$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json) Hash identifier: efeZGrHBCaAFU3PemtSq68HUbmm6Gx/nVGe4bujZPoA= Subject key identifier: 84:FC:54:33:9B:BB:DB:E5:69:B7:48:F8:13:D2:8B:F2:60:CA:E6:2B Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft Manifest number: AB Signing time: Sun 19 Oct 2025 09:22:31 +0000 Manifest this update: Sun 19 Oct 2025 09:22:30 +0000 Manifest next update: Sun 26 Oct 2025 09:22:30 +0000 Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: IvC4X/qRvg5OQaOfkpxIUq3slfYq9aEctSlaTqogUM0=) 2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: mTvWjDqRpjoE4gToiz3x8YclXADkkIN+m00HGh0rTzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Validity Not Before: Oct 19 09:22:30 2025 GMT Not After : Oct 26 09:22:30 2025 GMT Subject: CN=68f4add6-8ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:cd:d0:48:f3:1f:f6:62:63:b5:c1:2c:ab: 7e:1e:e0:67:88:a2:39:48:56:b6:f2:cd:77:7b:76: 20:06:26:ea:ec:89:05:5e:6a:b3:77:8b:3a:25:91: 36:78:b3:19:94:9c:27:5c:44:ed:bd:a6:c7:31:4f: 85:bb:93:be:91:b9:42:23:6a:de:1a:2b:c4:85:cc: 44:15:5f:4e:60:e5:d8:70:9f:18:f1:03:10:71:91: d3:64:5c:9e:d4:2d:59:ca:ac:b7:0e:be:48:93:da: 73:17:3e:3d:57:bc:37:40:e3:92:0a:5f:58:f8:87: 18:f4:c7:d0:a7:95:cf:bb:bc:df:ea:7b:ed:d6:34: 13:c9:46:3c:22:01:7b:ca:7d:70:c1:73:d9:98:3f: bb:d9:17:32:51:d9:3c:c7:44:79:ae:e0:06:91:9a: a4:0f:c2:98:42:26:ac:08:16:46:20:b7:bd:41:84: 2d:30:7c:1c:be:2f:b8:44:43:78:4d:33:5c:47:d8: 45:05:b9:2d:f5:b9:45:a4:e0:2f:27:cf:ac:51:e6: c0:1d:ac:72:9c:dc:cd:b4:91:38:a4:d9:e4:c9:ca: 60:a0:db:44:d3:f3:a3:4f:f9:7a:65:12:4f:8a:dd: 3b:8a:d0:2a:db:b0:29:49:88:67:4a:8b:b7:2a:f6: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FC:54:33:9B:BB:DB:E5:69:B7:48:F8:13:D2:8B:F2:60:CA:E6:2B X509v3 Authority Key Identifier: keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ee:a4:9b:24:92:2d:1d:b4:b0:6d:a5:8c:1e:58:4f:9d:cd: d4:97:29:e0:4a:30:ec:9c:e3:cd:74:92:a8:53:10:06:5d:a8: fb:6a:44:a0:26:92:9a:1b:2c:23:f9:a3:83:2d:dc:40:8e:b0: a5:94:f6:47:cd:55:25:87:2a:9d:ff:9d:58:a2:3f:23:89:35: d1:8c:61:81:17:27:81:02:0c:f2:a6:36:23:b0:7a:71:23:9d: f2:74:68:d3:da:3e:4b:f9:4c:f6:f5:a9:6b:9a:88:ee:0f:9c: 1f:3c:6a:eb:fc:9d:d0:6e:ee:07:ba:b2:ae:44:78:16:dc:13: b0:6b:54:7e:73:0f:28:cd:d5:4e:24:1d:fd:fe:39:74:64:4a: c7:42:fa:db:70:30:f2:c7:db:16:d9:f7:14:2b:6b:a0:73:cc: 4f:54:38:46:f1:46:ed:7e:98:6c:c0:29:16:d7:18:4f:61:90: a2:90:06:54:3a:1e:a5:4b:56:63:c2:ae:7d:43:f0:bf:26:3d: ad:e2:2a:14:99:cb:3d:b6:ae:15:60:81:f5:84:ee:ad:50:e2: 46:54:87:76:3e:59:7c:5b:0d:b5:6e:dc:48:79:07:18:d3:23: 58:2d:f5:34:9d:2f:fc:e6:10:f9:8d:96:ae:9a:6f:f6:f7:38: 2e:c2:a8:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM5Q0YxMTAvBgNVBAUTKDRBN0QyNkM0Q0JGMTY3MDAyNDVENjdGQkY2OTUwQjcx MjkxODk5MzkwHhcNMjUxMDE5MDkyMjMwWhcNMjUxMDI2MDkyMjMwWjAYMRYwFAYD VQQDEw02OGY0YWRkNi04ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3XN0EjzH/ZiY7XBLKt+HuBniKI5SFa28s13e3YgBibq7IkFXmqzd4s6JZE2 eLMZlJwnXETtvabHMU+Fu5O+kblCI2reGivEhcxEFV9OYOXYcJ8Y8QMQcZHTZFye 1C1Zyqy3Dr5Ik9pzFz49V7w3QOOSCl9Y+IcY9MfQp5XPu7zf6nvt1jQTyUY8IgF7 yn1wwXPZmD+72RcyUdk8x0R5ruAGkZqkD8KYQiasCBZGILe9QYQtMHwcvi+4REN4 TTNcR9hFBbkt9blFpOAvJ8+sUebAHaxynNzNtJE4pNnkycpgoNtE0/OjT/l6ZRJP it07itAq27ApSYhnSou3KvYUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT8VDOb u9vlabdI+BPSi/JgyuYrMB8GA1UdIwQYMBaAFEp9JsTL8WcAJF1n+/aVC3EpGJk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzlDRi80REYyQkU1MkE5 OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3QWtYV2Y3OXBVTGNTa1lt VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuMG14TXZ4WndBa1hXZjc5cFVMY1NrWW1Uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzlDRi80REYyQkU1MkE5OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3 QWtYV2Y3OXBVTGNTa1ltVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk7qSbJJItHbSwbaWMHlhPnc3UlyngSjDsnOPNdJKoUxAGXaj7akSg JpKaGywj+aODLdxAjrCllPZHzVUlhyqd/51Yoj8jiTXRjGGBFyeBAgzypjYjsHpx I53ydGjT2j5L+Uz29alrmojuD5wfPGrr/J3Qbu4HurKuRHgW3BOwa1R+cw8ozdVO JB39/jl0ZErHQvrbcDDyx9sW2fcUK2ugc8xPVDhG8UbtfphswCkW1xhPYZCikAZU Oh6lS1Zjwq59Q/C/Jj2t4ioUmcs9tq4VYIH1hO6tUOJGVId2Pll8Ww21btxIeQcY 0yNYLfU0nS/85hD5jZaumm/29zguwqjS -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:00 2025 by rpki-client