$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json) Hash identifier: 0+cBVc7p/7/P5D+e/JSHd6M5k+qimkurSfjQBRg1ilw= Subject key identifier: 73:27:F5:AA:95:AB:5B:21:0C:4E:02:BE:81:AD:6D:B3:81:5A:C7:76 Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Certificate serial: 1532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft Manifest number: 1522 Signing time: Sat 18 Oct 2025 17:16:04 +0000 Manifest this update: Sat 18 Oct 2025 17:16:03 +0000 Manifest next update: Sat 25 Oct 2025 17:16:03 +0000 Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: yuV/cGSgblTLfSlluWR0mIxvmerVZqz3V1OOvD+6Ze8=) 2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: CwtP2gwbfApArQJr3Z1hu1rrmy4N399m/4TAvngzADE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5426 (0x1532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Validity Not Before: Oct 18 17:16:03 2025 GMT Not After : Oct 25 17:16:03 2025 GMT Subject: CN=68f3cb53-955d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:af:21:39:6d:d7:ba:f5:dc:89:6b:72:26: 68:f0:e6:d6:05:a9:4c:88:e8:03:46:75:31:13:30: 72:b3:d6:72:ce:90:e4:e1:06:57:27:8f:2f:c0:6c: a2:f6:16:f5:5c:42:93:d2:14:28:fa:b6:d8:06:ec: 47:6d:3a:48:86:41:c9:a3:b6:9a:23:5a:55:ec:9b: 48:b5:67:33:7a:f5:12:02:2b:55:89:53:c1:f2:c3: 98:06:57:65:18:67:3d:f9:00:9a:23:a8:ca:f3:50: 79:92:10:14:58:7a:18:39:b6:72:eb:08:4b:78:14: c2:dc:ee:62:35:c3:50:a9:dd:d3:e1:07:a1:d0:24: b6:12:b5:63:c4:bc:a3:f9:d0:29:eb:35:cd:0d:f6: 4b:1f:52:02:04:5d:30:c2:61:77:00:a4:66:d3:8d: 46:54:91:b9:6a:1c:22:8c:ce:84:ba:fb:ea:e9:0e: 17:a3:72:65:da:a6:4f:f2:94:2d:f0:b0:85:12:9d: 7f:28:74:cb:89:2b:eb:37:bf:85:0c:09:e0:98:ea: 81:40:d0:b9:7e:0a:c2:21:1c:ee:69:39:97:37:a2: e4:ed:58:e8:53:3e:aa:fc:58:f3:78:26:60:1b:7c: 5b:85:e2:52:c2:0d:ee:97:1f:52:07:fd:e6:66:6b: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:27:F5:AA:95:AB:5B:21:0C:4E:02:BE:81:AD:6D:B3:81:5A:C7:76 X509v3 Authority Key Identifier: keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e6:f1:5c:1a:5e:b1:f9:bf:90:d7:91:5a:b0:73:8c:bf:9d: 6e:8d:ea:2b:55:62:08:a5:6d:f1:8f:dd:6e:52:97:16:50:41: 9c:35:e4:7b:3c:ce:d8:78:d5:ea:60:88:17:21:b1:56:8f:21: 89:9a:f7:64:b9:c0:e6:fe:e4:e4:42:6d:86:88:9c:67:57:75: 38:4c:da:65:bf:7a:42:f7:97:37:67:7c:f8:8a:3a:0f:12:ac: 34:81:80:2a:99:09:3c:6e:15:4e:43:86:a9:c3:20:6b:86:2f: 89:79:8b:52:ac:e6:a6:60:17:44:38:8a:79:79:35:51:0d:8a: 2a:a6:0f:c4:71:96:be:74:bb:0c:49:65:a0:7f:9e:00:1d:d9: 71:6e:aa:2e:5b:a6:0a:76:89:c3:f5:17:09:97:43:c0:d0:51: 2e:cc:16:fa:10:2d:3c:e5:19:2b:cc:08:d5:2f:0a:0e:62:e5: 6e:a5:5a:3b:be:55:52:31:41:1d:a1:d5:0f:57:2c:25:73:20: 19:b9:4e:a0:7d:50:80:a2:2d:d2:f9:8d:de:a6:7f:b3:6d:2e: 48:6a:51:78:82:7d:7d:2e:9a:71:81:d9:10:fd:68:d3:4c:35: e9:f5:44:36:9c:7c:42:ff:39:9a:ef:7f:1d:f3:91:b9:ec:03: ff:b0:b3:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0 QUI3QTY1MzAwHhcNMjUxMDE4MTcxNjAzWhcNMjUxMDI1MTcxNjAzWjAYMRYwFAYD VQQDEw02OGYzY2I1My05NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6evITlt17r13IlrciZo8ObWBalMiOgDRnUxEzBys9ZyzpDk4QZXJ48vwGyi 9hb1XEKT0hQo+rbYBuxHbTpIhkHJo7aaI1pV7JtItWczevUSAitViVPB8sOYBldl GGc9+QCaI6jK81B5khAUWHoYObZy6whLeBTC3O5iNcNQqd3T4Qeh0CS2ErVjxLyj +dAp6zXNDfZLH1ICBF0wwmF3AKRm041GVJG5ahwijM6Euvvq6Q4Xo3Jl2qZP8pQt 8LCFEp1/KHTLiSvrN7+FDAngmOqBQNC5fgrCIRzuaTmXN6Lk7VjoUz6q/FjzeCZg G3xbheJSwg3ulx9SB/3mZmtyEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMn9aqV q1shDE4CvoGtbbOBWsd2MB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3 QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT dGFrVzBXTTBkNHhLdDZaVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM5vFcGl6x+b+Q15FasHOMv51ujeorVWIIpW3xj91uUpcWUEGcNeR7 PM7YeNXqYIgXIbFWjyGJmvdkucDm/uTkQm2GiJxnV3U4TNplv3pC95c3Z3z4ijoP Eqw0gYAqmQk8bhVOQ4apwyBrhi+JeYtSrOamYBdEOIp5eTVRDYoqpg/EcZa+dLsM SWWgf54AHdlxbqouW6YKdonD9RcJl0PA0FEuzBb6EC085RkrzAjVLwoOYuVupVo7 vlVSMUEdodUPVywlcyAZuU6gfVCAoi3S+Y3epn+zbS5IalF4gn19LppxgdkQ/WjT TDXp9UQ2nHxC/zma738d85G57AP/sLPk -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:25 2025 by rpki-client