$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: 6ykg2zK+1b0WZBRt8iZHeU6vCZJDj0qJ3W/qGMC1w6Q= Subject key identifier: 19:1D:DF:B0:F7:3A:6B:22:3B:95:67:8B:3E:2C:7A:70:CE:F2:4B:4B Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 34EE Signing time: Sat 18 Oct 2025 15:08:58 +0000 Manifest this update: Sat 18 Oct 2025 15:08:58 +0000 Manifest next update: Sat 25 Oct 2025 15:08:58 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: dsdq0h1CmeeWz2yCcq2eHVo0YqRKQ1enuA3JShROR0k=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: rz7KWjBZEYdZagJgiTo6rpG1kH3c3NzFacklKm2JF8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Oct 18 15:08:58 2025 GMT Not After : Oct 25 15:08:58 2025 GMT Subject: CN=68f3ad8a-5e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:18:3a:06:26:35:8b:50:84:f5:09:89:ba:ce: 00:ed:c0:43:74:5e:d4:83:82:41:42:fb:10:a1:60: bf:cd:c8:47:9d:e1:c9:a0:3a:2a:33:3f:c2:30:92: 11:88:7c:e5:a3:aa:65:ed:45:d4:bf:e1:84:6b:07: f0:5d:f3:81:74:4e:eb:6a:32:f7:b2:3f:f8:fe:20: 47:46:bc:d6:c5:f9:7b:b9:c9:56:a8:59:ef:22:c7: 01:1a:4a:10:d0:1b:0a:dc:8c:64:7b:1b:0a:5b:39: f8:59:9e:68:9c:19:8c:59:f1:8c:6e:c9:65:b9:86: 45:29:2c:06:eb:a7:cc:c4:ca:0c:7c:58:cf:1d:5c: 94:7a:8a:1f:7b:d1:b2:c9:b2:14:c8:d1:a2:e2:b8: b4:e4:5d:12:f5:80:0b:9e:d6:c2:13:06:f1:63:80: c6:21:40:bc:fe:30:c3:f7:2c:ea:85:91:77:dc:92: 4a:71:e1:b1:b2:8a:5e:05:69:e3:39:cd:f4:72:a8: a8:31:3a:19:b5:9a:d8:8c:03:d5:1f:6a:c6:25:9b: a3:c1:a2:10:d2:0b:99:b2:a2:35:54:51:67:da:f6: 0c:82:a5:b1:5c:1a:e4:ea:f0:e0:5e:e7:99:7b:b2: ae:1c:95:bd:02:3a:c9:22:ea:44:f4:39:b6:f8:2e: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1D:DF:B0:F7:3A:6B:22:3B:95:67:8B:3E:2C:7A:70:CE:F2:4B:4B X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2f:df:8d:cc:4d:ba:9c:34:b7:d7:40:f0:88:f9:31:a4:b4: 31:ac:f5:f5:70:dd:a1:7c:9e:87:9e:a8:16:82:d3:e1:8e:1f: 49:54:01:80:e2:b1:31:5a:51:22:55:37:e0:7b:a0:63:13:0c: a4:1f:d3:de:d5:13:5c:b8:f9:b8:46:bc:ea:d0:24:24:54:ff: 23:29:64:2d:f0:4c:f2:02:be:0c:c6:70:f2:0f:e1:7c:43:d5: fb:1f:60:81:9c:dc:2b:06:22:07:c4:7b:55:f8:46:55:c5:cd: 01:74:96:47:aa:35:b3:db:10:83:c9:2e:1f:ab:c0:e2:c7:e8: 34:02:a0:bd:7f:79:47:66:12:a9:2a:54:f8:f1:49:2d:7a:5a: 15:e6:0a:36:a4:ea:da:0c:ea:4c:f8:98:f2:ba:8d:d9:50:50: 9c:70:7c:65:dc:52:8a:53:ce:20:d9:c8:e4:f0:11:f2:97:f5: 15:cb:81:b4:bb:a0:34:39:4c:60:30:bc:42:19:bb:c9:7d:a9: 82:45:8d:7c:10:3e:a4:3b:de:e6:73:86:be:b6:bf:67:a2:31: c5:63:5e:2b:04:21:95:8f:d9:9d:03:e8:69:31:59:f2:d4:e0: bd:55:e1:8a:72:f5:f5:f0:9e:5a:f4:36:89:df:9b:96:a4:e6: 44:4a:28:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjUxMDE4MTUwODU4WhcNMjUxMDI1MTUwODU4WjAYMRYwFAYD VQQDEw02OGYzYWQ4YS01ZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Rg6BiY1i1CE9QmJus4A7cBDdF7Ug4JBQvsQoWC/zchHneHJoDoqMz/CMJIR iHzlo6pl7UXUv+GEawfwXfOBdE7rajL3sj/4/iBHRrzWxfl7uclWqFnvIscBGkoQ 0BsK3IxkexsKWzn4WZ5onBmMWfGMbslluYZFKSwG66fMxMoMfFjPHVyUeoofe9Gy ybIUyNGi4ri05F0S9YALntbCEwbxY4DGIUC8/jDD9yzqhZF33JJKceGxsopeBWnj Oc30cqioMToZtZrYjAPVH2rGJZujwaIQ0guZsqI1VFFn2vYMgqWxXBrk6vDgXueZ e7KuHJW9AjrJIupE9Dm2+C4ZfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkd37D3 OmsiO5Vniz4senDO8ktLMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIL9+NzE26nDS310DwiPkxpLQxrPX1cN2hfJ6HnqgWgtPhjh9JVAGA 4rExWlEiVTfge6BjEwykH9Pe1RNcuPm4Rrzq0CQkVP8jKWQt8EzyAr4MxnDyD+F8 Q9X7H2CBnNwrBiIHxHtV+EZVxc0BdJZHqjWz2xCDyS4fq8Dix+g0AqC9f3lHZhKp KlT48UkteloV5go2pOraDOpM+Jjyuo3ZUFCccHxl3FKKU84g2cjk8BHyl/UVy4G0 u6A0OUxgMLxCGbvJfamCRY18ED6kO97mc4a+tr9nojHFY14rBCGVj9mdA+hpMVny 1OC9VeGKcvX18J5a9DaJ35uWpOZESigV -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:14 2025 by rpki-client