$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: 4rOE2PangoTo1Qr9TSnf2atj/QhYkG142MJpTseGLII= Subject key identifier: 09:04:0F:E6:0A:23:03:CD:2C:00:B5:83:AA:2A:F6:81:8F:8E:E4:C6 Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 08B6 Signing time: Mon 20 Oct 2025 21:22:47 +0000 Manifest this update: Mon 20 Oct 2025 21:22:47 +0000 Manifest next update: Mon 27 Oct 2025 21:22:47 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: dLoBxRkuCUFOXUqg7oelS8x5cQSRKCLv+32NEdzHbuo=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: MIyBunftYkQco/m/ADmv4S1fyRxTgeEhYhl9wBxnLIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Oct 20 21:22:47 2025 GMT Not After : Oct 27 21:22:47 2025 GMT Subject: CN=68f6a827-d248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:e2:b4:54:34:d3:07:c3:3f:dd:f4:05:81: 42:57:d2:b5:43:06:27:38:6e:68:80:dc:12:91:b2: a5:6d:f1:98:f8:5a:45:2b:dc:40:d8:ca:55:41:41: 92:2c:14:ac:e2:c9:90:e5:52:66:88:d8:2f:aa:f3: cc:80:62:f7:2d:61:07:1d:8d:f6:19:3b:33:98:e2: 76:b9:da:91:22:91:d5:94:6e:25:2e:3e:7c:60:5a: fd:86:3e:22:2e:6e:06:fa:7b:95:90:d6:2e:82:d7: ed:af:3e:a5:91:26:63:20:be:95:f6:71:b0:83:c1: f1:6e:ac:98:f1:fa:a5:5a:9c:60:9b:4c:ed:39:6b: 29:35:d5:7b:a2:ba:05:2d:16:aa:ce:b6:81:6c:d9: 8e:3b:c5:7d:56:1b:86:ac:0e:35:bc:19:c1:45:34: fa:cb:d1:18:03:e7:66:67:41:6f:10:91:0c:76:12: ac:5e:e8:34:55:7a:9a:39:15:0b:26:c7:bf:ac:03: cc:08:da:cb:9c:0b:27:b9:04:b2:6e:1c:c9:df:9f: ec:3a:6d:fd:38:27:c3:b4:5f:c4:4d:0f:c7:28:08: 17:93:03:c3:88:fb:af:a1:ad:22:5a:4d:c8:19:d1: 8d:11:c9:cf:d6:97:bb:09:4b:58:25:8f:49:9d:d0: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:0F:E6:0A:23:03:CD:2C:00:B5:83:AA:2A:F6:81:8F:8E:E4:C6 X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:86:ee:1d:f4:f0:75:96:c1:44:00:78:b3:bb:8d:95:df:72: 82:49:03:d1:2c:58:8c:80:65:c8:a3:b3:bf:07:c5:d7:cb:67: a3:ab:67:cb:a3:41:74:d1:73:d7:88:34:8a:0b:c1:75:91:f3: 33:f6:a8:d4:5a:2b:f6:7c:13:b1:e2:3c:ae:bb:71:79:be:7c: 6e:e2:f5:f1:92:b9:52:19:95:20:6c:c6:19:67:a7:31:cd:33: 7c:e1:24:2b:98:02:28:33:d8:44:7a:f9:d6:57:0b:40:15:f6: c3:f8:ab:c3:0b:7f:9c:9f:27:de:39:9d:8d:19:82:d1:fe:96: 58:9c:5e:a7:84:f4:33:80:8b:c2:19:83:15:57:90:d6:cb:50: b6:67:c9:42:34:77:4d:5f:ee:bd:41:db:68:e2:91:d1:30:1c: 15:d4:a0:5b:cc:ff:4b:76:25:44:54:79:a0:fb:d6:a2:8b:68: c4:0a:87:d4:70:ca:31:51:35:c8:c7:cd:ae:bc:09:d8:ad:04: 03:91:84:06:d7:25:4d:e9:66:32:1e:e3:fb:19:30:4d:5b:13: eb:aa:5a:3c:2b:ba:6a:e1:ae:e6:cf:42:a8:4f:0f:ab:2f:67: c7:e8:71:65:6e:57:98:01:1e:a1:6b:7c:4f:49:4b:3e:b6:53: 3f:16:22:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUxMDIwMjEyMjQ3WhcNMjUxMDI3MjEyMjQ3WjAYMRYwFAYD VQQDEw02OGY2YTgyNy1kMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuDitFQ00wfDP930BYFCV9K1QwYnOG5ogNwSkbKlbfGY+FpFK9xA2MpVQUGS LBSs4smQ5VJmiNgvqvPMgGL3LWEHHY32GTszmOJ2udqRIpHVlG4lLj58YFr9hj4i Lm4G+nuVkNYugtftrz6lkSZjIL6V9nGwg8HxbqyY8fqlWpxgm0ztOWspNdV7oroF LRaqzraBbNmOO8V9VhuGrA41vBnBRTT6y9EYA+dmZ0FvEJEMdhKsXug0VXqaORUL Jse/rAPMCNrLnAsnuQSybhzJ35/sOm39OCfDtF/ETQ/HKAgXkwPDiPuvoa0iWk3I GdGNEcnP1pe7CUtYJY9JndBPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkED+YK IwPNLAC1g6oq9oGPjuTGMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfhu4d9PB1lsFEAHizu42V33KCSQPRLFiMgGXIo7O/B8XXy2ejq2fL o0F00XPXiDSKC8F1kfMz9qjUWiv2fBOx4jyuu3F5vnxu4vXxkrlSGZUgbMYZZ6cx zTN84SQrmAIoM9hEevnWVwtAFfbD+KvDC3+cnyfeOZ2NGYLR/pZYnF6nhPQzgIvC GYMVV5DWy1C2Z8lCNHdNX+69Qdto4pHRMBwV1KBbzP9LdiVEVHmg+9aii2jECofU cMoxUTXIx82uvAnYrQQDkYQG1yVN6WYyHuP7GTBNWxPrqlo8K7pq4a7mz0KoTw+r L2fH6HFlbleYAR6ha3xPSUs+tlM/FiJL -----END CERTIFICATE-----Generated at Tue Oct 21 03:10:14 2025 by rpki-client