$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: b5P2UscJr/f8S7CAS+N7+VkFuNeJR46UEF1oI2/XgbE= Subject key identifier: 27:B5:D7:2B:56:98:E4:ED:23:07:AC:90:49:E8:A3:4F:A6:A8:94:56 Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: 0136 Signing time: Sun 19 Oct 2025 07:26:09 +0000 Manifest this update: Sun 19 Oct 2025 07:26:08 +0000 Manifest next update: Sun 26 Oct 2025 07:26:08 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: cDnQ+vOEtk0qFaPqB0pL8Em0zVOClst2KdpC33Z/EDc=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: Oct 19 07:26:08 2025 GMT Not After : Oct 26 07:26:08 2025 GMT Subject: CN=68f49291-1b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:8f:81:43:c0:3f:a4:43:e4:ba:c7:72:44: fb:d8:fe:00:36:92:44:a7:f8:3d:e0:49:b4:7e:9a: a7:d0:57:71:58:d0:a2:1c:0e:52:a8:8d:2b:ee:fc: f3:7d:ae:6a:14:a7:e1:24:b3:99:1c:c3:3c:1a:25: 3a:bf:30:b6:8d:7d:ef:ee:71:83:e9:ba:17:38:b7: 66:e4:10:73:56:ae:ce:16:a6:d2:59:6f:38:74:cf: 93:74:d4:d9:fa:3e:09:76:6f:fa:8b:3a:64:44:77: 54:32:b5:bb:3a:30:cd:31:df:34:79:f3:6f:88:43: 84:8b:81:de:73:c8:79:73:eb:18:20:31:5c:cc:87: 09:10:6f:59:1b:b7:eb:39:9e:30:62:c3:e8:f8:b0: ba:2d:89:24:69:8d:7c:75:e3:a8:61:67:05:6f:1f: 39:42:88:bd:ed:ca:8a:92:27:b3:4d:b5:13:4f:0d: c8:92:8b:34:1c:a0:88:9a:55:84:ff:12:0f:20:9f: b0:c6:f3:fa:4b:77:85:67:02:46:b0:c5:7f:9b:9a: 16:c5:21:f7:b6:51:98:b7:72:e1:2d:59:2b:43:2e: d7:45:d2:76:38:9d:a4:c3:cf:28:10:6c:10:3c:37: f1:bf:25:ad:69:66:b5:b2:e9:c9:7d:88:6a:e9:2a: c4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B5:D7:2B:56:98:E4:ED:23:07:AC:90:49:E8:A3:4F:A6:A8:94:56 X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5c:8a:6e:14:18:63:34:80:21:69:3f:3b:a6:d2:bb:38:bb: 65:79:dc:76:1d:46:67:11:e0:ef:73:e8:b1:3f:48:a9:04:5d: 75:60:b1:6e:87:91:62:f9:fd:da:31:89:ed:c6:76:07:98:f4: 2b:df:64:c9:2e:eb:9e:ad:0c:41:d1:7a:ee:02:e5:db:2d:bd: 8a:09:fa:06:28:ee:63:9b:22:79:43:fc:b8:c0:b0:ed:a6:de: 50:74:a2:4f:95:1c:65:0b:c2:e3:46:e0:ef:6b:1b:34:49:33: 6f:55:21:fe:de:09:de:eb:fd:75:ca:c2:b2:c5:4a:52:70:25: 42:7a:1b:a5:d9:f2:06:cb:ef:30:f6:10:6c:63:27:25:8a:65: 6e:a2:13:14:48:e0:6d:d9:dc:43:de:12:2e:76:89:da:09:f6: 79:31:58:f0:b4:2a:11:45:b1:92:21:15:e8:da:9e:d3:4e:3f: 77:05:ed:a0:2b:39:d9:45:39:bd:b4:cd:38:54:b2:7a:a2:95: 4e:71:d2:62:b5:0d:29:81:2b:0e:77:7c:c6:80:5c:ce:a7:cc: 1f:9b:2f:73:ce:05:fc:04:d0:3a:d1:7f:f7:24:ea:36:f6:c9: 1e:7b:d6:ae:e1:8d:c4:3c:8f:06:e8:99:33:5d:0c:05:87:60: b7:df:5f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUxMDE5MDcyNjA4WhcNMjUxMDI2MDcyNjA4WjAYMRYwFAYD VQQDEw02OGY0OTI5MS0xYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjyPgUPAP6RD5LrHckT72P4ANpJEp/g94Em0fpqn0FdxWNCiHA5SqI0r7vzz fa5qFKfhJLOZHMM8GiU6vzC2jX3v7nGD6boXOLdm5BBzVq7OFqbSWW84dM+TdNTZ +j4Jdm/6izpkRHdUMrW7OjDNMd80efNviEOEi4Hec8h5c+sYIDFczIcJEG9ZG7fr OZ4wYsPo+LC6LYkkaY18deOoYWcFbx85Qoi97cqKkiezTbUTTw3Ikos0HKCImlWE /xIPIJ+wxvP6S3eFZwJGsMV/m5oWxSH3tlGYt3LhLVkrQy7XRdJ2OJ2kw88oEGwQ PDfxvyWtaWa1sunJfYhq6SrEsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe11ytW mOTtIweskEnoo0+mqJRWMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdCOC8wQUIwNzQwNEUxRjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4 eW1FT1ZsOUZQckNSSlJUdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtXIpuFBhjNIAhaT87ptK7OLtledx2HUZnEeDvc+ixP0ipBF11YLFu h5Fi+f3aMYntxnYHmPQr32TJLuuerQxB0XruAuXbLb2KCfoGKO5jmyJ5Q/y4wLDt pt5QdKJPlRxlC8LjRuDvaxs0STNvVSH+3gne6/11ysKyxUpScCVCehul2fIGy+8w 9hBsYyclimVuohMUSOBt2dxD3hIudonaCfZ5MVjwtCoRRbGSIRXo2p7TTj93Be2g KznZRTm9tM04VLJ6opVOcdJitQ0pgSsOd3zGgFzOp8wfmy9zzgX8BNA60X/3JOo2 9skee9au4Y3EPI8G6JkzXQwFh2C3318O -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:27 2025 by rpki-client