$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json) Hash identifier: +IPL39pokIQzNDLGixVK5nhvjwSAc6ZHG+ixKfK4z5M= Subject key identifier: 56:C8:77:E9:21:DB:A5:7C:FA:0B:B1:28:15:3C:B0:DA:09:63:41:70 Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1EF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft Manifest number: 1EEA Signing time: Mon 20 Oct 2025 16:16:34 +0000 Manifest this update: Mon 20 Oct 2025 16:16:33 +0000 Manifest next update: Mon 27 Oct 2025 16:16:33 +0000 Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: DnhEkm9JT19/mUe5n7BPi8gNn3SBEpLh7XDi443rFJ0=) 2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: C0V7rJkkp2JIZ4YaUDj+rMPHF5Fx4yPepeCUU5377D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7925 (0x1ef5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: Oct 20 16:16:33 2025 GMT Not After : Oct 27 16:16:33 2025 GMT Subject: CN=68f66061-b068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:22:0a:2f:6b:fa:4b:f9:ce:76:2d:eb:61: a0:03:80:5b:14:cb:71:3b:b5:1b:c6:60:18:83:8e: 64:7a:5b:bc:f7:e5:f7:bb:93:74:a3:1f:f5:07:12: 51:71:03:68:c1:57:44:97:c7:c4:93:98:47:58:08: db:c8:78:f5:50:56:ad:f3:94:6b:d3:68:c8:a4:73: 23:af:f1:4e:8f:7d:fa:21:ab:c5:76:f6:fd:3d:fa: 0f:5d:38:d6:19:7e:bb:07:f8:55:08:93:ce:13:3f: 17:4f:67:25:33:ce:77:fb:92:7b:4e:f6:2c:2a:13: 8a:be:e5:0b:06:4f:86:be:4e:e1:91:51:3e:b9:dd: d3:97:02:6b:a4:bd:1d:1f:50:71:ab:87:b9:27:d2: 2e:3d:f6:5f:dd:ca:fc:8f:c6:8e:51:99:3a:2f:0d: b3:42:b5:aa:c4:32:28:0e:9a:57:05:62:dd:92:24: 3a:da:00:fc:a5:6d:96:ac:8d:3c:3b:db:e5:5b:4d: 16:4f:98:aa:aa:38:60:be:0c:82:7a:e9:2f:61:a7: 3e:4c:6e:9a:b8:1d:32:a7:f6:08:5a:15:f4:1f:ba: d0:06:88:d7:e6:c8:dc:97:8b:75:50:d9:fb:71:8f: ff:6d:05:85:73:87:dd:1f:71:5f:11:01:d5:4b:fa: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C8:77:E9:21:DB:A5:7C:FA:0B:B1:28:15:3C:B0:DA:09:63:41:70 X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:12:75:fb:37:95:54:b1:fa:3f:36:ed:ac:eb:ec:72:06:54: 2a:e6:ee:06:e1:75:f4:4c:1d:3d:b4:9b:28:40:ed:7a:98:9c: 14:64:a0:4f:a9:6b:23:17:ff:67:92:70:d5:d1:e3:a6:94:bd: 76:3d:59:c7:64:d0:b3:75:43:df:48:23:8b:66:18:36:1d:4d: 29:9d:55:25:6c:67:36:b6:08:37:b9:f0:d6:91:c5:0e:b1:75: 05:7b:0f:ea:f6:7b:b0:ac:4d:3a:7b:6f:77:0e:89:94:e0:42: ed:f2:06:82:80:4e:5e:82:d6:13:99:cf:2c:72:ef:ad:1f:34: f5:37:e4:29:ea:0d:82:bd:78:38:79:d3:e0:b5:dd:90:40:ea: f2:8f:6a:d9:51:76:7b:78:4c:14:f8:48:be:d8:6a:6e:85:51: fa:f8:f5:fd:0f:1a:e0:d5:00:2b:9e:b9:88:04:d3:4a:fc:23: 77:5a:ca:d3:01:54:d1:10:62:fa:33:a3:66:24:23:66:3c:b2: 33:87:f8:fb:8c:36:9e:66:4e:01:3c:ac:2d:51:2a:85:9f:3d: a1:88:fe:b0:9e:58:ab:ea:f9:ea:24:6e:9b:51:10:e6:6b:11: b4:97:d7:68:57:30:81:43:62:ab:92:65:85:8b:ac:8b:82:01: b9:6e:88:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUxMDIwMTYxNjMzWhcNMjUxMDI3MTYxNjMzWjAYMRYwFAYD VQQDEw02OGY2NjA2MS1iMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpEiCi9r+kv5znYt62GgA4BbFMtxO7UbxmAYg45kelu89+X3u5N0ox/1BxJR cQNowVdEl8fEk5hHWAjbyHj1UFat85Rr02jIpHMjr/FOj336IavFdvb9PfoPXTjW GX67B/hVCJPOEz8XT2clM853+5J7TvYsKhOKvuULBk+Gvk7hkVE+ud3TlwJrpL0d H1Bxq4e5J9IuPfZf3cr8j8aOUZk6Lw2zQrWqxDIoDppXBWLdkiQ62gD8pW2WrI08 O9vlW00WT5iqqjhgvgyCeukvYac+TG6auB0yp/YIWhX0H7rQBojX5sjcl4t1UNn7 cY//bQWFc4fdH3FfEQHVS/r+OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbId+kh 26V8+guxKBU8sNoJY0FwMB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRGOC8yMjhBRDNFQTZCMzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5q cTNTV1FIUzI1a2xHZE9MMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGEnX7N5VUsfo/Nu2s6+xyBlQq5u4G4XX0TB09tJsoQO16mJwUZKBP qWsjF/9nknDV0eOmlL12PVnHZNCzdUPfSCOLZhg2HU0pnVUlbGc2tgg3ufDWkcUO sXUFew/q9nuwrE06e293DomU4ELt8gaCgE5egtYTmc8scu+tHzT1N+Qp6g2CvXg4 edPgtd2QQOryj2rZUXZ7eEwU+Ei+2GpuhVH6+PX9Dxrg1QArnrmIBNNK/CN3WsrT AVTREGL6M6NmJCNmPLIzh/j7jDaeZk4BPKwtUSqFnz2hiP6wnlir6vnqJG6bURDm axG0l9doVzCBQ2KrkmWFi6yLggG5bogo -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:02 2025 by rpki-client