$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: +Ap1rKPpBRf7X9yc3k7CPUOh2DNEWDzHteIxCsa+uKw= Subject key identifier: 93:12:3C:C2:6B:1F:4B:20:D5:5B:54:75:DA:4A:FC:4A:8E:3B:8F:1E Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0D22 Signing time: Sat 18 Oct 2025 18:44:26 +0000 Manifest this update: Sat 18 Oct 2025 18:44:25 +0000 Manifest next update: Sat 25 Oct 2025 18:44:25 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: UL5SqYfknlL6YwMZ68KoULczxfmRdEEQeqPNTuDTPMk=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: eWcvHOUT67GedsanEfBHjHteAl5xPcgw0p372As4/K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3372 (0xd2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Oct 18 18:44:25 2025 GMT Not After : Oct 25 18:44:25 2025 GMT Subject: CN=68f3e009-2dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:40:b8:a2:25:d2:a8:3c:b1:13:8f:a8:19:b3: 3e:3f:63:09:01:20:03:66:74:6e:b3:ba:dc:0d:31: 1d:2e:0f:ab:d9:12:bc:f3:bb:14:3f:ce:c9:d8:23: 34:d9:c9:40:91:8a:ef:f6:db:72:fc:23:d5:5c:23: b0:6b:73:f1:da:83:86:63:dd:96:38:e5:3d:a4:3d: 37:e8:a6:7d:1a:fd:fb:e3:db:58:ab:51:c1:18:fd: f8:38:1e:b5:28:97:ad:f5:b2:e5:d1:72:54:22:f5: c6:db:15:f6:21:d9:f3:c2:c2:2d:6c:96:1d:3e:2b: 4b:3d:9e:18:36:63:f3:83:f5:85:3b:76:bf:2d:7a: 51:cc:60:10:4c:15:ab:57:3c:02:8b:51:9b:fa:d2: 11:98:25:04:6a:38:14:19:55:8c:3c:9f:09:54:ac: e6:13:92:0f:c5:0f:86:d0:df:91:43:58:b9:3c:f2: d1:b7:de:7b:41:ae:84:5f:70:16:9a:2d:bb:f7:6d: 6a:5c:62:b8:8b:4a:f5:76:c4:33:1a:bc:45:f9:39: 9e:44:d1:85:45:0f:e6:e2:88:5a:38:c3:7e:14:74: 1e:f8:c5:ba:1d:d4:e1:10:ef:8b:8f:47:04:74:a7: 50:77:1c:e3:6c:bc:14:94:2a:64:a6:36:6d:63:f2: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:12:3C:C2:6B:1F:4B:20:D5:5B:54:75:DA:4A:FC:4A:8E:3B:8F:1E X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:65:74:74:8f:83:8a:34:f7:b9:70:f2:5c:b0:7e:b0:4c:fd: d8:a8:dc:78:ab:4b:e1:23:98:ab:5d:21:00:b5:ae:0c:24:45: 1a:11:71:62:b9:a1:2b:0e:57:1f:35:f4:90:de:b7:ee:68:1a: 6d:a6:af:76:e2:c2:74:30:4e:87:e8:b6:50:ba:0f:8a:de:10: f0:7c:c7:d6:01:af:64:82:27:57:bd:17:19:0c:32:b5:55:73: 85:d6:f0:27:5b:a2:b8:02:96:43:9e:23:c9:65:cf:48:4a:04: 8c:99:99:5a:f2:ad:13:ef:5c:b5:87:03:0c:31:30:fe:4d:e3: 54:5d:fd:c8:39:cd:94:db:ce:98:bc:1b:9c:70:6d:a7:6b:27: 66:d0:a9:b0:3f:a2:e2:47:ee:14:a0:08:d4:10:4b:5b:70:b7: bf:c4:e8:2f:fe:05:35:e0:17:c1:4b:bb:b4:40:e6:ba:74:1d: 14:51:cc:d1:f5:b1:3b:60:41:1e:67:78:29:92:99:a7:13:34: d6:f1:87:4f:2c:af:92:bc:a8:61:ee:4b:94:f5:84:ad:b5:fa: 4a:d6:27:de:c4:4f:00:f0:36:b7:be:ca:92:1b:cc:84:7c:0a: 15:ef:47:f7:03:89:b8:24:38:e4:49:49:ef:31:1c:83:56:a1: be:7f:9e:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUxMDE4MTg0NDI1WhcNMjUxMDI1MTg0NDI1WjAYMRYwFAYD VQQDEw02OGYzZTAwOS0yZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80C4oiXSqDyxE4+oGbM+P2MJASADZnRus7rcDTEdLg+r2RK887sUP87J2CM0 2clAkYrv9tty/CPVXCOwa3Px2oOGY92WOOU9pD036KZ9Gv3749tYq1HBGP34OB61 KJet9bLl0XJUIvXG2xX2IdnzwsItbJYdPitLPZ4YNmPzg/WFO3a/LXpRzGAQTBWr VzwCi1Gb+tIRmCUEajgUGVWMPJ8JVKzmE5IPxQ+G0N+RQ1i5PPLRt957Qa6EX3AW mi27921qXGK4i0r1dsQzGrxF+TmeRNGFRQ/m4ohaOMN+FHQe+MW6HdThEO+Lj0cE dKdQdxzjbLwUlCpkpjZtY/KtWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMSPMJr H0sg1VtUddpK/EqOO48eMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxZXR0j4OKNPe5cPJcsH6wTP3YqNx4q0vhI5irXSEAta4MJEUaEXFi uaErDlcfNfSQ3rfuaBptpq924sJ0ME6H6LZQug+K3hDwfMfWAa9kgidXvRcZDDK1 VXOF1vAnW6K4ApZDniPJZc9ISgSMmZla8q0T71y1hwMMMTD+TeNUXf3IOc2U286Y vBuccG2naydm0KmwP6LiR+4UoAjUEEtbcLe/xOgv/gU14BfBS7u0QOa6dB0UUczR 9bE7YEEeZ3gpkpmnEzTW8YdPLK+SvKhh7kuU9YSttfpK1ifexE8A8Da3vsqSG8yE fAoV70f3A4m4JDjkSUnvMRyDVqG+f56w -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:44 2025 by rpki-client