$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: LmmuWUjWOYU/L+BXZqT+bH6BnxV/wLpOwEPra9ZpzDg= Subject key identifier: 08:DF:8B:94:50:32:CD:4F:9F:56:20:D6:7E:2A:47:1E:F3:8A:31:6F Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0240 Signing time: Sun 19 Oct 2025 04:18:29 +0000 Manifest this update: Sun 19 Oct 2025 04:18:29 +0000 Manifest next update: Sun 26 Oct 2025 04:18:29 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: G4xJ1qfUa8a57P699z/UrUN+rzKGMIKr9FNHGJ8U6Tc=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Oct 19 04:18:29 2025 GMT Not After : Oct 26 04:18:29 2025 GMT Subject: CN=68f46695-5924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:80:d2:58:63:b2:ee:f8:ec:49:dc:4d:26: c5:dd:0f:1e:31:f9:1e:11:9b:94:01:89:76:42:29: 18:12:09:08:ee:76:4e:ce:6f:10:73:d5:8d:0f:7b: f0:e9:d0:d1:d9:a8:02:ec:64:bf:84:e1:f9:73:ee: d5:41:c8:a5:f4:8c:35:e5:e1:05:7f:3b:54:fc:c0: 54:a6:76:ea:b2:89:df:8b:91:30:70:da:c3:5e:4d: 9c:64:d2:82:79:f3:e8:07:6e:cd:88:d3:f7:84:86: c9:8b:ac:39:52:2c:59:e3:0a:be:74:83:0c:b7:dc: db:c1:f3:5a:80:ba:11:c5:4b:e2:63:3f:5d:66:39: 8e:f3:f0:3c:23:d4:bf:44:cd:a5:fb:ad:81:11:8f: d8:7a:83:d1:14:67:9b:f6:db:26:8e:fd:d9:be:1f: 50:ed:a9:b7:9f:20:87:da:aa:3b:ba:bf:0e:97:d4: 8f:cc:f6:d9:cc:50:de:6f:6f:ad:d8:36:32:88:be: 70:b0:a9:a1:e4:24:dd:f0:ee:1c:e4:46:64:8e:6d: dc:5e:ea:c6:d2:97:d2:65:c3:28:af:7a:5e:86:4c: 33:24:dd:f6:b9:b3:ed:e4:b9:e1:12:1c:b6:0a:c2: 8b:f2:b0:cd:3b:7a:19:c3:ed:fe:7d:79:17:4c:fa: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DF:8B:94:50:32:CD:4F:9F:56:20:D6:7E:2A:47:1E:F3:8A:31:6F X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f7:d8:79:f7:b5:7a:a0:e4:29:25:77:e6:18:93:fa:a3:6f: 33:b3:db:6c:0b:ca:17:69:8f:cf:cf:bd:91:6e:ae:d4:78:11: ff:71:07:49:d2:10:d9:79:2c:5a:e1:f2:f5:2a:0d:24:65:b6: 90:fc:85:38:71:b0:0e:7e:41:92:12:45:52:97:32:fa:d5:53: eb:1e:5f:dd:a4:69:42:4b:9f:e7:d9:25:30:f1:bf:f5:74:ba: bd:89:d7:17:c0:49:53:59:86:7c:7b:0c:dd:35:d5:f9:f9:e0: 92:77:a9:8e:a7:9d:41:62:f0:0e:63:8b:7f:25:df:d0:c8:35: 06:e1:12:77:69:4a:d8:19:2f:89:33:4d:c7:a4:fe:9a:92:86: b3:7b:6c:9a:b0:e8:0e:6a:b6:7e:3d:bc:33:ce:29:62:ea:f1: 75:f3:93:d8:c2:1a:bd:a8:20:48:7a:93:21:be:67:06:18:0a: 3c:09:df:f6:69:30:42:1e:ce:cd:fd:a8:9f:f0:df:41:04:d2: 5a:49:62:d6:53:be:e7:ad:a0:bc:05:2b:35:5a:d7:15:66:79: 81:e0:58:21:89:a3:a3:8e:f1:70:b8:79:15:99:ac:ed:6c:bd: b6:11:18:21:1a:65:27:4e:d1:1b:88:4e:fd:8a:0b:83:0c:6f: 8d:c3:1e:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUxMDE5MDQxODI5WhcNMjUxMDI2MDQxODI5WjAYMRYwFAYD VQQDEw02OGY0NjY5NS01OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra2A0lhjsu747EncTSbF3Q8eMfkeEZuUAYl2QikYEgkI7nZOzm8Qc9WND3vw 6dDR2agC7GS/hOH5c+7VQcil9Iw15eEFfztU/MBUpnbqsonfi5EwcNrDXk2cZNKC efPoB27NiNP3hIbJi6w5UixZ4wq+dIMMt9zbwfNagLoRxUviYz9dZjmO8/A8I9S/ RM2l+62BEY/YeoPRFGeb9tsmjv3Zvh9Q7am3nyCH2qo7ur8Ol9SPzPbZzFDeb2+t 2DYyiL5wsKmh5CTd8O4c5EZkjm3cXurG0pfSZcMor3pehkwzJN32ubPt5LnhEhy2 CsKL8rDNO3oZw+3+fXkXTPq14wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjfi5RQ Ms1Pn1Yg1n4qRx7zijFvMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj99h597V6oOQpJXfmGJP6o28zs9tsC8oXaY/Pz72Rbq7UeBH/cQdJ 0hDZeSxa4fL1Kg0kZbaQ/IU4cbAOfkGSEkVSlzL61VPrHl/dpGlCS5/n2SUw8b/1 dLq9idcXwElTWYZ8ewzdNdX5+eCSd6mOp51BYvAOY4t/Jd/QyDUG4RJ3aUrYGS+J M03HpP6akoaze2yasOgOarZ+Pbwzzili6vF185PYwhq9qCBIepMhvmcGGAo8Cd/2 aTBCHs7N/aif8N9BBNJaSWLWU77nraC8BSs1WtcVZnmB4FghiaOjjvFwuHkVmazt bL22ERghGmUnTtEbiE79iguDDG+Nwx7o -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:22 2025 by rpki-client