$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json) Hash identifier: GAH0xwNvy/VZRiz3vSXUXl0gj8NGbu9Wlf77vgs/1ts= Subject key identifier: 47:63:7A:AE:00:97:42:BA:97:E2:E1:84:96:7B:5A:09:6F:08:B1:D0 Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft Manifest number: AB Signing time: Sun 19 Oct 2025 09:24:29 +0000 Manifest this update: Sun 19 Oct 2025 09:24:28 +0000 Manifest next update: Sun 26 Oct 2025 09:24:28 +0000 Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: IgVxcclb+uzMsMBNrtwPHqOpMStdWGSiOOUhM+hKCYU=) 2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Validity Not Before: Oct 19 09:24:28 2025 GMT Not After : Oct 26 09:24:28 2025 GMT Subject: CN=68f4ae4c-6374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:56:ba:30:a1:e2:c1:15:12:bd:40:10:99: cc:a9:7d:d9:3e:e3:49:3e:73:34:e5:2d:fc:34:12: 71:6b:e0:55:3b:a8:de:12:4d:77:c5:6b:30:5c:e4: 6a:3a:11:0b:97:4b:90:a6:c2:ce:d4:a9:24:9b:7e: de:58:9d:10:4c:34:fc:3b:27:fd:dd:75:ea:c2:d3: e0:38:6d:33:64:ed:f0:ac:b1:39:49:dc:d9:be:6a: e6:bf:da:72:10:50:05:a5:9a:60:48:25:33:4a:3d: 14:03:19:51:5c:95:5f:f2:b3:3b:8a:1c:b3:56:d1: 6c:2e:86:35:8b:01:ee:dd:56:c7:6e:8b:0a:cc:50: f7:8e:11:84:a2:ee:cb:0d:c1:ea:88:ee:09:ca:19: ae:08:a5:ca:f8:e2:17:28:10:cf:6f:38:cf:ce:80: f5:cd:88:e9:c7:4a:eb:b1:a9:ef:88:7a:c5:bb:c6: 86:cc:ba:3a:0d:6e:a0:67:89:10:53:77:ea:e4:9b: 64:2d:dc:89:86:7a:a7:b3:33:62:be:9b:27:91:d1: 5d:5a:11:02:f2:ed:6e:91:ca:06:c4:b1:39:74:f4: a9:f2:61:e7:5b:4e:d8:cb:8b:0a:d5:b1:6f:90:c3: 7f:f8:0d:74:45:21:d9:4e:84:c2:11:2d:a3:be:20: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:63:7A:AE:00:97:42:BA:97:E2:E1:84:96:7B:5A:09:6F:08:B1:D0 X509v3 Authority Key Identifier: keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:93:48:b8:9c:6e:55:f9:cb:5b:cd:5a:58:16:45:7a:ad:80: 81:80:53:64:f8:dc:32:a9:f5:8f:c8:cc:ae:69:34:8f:af:87: 55:de:c1:a0:4d:69:36:4c:57:3d:f3:82:20:42:d6:8b:f7:0b: e9:c7:9e:8a:78:1c:28:4e:17:b0:42:7b:b7:45:86:63:e2:f9: 9a:3b:4d:71:06:19:54:72:1b:ff:c8:0e:22:2b:1f:73:85:3c: d2:6e:31:3b:20:e3:d4:ac:72:8f:24:73:cf:a4:5d:57:87:0f: d7:15:bf:e2:c7:48:2a:1a:a0:8b:63:98:b4:26:10:c2:f7:92: b6:31:e5:8a:da:38:0e:6e:d7:b0:fe:7f:ca:6d:f0:21:85:87: ec:db:4a:c5:6f:42:7a:c1:b5:e4:77:ee:43:c6:0e:3f:56:68: e6:93:e4:36:f9:94:2d:2c:27:4b:bd:76:22:e0:5b:9b:29:08: f4:15:54:08:d1:3f:da:5c:fc:bd:8b:54:49:75:32:5f:8d:9b: 2e:c5:c2:1c:07:32:b6:cd:2e:ca:e1:a3:18:38:27:46:3f:d7: d3:b5:4c:10:41:9e:e0:5a:81:2f:a2:e2:98:04:82:47:44:ae: 73:92:55:51:f2:d2:0f:57:e8:18:f5:01:2b:ee:e2:65:f9:2e: 7f:30:42:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKEY2RDM3OTMwMjc3NTFDNjJGOEFCQjkwODg2RUE5M0Y0 OUIzM0Y2NEMwHhcNMjUxMDE5MDkyNDI4WhcNMjUxMDI2MDkyNDI4WjAYMRYwFAYD VQQDEw02OGY0YWU0Yy02Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PVWujCh4sEVEr1AEJnMqX3ZPuNJPnM05S38NBJxa+BVO6jeEk13xWswXORq OhELl0uQpsLO1Kkkm37eWJ0QTDT8Oyf93XXqwtPgOG0zZO3wrLE5SdzZvmrmv9py EFAFpZpgSCUzSj0UAxlRXJVf8rM7ihyzVtFsLoY1iwHu3VbHbosKzFD3jhGEou7L DcHqiO4JyhmuCKXK+OIXKBDPbzjPzoD1zYjpx0rrsanviHrFu8aGzLo6DW6gZ4kQ U3fq5JtkLdyJhnqnszNivpsnkdFdWhEC8u1ukcoGxLE5dPSp8mHnW07Yy4sK1bFv kMN/+A10RSHZToTCES2jviD/pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdjeq4A l0K6l+LhhJZ7WglvCLHQMB8GA1UdIwQYMBaAFPbTeTAndRxi+Ku5CIbqk/SbM/ZM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS82QzcwNDhBNkFD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhHTDRxN2tJaHVxVDlKc3o5 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS82QzcwNDhBNkFDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhH TDRxN2tJaHVxVDlKc3o5a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhk0i4nG5V+ctbzVpYFkV6rYCBgFNk+NwyqfWPyMyuaTSPr4dV3sGg TWk2TFc984IgQtaL9wvpx56KeBwoThewQnu3RYZj4vmaO01xBhlUchv/yA4iKx9z hTzSbjE7IOPUrHKPJHPPpF1Xhw/XFb/ix0gqGqCLY5i0JhDC95K2MeWK2jgObtew /n/KbfAhhYfs20rFb0J6wbXkd+5Dxg4/Vmjmk+Q2+ZQtLCdLvXYi4FubKQj0FVQI 0T/aXPy9i1RJdTJfjZsuxcIcBzK2zS7K4aMYOCdGP9fTtUwQQZ7gWoEvouKYBIJH RK5zklVR8tIPV+gY9QEr7uJl+S5/MEKU -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:47 2025 by rpki-client