$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft File: 446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json) Hash identifier: tcwDJEBX6HrH+jA+sbc39VApBl9bvLNGa8Q5J1XbixY= Subject key identifier: 80:CF:9C:77:1F:DB:12:75:A5:3C:A2:1E:A8:0F:F9:5F:A0:FB:3F:B6 Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft Manifest number: 0110 Signing time: Sun 19 Oct 2025 07:58:13 +0000 Manifest this update: Sun 19 Oct 2025 07:58:13 +0000 Manifest next update: Sun 26 Oct 2025 07:58:13 +0000 Files and hashes: 1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: iLnmGNJpIMxNo/nXPwhpP1OwZSZMuV7NA/Q5rAJWYkA=) 2: 7A9A936A9AC911F0B0769F75C4F9AE02.roa (hash: Lbb9uN05DsVT0248uhhIwxXcZbkEoim+rIYz/HSIkug=) 3: B84D6D3AF81811EFACB5925BC4F9AE02.roa (hash: iSgwGcm13o9Rt6IYRC8gB+G1pN+vluWHVfp7WXbTVyc=) 4: F9ECF4A0295A11EFBECFCA7EC4F9AE02.roa (hash: DUkD4dNjUkFTokfAlqm3Uyonu5h9UsmoJuMWKvodIy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Validity Not Before: Oct 19 07:58:13 2025 GMT Not After : Oct 26 07:58:13 2025 GMT Subject: CN=68f49a15-5a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:8c:0f:e8:44:a7:a7:5f:aa:ee:8e:b8:5c: b5:29:c2:a8:68:03:73:f3:61:35:82:93:cd:d9:5f: f4:2e:e4:e4:3c:00:5d:31:a5:cd:07:d4:e3:3a:6d: dc:60:7a:a5:da:97:09:0e:67:d7:52:cb:b4:3b:f0: 50:ab:cb:c7:89:95:d1:db:17:95:42:59:22:f6:3d: 2c:81:1e:45:e9:08:19:f8:a6:3f:45:3d:89:c3:d2: 0d:3e:2d:4b:56:25:08:f5:a9:96:13:c6:6f:1d:49: 0b:5f:8d:8b:83:38:49:09:d9:5e:73:11:ba:32:11: 8a:4f:b8:0e:02:e6:b0:a0:ce:eb:37:25:58:ca:11: d9:ae:01:6a:f3:80:6d:85:e1:43:33:d6:4a:bd:49: 09:b4:f9:fe:33:39:08:d9:13:22:47:85:79:65:56: 50:29:e5:b2:75:65:a8:64:c7:df:16:bb:7d:12:e8: 7f:4a:da:6a:08:1c:f3:e3:71:ad:94:51:f1:4c:ac: a4:45:ad:0a:89:09:90:e8:17:5a:3b:75:c5:84:e0: 0e:c4:1c:1a:bc:74:2d:44:85:da:8b:d3:5e:fe:72: 20:8e:f2:e9:79:48:a6:f6:db:05:c3:03:f7:c9:85: 79:74:ce:bf:c6:86:79:10:f5:90:db:bd:e8:8a:80: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:9C:77:1F:DB:12:75:A5:3C:A2:1E:A8:0F:F9:5F:A0:FB:3F:B6 X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:2f:21:e5:02:1a:9a:d4:ac:96:5e:5a:2d:51:74:54:9e:71: f8:82:56:29:1b:ed:86:02:a9:a3:fa:29:b9:1f:80:ce:74:43: b4:ae:49:b7:97:a4:df:90:99:43:74:0e:78:46:3e:2c:42:aa: 60:e0:95:7b:4e:a9:97:2d:8a:7f:25:71:bb:a5:75:24:3c:50: e5:85:42:2b:5e:69:2c:72:26:6a:25:99:5a:e1:6c:4a:19:15: 14:27:27:8a:31:15:18:92:d3:cd:2a:da:0f:90:29:92:99:a5: d8:43:a5:a7:9d:83:82:a3:55:3b:da:86:d6:c5:9b:5c:3f:7f: ce:69:c4:97:89:23:ef:27:d6:f4:e7:69:d4:4e:0e:40:2e:7a: 92:49:07:03:50:22:cc:b5:c5:65:53:56:bb:fb:c5:79:28:66: bf:27:93:e8:31:42:74:b4:a0:81:db:ce:f8:70:20:8a:7c:85: 4b:a7:a0:c6:3e:ce:e6:7a:16:d2:57:c9:1a:22:ac:06:b0:cf: 65:b7:4b:94:f8:ae:c2:b8:c6:a8:13:30:f2:d6:be:e5:2b:81: a5:ef:6f:a7:34:05:f3:48:ee:b3:11:c6:47:b0:f6:ac:96:be: a8:1c:7e:ab:29:cd:61:b6:d3:50:0f:e6:9c:b8:92:23:c5:a3: 88:01:fe:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjUxMDE5MDc1ODEzWhcNMjUxMDI2MDc1ODEzWjAYMRYwFAYD VQQDEw02OGY0OWExNS01YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPmMD+hEp6dfqu6OuFy1KcKoaANz82E1gpPN2V/0LuTkPABdMaXNB9TjOm3c YHql2pcJDmfXUsu0O/BQq8vHiZXR2xeVQlki9j0sgR5F6QgZ+KY/RT2Jw9INPi1L ViUI9amWE8ZvHUkLX42LgzhJCdlecxG6MhGKT7gOAuawoM7rNyVYyhHZrgFq84Bt heFDM9ZKvUkJtPn+MzkI2RMiR4V5ZVZQKeWydWWoZMffFrt9Euh/StpqCBzz43Gt lFHxTKykRa0KiQmQ6BdaO3XFhOAOxBwavHQtRIXai9Ne/nIgjvLpeUim9tsFwwP3 yYV5dM6/xoZ5EPWQ273oioDprwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDPnHcf 2xJ1pTyiHqgP+V+g+z+2MB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU2MC80QzNENkJDMDIxNkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZq RHd5bkhkNm5XeGNOQ3dNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDALyHlAhqa1KyWXlotUXRUnnH4glYpG+2GAqmj+im5H4DOdEO0rkm3 l6TfkJlDdA54Rj4sQqpg4JV7TqmXLYp/JXG7pXUkPFDlhUIrXmksciZqJZla4WxK GRUUJyeKMRUYktPNKtoPkCmSmaXYQ6WnnYOCo1U72obWxZtcP3/OacSXiSPvJ9b0 52nUTg5ALnqSSQcDUCLMtcVlU1a7+8V5KGa/J5PoMUJ0tKCB2874cCCKfIVLp6DG Ps7mehbSV8kaIqwGsM9lt0uU+K7CuMaoEzDy1r7lK4Gl72+nNAXzSO6zEcZHsPas lr6oHH6rKc1httNQD+acuJIjxaOIAf4W -----END CERTIFICATE-----Generated at Mon Oct 20 17:10:53 2025 by rpki-client