$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: jWuZBIylC68Uld8nEyG0xZkCF5GxalnpdxZOw3Q8kU8= Subject key identifier: 22:85:30:74:DD:F1:B0:BA:F8:D3:F7:84:C3:6A:0B:1F:F5:CA:F8:26 Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 01EC Signing time: Sun 19 Oct 2025 05:03:39 +0000 Manifest this update: Sun 19 Oct 2025 05:03:38 +0000 Manifest next update: Sun 26 Oct 2025 05:03:38 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: nG4paFlqY6zzGrrfcAUWgemX2OAbK/FRFerarVwbxms=) 2: BCAE303EF6C611EE8AA17A87C4F9AE02.roa (hash: b9dTa2nX+qFG6d7y+XsHyu+bx2asCK2u/yxDxyFKOqQ=) 3: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: wwr+xiQ0ICFC4K2aFb1fxrN51KszvejW5t2iwGw5e3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: Oct 19 05:03:38 2025 GMT Not After : Oct 26 05:03:38 2025 GMT Subject: CN=68f4712a-b6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:fa:79:15:b2:00:71:35:31:3f:64:b6:3c: 62:67:84:b8:7a:11:ed:20:65:71:c4:34:f2:13:e5: cc:6c:16:b4:99:a2:ca:18:11:27:b2:92:4e:8c:7d: ca:4f:30:36:ec:75:4d:79:81:7a:6d:3e:0e:bc:32: 72:ac:c8:a2:ca:ef:8e:dc:ea:8c:40:64:24:7f:b4: 1c:12:c6:72:fb:4d:a5:08:00:4d:50:04:2a:8a:d5: 8a:03:8b:de:b9:bc:cd:b8:bf:3c:49:12:c0:c3:04: 78:1e:c3:30:0f:6c:5d:ed:63:af:cf:de:ea:39:cb: 30:d9:ae:cd:0e:c7:f9:89:57:9b:4e:f4:a9:6d:87: 68:6f:df:fb:ad:8e:a2:4d:cc:f5:b6:bc:c7:23:60: b1:ba:b6:29:37:85:8d:1b:e2:5b:81:94:37:74:cc: 68:0b:0c:95:e9:32:18:38:21:52:e9:28:3d:fd:9c: 64:a3:92:01:8e:7b:1c:aa:b1:e8:68:9d:5f:89:e3: 97:6c:41:53:f3:a2:f9:11:41:28:8b:86:79:42:6d: 17:93:1d:cd:59:55:80:08:43:c0:68:a3:07:46:99: d0:d1:c0:b9:86:04:e8:75:25:2c:1a:2c:70:68:56: b8:5f:95:3d:f2:d4:a8:89:96:c7:09:d3:d3:87:29: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:30:74:DD:F1:B0:BA:F8:D3:F7:84:C3:6A:0B:1F:F5:CA:F8:26 X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ae:3f:06:f8:33:2e:6d:f3:53:eb:8f:1c:5d:bf:fe:a5:5d: b4:83:d1:ed:12:8e:76:58:8e:1f:cc:6c:59:34:86:37:4e:a5: 24:a6:4c:85:c1:7f:ce:1b:3a:4e:6a:4e:04:b8:71:2f:90:29: c9:7d:10:26:4d:6d:ba:61:a9:82:5a:bf:d1:84:e0:5b:c0:93: a6:81:e0:d4:2c:bf:95:fe:c5:89:15:54:4f:60:51:e9:88:a4: ad:8e:d4:bb:a6:75:60:c4:08:94:fe:de:df:d9:66:00:75:b9: 40:8b:17:4a:c4:6c:00:10:98:8c:cd:b6:1f:9d:2e:f6:5c:77: 7a:31:ea:83:86:72:05:e4:c1:b3:f4:57:d2:ef:26:25:36:d7: 5a:f4:9a:77:54:71:1d:fe:99:88:f9:70:e4:7d:7d:e8:49:28: c3:4f:38:42:c7:96:fe:2b:73:52:fc:2f:05:0d:1b:e5:9e:09: cf:7c:11:d5:1a:a1:7c:a5:57:98:08:30:a8:ab:3a:6d:ae:b5: 07:e5:c3:ff:55:19:89:57:2f:2e:ea:f1:55:95:d3:bb:ab:b4: 1d:f0:b5:db:ec:e4:14:ed:14:3e:3c:18:a8:3c:cc:39:b8:62: e9:67:10:c0:a1:ed:22:e6:db:2d:02:30:21:79:94:e9:2a:a4: 1b:03:99:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjUxMDE5MDUwMzM4WhcNMjUxMDI2MDUwMzM4WjAYMRYwFAYD VQQDEw02OGY0NzEyYS1iNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyP6eRWyAHE1MT9ktjxiZ4S4ehHtIGVxxDTyE+XMbBa0maLKGBEnspJOjH3K TzA27HVNeYF6bT4OvDJyrMiiyu+O3OqMQGQkf7QcEsZy+02lCABNUAQqitWKA4ve ubzNuL88SRLAwwR4HsMwD2xd7WOvz97qOcsw2a7NDsf5iVebTvSpbYdob9/7rY6i Tcz1trzHI2CxurYpN4WNG+JbgZQ3dMxoCwyV6TIYOCFS6Sg9/Zxko5IBjnscqrHo aJ1fieOXbEFT86L5EUEoi4Z5Qm0Xkx3NWVWACEPAaKMHRpnQ0cC5hgTodSUsGixw aFa4X5U98tSoiZbHCdPThynahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKFMHTd 8bC6+NP3hMNqCx/1yvgmMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClrj8G+DMubfNT648cXb/+pV20g9HtEo52WI4fzGxZNIY3TqUkpkyF wX/OGzpOak4EuHEvkCnJfRAmTW26YamCWr/RhOBbwJOmgeDULL+V/sWJFVRPYFHp iKStjtS7pnVgxAiU/t7f2WYAdblAixdKxGwAEJiMzbYfnS72XHd6MeqDhnIF5MGz 9FfS7yYlNtda9Jp3VHEd/pmI+XDkfX3oSSjDTzhCx5b+K3NS/C8FDRvlngnPfBHV GqF8pVeYCDCoqzptrrUH5cP/VRmJVy8u6vFVldO7q7Qd8LXb7OQU7RQ+PBioPMw5 uGLpZxDAoe0i5tstAjAheZTpKqQbA5kr -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:01 2025 by rpki-client