$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: LkrcRDphIe+z7/eO5YprQLGnt7VYwsQxFDz+cU9U3Fw= Subject key identifier: E2:D9:4B:5E:EC:A0:F7:D3:53:1E:2D:14:6E:BF:D0:9E:98:9D:12:E4 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 106A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 105A Signing time: Mon 20 Oct 2025 14:26:10 +0000 Manifest this update: Mon 20 Oct 2025 14:26:09 +0000 Manifest next update: Mon 27 Oct 2025 14:26:09 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: cRdsnIEQbtotjxr8KlHw2gNpl7WCgwxZoWkbbcdmrTc=) 2: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: 7YuoX9OkBSRUQiHpsiuHEMGmDB7ygNEWHmpkRA4QfgE=) 3: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: Mjf+9MFV/8wopOF7hLs3Tt14yZvRKLf5RcXcRhi35uI=) 4: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: vv5/sNroDyn31EV1FuwDRkKZ1Ky/CQIEoorZo83v9h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4202 (0x106a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Oct 20 14:26:09 2025 GMT Not After : Oct 27 14:26:09 2025 GMT Subject: CN=68f64682-88a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:04:8d:91:3f:98:22:3d:0e:49:bf:1b:23: 52:6a:b8:da:23:ca:17:15:20:14:bc:74:15:7f:48: 86:1f:08:90:cb:db:68:83:65:eb:b1:1d:24:db:09: f4:de:28:4b:6b:c7:a9:d2:bb:2e:b6:cb:e4:41:b3: e5:d1:30:40:c2:a7:7c:e4:ee:4a:7c:f6:49:d6:cf: 5f:9d:79:39:7f:ce:95:3f:5b:49:79:8b:c6:e3:31: d2:2b:31:44:2b:de:ad:96:1a:df:c0:8c:4b:87:f7: eb:a6:60:01:bb:f4:8a:27:54:87:d4:90:a0:60:d2: a3:80:25:96:8a:c8:9e:a0:68:7f:96:7d:c9:9a:bb: 9e:aa:74:34:47:a7:70:7e:c4:4b:00:0f:4e:48:66: 91:da:bd:88:d9:fc:bb:cc:bb:14:9e:6c:9b:7e:49: df:9a:21:aa:20:ee:97:4b:38:39:41:77:06:1b:4c: e4:5d:ec:87:78:4a:51:88:d8:ef:4c:a8:a9:bd:f5: 8a:91:ad:2c:90:4b:1a:14:6c:1f:9a:d7:6a:7e:09: fa:00:fa:9e:0a:01:cc:14:c7:ce:50:f0:ca:2c:1a: 31:da:8e:2b:b8:a0:1c:de:f1:10:7c:85:0a:51:22: fb:a0:36:9d:5a:ad:cb:59:6c:9e:39:7f:f6:66:6b: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D9:4B:5E:EC:A0:F7:D3:53:1E:2D:14:6E:BF:D0:9E:98:9D:12:E4 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5a:e0:a4:04:ad:65:6e:b2:3c:56:d0:aa:49:0b:db:5a:26: 2a:4e:4f:ce:34:0b:01:d6:8b:6c:8a:4e:c4:02:88:0f:71:d3: 32:6f:1f:9a:c4:1d:8c:1a:ac:48:3b:f6:22:60:eb:36:87:f0: 0c:13:df:50:c4:0f:af:ec:65:f4:1b:26:1c:b9:d3:b1:e0:9c: 13:19:06:80:16:f0:81:ce:bb:b6:0c:ea:7f:e2:bb:5f:0f:cc: 6b:1f:33:72:3b:c0:15:bc:e5:0a:16:b9:92:c6:ca:75:c7:a1: 6b:38:1c:92:54:60:51:47:08:86:1c:f1:ce:36:f8:5a:fd:06: cd:30:50:50:87:67:76:7e:97:79:15:fe:07:2d:22:cd:ca:36: 74:44:89:28:e4:bb:48:a3:0a:ac:02:4f:57:da:97:69:be:4d: 47:63:58:50:7a:13:92:37:c7:60:8f:a0:ed:e0:28:b1:8e:8f: 07:38:07:ee:39:5f:c3:e0:10:f6:b8:ea:48:e7:ff:54:88:09: 31:15:61:d3:9b:8a:d7:bb:92:ac:7c:9d:5f:61:21:85:69:1d: 0d:95:1e:91:4b:c9:14:13:05:b3:8e:41:10:8a:10:cc:10:98: 3e:26:96:27:6a:65:5d:d2:a2:3d:e8:cf:07:92:70:81:19:f6: 0e:01:21:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjUxMDIwMTQyNjA5WhcNMjUxMDI3MTQyNjA5WjAYMRYwFAYD VQQDEw02OGY2NDY4Mi04OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg8EjZE/mCI9Dkm/GyNSarjaI8oXFSAUvHQVf0iGHwiQy9tog2XrsR0k2wn0 3ihLa8ep0rsutsvkQbPl0TBAwqd85O5KfPZJ1s9fnXk5f86VP1tJeYvG4zHSKzFE K96tlhrfwIxLh/frpmABu/SKJ1SH1JCgYNKjgCWWisieoGh/ln3JmrueqnQ0R6dw fsRLAA9OSGaR2r2I2fy7zLsUnmybfknfmiGqIO6XSzg5QXcGG0zkXeyHeEpRiNjv TKipvfWKka0skEsaFGwfmtdqfgn6APqeCgHMFMfOUPDKLBox2o4ruKAc3vEQfIUK USL7oDadWq3LWWyeOX/2Zms/kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLZS17s oPfTUx4tFG6/0J6YnRLkMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8WuCkBK1lbrI8VtCqSQvbWiYqTk/ONAsB1otsik7EAogPcdMybx+a xB2MGqxIO/YiYOs2h/AME99QxA+v7GX0GyYcudOx4JwTGQaAFvCBzru2DOp/4rtf D8xrHzNyO8AVvOUKFrmSxsp1x6FrOBySVGBRRwiGHPHONvha/QbNMFBQh2d2fpd5 Ff4HLSLNyjZ0RIko5LtIowqsAk9X2pdpvk1HY1hQehOSN8dgj6Dt4Cixjo8HOAfu OV/D4BD2uOpI5/9UiAkxFWHTm4rXu5KsfJ1fYSGFaR0NlR6RS8kUEwWzjkEQihDM EJg+JpYnamVd0qI96M8HknCBGfYOASFo -----END CERTIFICATE-----Generated at Mon Oct 20 19:39:07 2025 by rpki-client