$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft File: 64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json) Hash identifier: oxH7x0TxAAokzEHUDKAKHxKotrzLckjANJjK2MsF81M= Subject key identifier: 33:85:BC:23:FC:0A:4A:16:FA:01:C7:99:BB:32:81:7B:6D:20:4F:9F Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 Certificate issuer: /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft Manifest number: 90 Signing time: Sun 19 Oct 2025 09:44:23 +0000 Manifest this update: Sun 19 Oct 2025 09:44:23 +0000 Manifest next update: Sun 26 Oct 2025 09:44:23 +0000 Files and hashes: 1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: ujWGUuQMn85G7vUFUZ0xCSV+zJbWAeY+LUGx+zhK9V4=) 2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: IREGMcYzyBbo6wcvGexVHMAjLf7W6LD1j2SfUrLribg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Validity Not Before: Oct 19 09:44:23 2025 GMT Not After : Oct 26 09:44:23 2025 GMT Subject: CN=68f4b2f7-aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:f1:02:1e:87:13:28:cc:b9:72:27:dc:f5: 8f:e1:2c:b7:ce:be:ed:2f:45:f6:6f:a3:e6:b3:9b: 6e:d9:25:f7:5e:2d:cc:bf:85:06:f5:ac:23:09:c3: 2b:4e:d1:18:af:17:47:7b:4c:46:54:a3:46:9b:b7: 59:83:d5:92:ca:4e:a0:2d:9b:89:c7:b8:81:2f:3d: 4e:0f:de:18:1d:12:8f:6b:35:65:a6:55:b6:77:dd: 8c:3b:4c:00:34:92:e7:7e:85:0e:89:c9:43:71:f3: 16:6e:30:82:18:0a:43:e8:4f:e5:61:91:6b:4c:53: 41:a1:b3:ce:d1:8b:df:5d:6c:d2:d2:5a:4a:bf:4b: 7b:54:08:28:db:e9:2b:d4:7f:29:6b:ac:5d:31:00: 9a:e1:b0:fc:a3:37:78:e1:71:2f:72:3a:e1:eb:68: 23:ec:94:9b:0f:cb:97:8f:bb:a7:ea:db:0e:60:e8: 9e:08:45:bd:ae:47:ab:9e:38:eb:7c:b1:c7:0f:28: 83:23:05:4c:a7:ae:85:5a:87:2a:da:43:6d:8b:1a: e5:e0:b8:2f:31:86:7a:d5:20:bd:da:93:92:00:0b: a0:36:00:1d:04:cd:a5:5f:d8:37:7f:3b:74:39:24: a2:de:8d:ff:8a:77:59:57:f5:6a:3d:b1:64:04:ec: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:BC:23:FC:0A:4A:16:FA:01:C7:99:BB:32:81:7B:6D:20:4F:9F X509v3 Authority Key Identifier: keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:4e:f6:2b:0e:c0:5d:5a:82:d4:d4:cf:18:6e:f6:e2:67:76: 0b:d8:56:7a:dc:d9:1d:8d:55:63:9e:ca:2f:d5:6e:5f:a0:f6: cf:0e:83:69:9f:7c:ea:c3:ff:90:84:90:ad:8b:a2:43:08:4d: 66:36:80:1c:89:dc:1a:f9:84:1f:41:e6:4e:3d:00:d5:a8:b2: 04:9c:7e:ee:8d:c5:b7:15:2c:e2:b1:e8:e0:e0:8e:80:55:ba: 34:90:bc:02:93:d1:90:66:08:f0:f8:d7:bf:f7:74:0f:8f:9a: 15:15:c1:eb:13:84:90:8b:0d:3c:c6:13:08:cf:63:4f:eb:35: 96:05:78:36:eb:a1:93:11:22:45:1d:2c:f6:94:25:ec:d1:c1: e9:4e:78:28:5b:8f:46:15:82:58:90:b4:1f:6b:3d:a0:56:3a: bd:b4:c9:f5:fb:c4:ae:e5:ba:37:98:56:e1:5f:76:99:d3:1c: 1a:a2:d1:86:7c:21:b5:5b:a8:07:04:b1:90:5c:ed:14:21:1a: 92:61:d7:c1:8c:e6:94:35:e9:fc:ee:8d:9b:72:08:fe:4b:06: 08:fa:f4:ea:71:45:8c:ee:65:31:ab:19:ea:77:02:8f:0d:63: da:20:27:76:fb:6c:43:82:b2:69:d6:89:47:98:67:6c:fa:0f: 90:aa:64:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjMxMTAvBgNVBAUTKEVCODNGNDg4MEYyMzU3NUU1NzUxNzg1QzZFMEFCMkJF MEIyNDlCQzMwHhcNMjUxMDE5MDk0NDIzWhcNMjUxMDI2MDk0NDIzWjAYMRYwFAYD VQQDEw02OGY0YjJmNy1hZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hfxAh6HEyjMuXIn3PWP4Sy3zr7tL0X2b6Pms5tu2SX3Xi3Mv4UG9awjCcMr TtEYrxdHe0xGVKNGm7dZg9WSyk6gLZuJx7iBLz1OD94YHRKPazVlplW2d92MO0wA NJLnfoUOiclDcfMWbjCCGApD6E/lYZFrTFNBobPO0YvfXWzS0lpKv0t7VAgo2+kr 1H8pa6xdMQCa4bD8ozd44XEvcjrh62gj7JSbD8uXj7un6tsOYOieCEW9rkernjjr fLHHDyiDIwVMp66FWocq2kNtixrl4LgvMYZ61SC92pOSAAugNgAdBM2lX9g3fzt0 OSSi3o3/indZV/VqPbFkBOwlRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOFvCP8 CkoW+gHHmbsygXttIE+fMB8GA1UdIwQYMBaAFOuD9IgPI1deV1F4XG4Ksr4LJJvD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy81OEZFNzRBRUQw QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYxNVhVWGhjYmdxeXZnc2tt OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzY0UDBpQThqVjE1WFVYaGNiZ3F5dmdza204TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGMy81OEZFNzRBRUQwQjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYx NVhVWGhjYmdxeXZnc2ttOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVTvYrDsBdWoLU1M8YbvbiZ3YL2FZ63NkdjVVjnsov1W5foPbPDoNp n3zqw/+QhJCti6JDCE1mNoAcidwa+YQfQeZOPQDVqLIEnH7ujcW3FSzisejg4I6A Vbo0kLwCk9GQZgjw+Ne/93QPj5oVFcHrE4SQiw08xhMIz2NP6zWWBXg266GTESJF HSz2lCXs0cHpTngoW49GFYJYkLQfaz2gVjq9tMn1+8Su5bo3mFbhX3aZ0xwaotGG fCG1W6gHBLGQXO0UIRqSYdfBjOaUNen87o2bcgj+SwYI+vTqcUWM7mUxqxnqdwKP DWPaICd2+2xDgrJp1olHmGds+g+QqmQJ -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:29 2025 by rpki-client