$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: B5vIp6IGbjYR0pZMMnmLO8EX01bGGvwNCCbi0U8dlsU= Subject key identifier: C5:AD:E9:B7:F8:0B:13:D8:A3:48:DD:AE:9D:57:C0:8D:1E:49:7D:A4 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: E2 Signing time: Sun 19 Oct 2025 08:29:10 +0000 Manifest this update: Sun 19 Oct 2025 08:29:09 +0000 Manifest next update: Sun 26 Oct 2025 08:29:09 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: vgoQjWUP0tSpRn0tZixW9MxeXOJhIn2X/6Xdzo4Rg/8=) 2: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: IiAODbGIYOMBWeZoiflpOfPgoaf2U2xtxGkWne6R5WU=) 3: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: TRnNVoMiwQ6ZhiElb/0Y9VLIsehKNmu+1efnXTmukN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Oct 19 08:29:09 2025 GMT Not After : Oct 26 08:29:09 2025 GMT Subject: CN=68f4a155-5741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a5:da:0e:27:b4:9e:f8:68:68:f7:04:c2:ec: 72:4d:6e:ee:fa:bd:33:04:bd:7d:57:4e:28:13:44: 28:4a:b0:98:f2:60:ed:30:4b:ed:a2:40:fe:28:e7: 3a:ba:b9:19:37:77:6b:bc:16:5c:0f:6f:9a:ec:73: e6:13:06:80:53:10:e3:0d:fd:0e:58:50:e5:34:14: dc:e4:72:b2:d6:d7:b1:90:59:ec:3a:4f:87:cf:bf: d5:92:e0:51:80:83:70:32:96:c1:c4:7f:2b:89:61: a7:70:e6:1e:74:07:79:71:96:98:a6:3e:8c:2e:d6: 16:10:90:fb:ae:44:38:15:1e:e0:7e:6e:b9:71:22: 70:b2:1e:21:c4:ea:bd:36:24:86:b3:3c:7a:26:87: d8:0a:74:14:f7:b8:5b:b9:b2:95:2c:10:2a:ce:08: af:a7:28:68:2e:81:77:be:31:ba:73:77:16:42:4d: 45:a6:14:b1:c1:4e:4a:93:2a:88:c4:24:ca:7f:9c: 97:b1:c3:97:4c:93:4c:a7:ed:3b:7e:cf:78:4d:48: 1c:ef:01:10:bc:fd:f8:b8:09:8e:27:de:5a:a8:ee: 6c:95:ca:53:9b:2a:2e:5c:0b:d3:76:52:68:e6:c7: 1a:60:00:9f:5d:80:d3:f4:db:34:4a:b0:b4:d9:36: 57:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AD:E9:B7:F8:0B:13:D8:A3:48:DD:AE:9D:57:C0:8D:1E:49:7D:A4 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d0:4c:26:7a:68:00:e4:0d:4a:4b:6f:7c:f2:95:8d:fb:83: 6b:01:ab:2a:7b:26:b8:97:00:cc:03:e1:53:2e:f5:ef:f9:8d: db:26:09:a5:1d:c0:05:63:95:2b:9d:16:11:4b:5f:1c:c7:b5: 82:91:8f:cf:a0:8d:40:ac:c5:31:c4:cd:bc:0b:e8:94:25:e9: 69:2f:ab:17:9d:cc:8c:51:4e:b9:b6:75:7d:51:38:df:08:86: b7:32:1b:50:ea:75:6f:6e:0e:16:78:ae:fc:0e:51:12:a3:40: 12:4f:6b:af:de:13:2f:57:6f:8a:f3:61:56:b9:7b:bc:d4:3b: 8a:0a:37:60:0a:f5:5a:c1:9b:30:bb:16:02:8e:1d:71:0d:e7: f5:bd:d4:a3:8e:4c:ec:68:00:ad:9c:54:94:c4:28:a8:b5:26: ef:f8:fa:63:51:2b:46:34:ee:ad:2e:f5:ca:ad:83:91:cc:04: 33:86:a3:0b:c3:c8:47:8c:19:76:1b:df:e6:26:b5:ec:b4:8c: 26:1e:58:31:9b:42:58:d9:6f:24:c9:3e:e2:a0:a2:68:7d:ff: 59:bd:37:97:d8:a3:47:a0:bc:fd:0c:db:ec:c8:b3:b2:32:77: 21:ce:78:53:fd:e8:94:4d:f7:08:74:b1:4e:a3:1e:b3:b3:5c: b3:95:dc:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUxMDE5MDgyOTA5WhcNMjUxMDI2MDgyOTA5WjAYMRYwFAYD VQQDEw02OGY0YTE1NS01NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86XaDie0nvhoaPcEwuxyTW7u+r0zBL19V04oE0QoSrCY8mDtMEvtokD+KOc6 urkZN3drvBZcD2+a7HPmEwaAUxDjDf0OWFDlNBTc5HKy1texkFnsOk+Hz7/VkuBR gINwMpbBxH8riWGncOYedAd5cZaYpj6MLtYWEJD7rkQ4FR7gfm65cSJwsh4hxOq9 NiSGszx6JofYCnQU97hbubKVLBAqzgivpyhoLoF3vjG6c3cWQk1FphSxwU5KkyqI xCTKf5yXscOXTJNMp+07fs94TUgc7wEQvP34uAmOJ95aqO5slcpTmyouXAvTdlJo 5scaYACfXYDT9Ns0SrC02TZX2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWt6bf4 CxPYo0jdrp1XwI0eSX2kMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx0EwmemgA5A1KS2988pWN+4NrAasqeya4lwDMA+FTLvXv+Y3bJgml HcAFY5UrnRYRS18cx7WCkY/PoI1ArMUxxM28C+iUJelpL6sXncyMUU65tnV9UTjf CIa3MhtQ6nVvbg4WeK78DlESo0AST2uv3hMvV2+K82FWuXu81DuKCjdgCvVawZsw uxYCjh1xDef1vdSjjkzsaACtnFSUxCiotSbv+PpjUStGNO6tLvXKrYORzAQzhqML w8hHjBl2G9/mJrXstIwmHlgxm0JY2W8kyT7ioKJoff9ZvTeX2KNHoLz9DNvsyLOy MnchznhT/eiUTfcIdLFOox6zs1yzldx6 -----END CERTIFICATE-----Generated at Mon Oct 20 16:08:05 2025 by rpki-client