:fe:00:99:6f:a4:b1:ce:a9:14: c1:2d:5d:95:9b:ab:39:bb:33:fd:21:43:3f:7a:fb:47:3e:17: 60:49:5f:60:d6:62:f6:39:77:67:c2:8f:43:43:95:8f:48:1d: 54:f1:7d:0f:af:65:48:8a:0a:a7:32:e9:ac:41:95:98:a0:af: ec:d6:16:cc:ce:77:89:bc:f2:61:41:47:b8:43:40:44:16:f7: 10:9a:0e:32:4e:5f:7e:ff:e5:45:b5:18:42:31:26:43:99:01: b5:80:d3:25:d8:73:ef:0f:19:3f:a0:4e:92:90:cd:67:5b:7a: 37:80:23:03:6d:76:b5:62:37:eb:a1:bb:04:ca:e7:07:6f:7d: d7:e0:6d:ce:3f:89:93:22:c0:f9:89:54:d8:4f:9e:de:29:1e: 91:c8:ff:37:2b:8d:62:2d:95:f9:f5:10:e4:15:74:1b:5b:7a: 9c:2c:90:51:ab:fa:45:a2:48:94:1a:80:90:3f:a4:19:95:fa: 30:71:32:81:64:ae:26:88:1e:23:97:c3:1f:8d:40:3b:ad:cd: e4:f0:90:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjUxMDE5MDgyMTM0WhcNMjUxMDI2MDgyMTM0WjAYMRYwFAYD VQQDEw02OGY0OWY4ZS05MjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3i7tfFAY1IeIYhbVTtpOdBZh1E/gBxy9Y6w6LTWTBVnbmav3humfSnyS9jk C75gfOESoBwDh/6l+orM0FVqpKL7Dxq0Ywc2pv3EgMPfQ5rmV3Li6CbwA7cA8PG/ S0LVkM06pfdEjU9NeoS2oPDGOszBUOGFPRbFz+xRonh0R8JfwPwGoV4O9Ue0Xgvp MaleZ0nTf4qe+aR36J7R2DuaD+xDK4zbKTY+aqvqjfJB6kZzl+t8pS9irp7E8UUx s1oyRSuDBIoRnDWimItrLhtp54zcdLnMUifQkoJMXxuD3/Q0OY2YNeoP6+rBWF2K A3/W+Z2xoCtdOcsjNljS5omjDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgA7L93 jAIWL1rzf9i0qmaDLyJ7MB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASSXZtBM3cR4kR1KK/dshJe6kBUjVomtuco9B+hPdW0CuBTPiZ7Jnn WQFbHDH+AJlvpLHOqRTBLV2Vm6s5uzP9IUM/evtHPhdgSV9g1mL2OXdnwo9DQ5WP SB1U8X0Pr2VIigqnMumsQZWYoK/s1hbMzneJvPJhQUe4Q0BEFvcQmg4yTl9+/+VF tRhCMSZDmQG1gNMl2HPvDxk/oE6SkM1nW3o3gCMDbXa1YjfrobsEyucHb33X4G3O P4mTIsD5iVTYT57eKR6RyP83K41iLZX59RDkFXQbW3qcLJBRq/pFokiUGoCQP6QZ lfowcTKBZK4miB4jl8MfjUA7rc3k8JA+ -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:15 2025 by rpki-client