$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: 8EWVF16jHnb8eYAGKgK/6JwmxxHJ54aE215fliFJoPk= Subject key identifier: 54:A8:62:8B:75:0C:BA:30:24:03:BC:B6:8D:6B:67:E6:B9:92:56:55 Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 5D Signing time: Sun 19 Oct 2025 10:29:25 +0000 Manifest this update: Sun 19 Oct 2025 10:29:25 +0000 Manifest next update: Sun 26 Oct 2025 10:29:25 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: m6dl+OHtKuHVcUSNyL1gZYaXCVcgh6WLE/UUROukmkY=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) 3: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: AdxHV9vvwlkePP0ziZ0q7aeuDgAw2EtvgFWx56k+iSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Oct 19 10:29:25 2025 GMT Not After : Oct 26 10:29:25 2025 GMT Subject: CN=68f4bd85-5d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:4b:52:b8:fa:31:ab:b9:a3:14:21:d5:bb: 67:11:e1:c8:9e:b0:09:95:f0:cb:28:df:01:c3:ed: a1:8a:a3:b0:29:6d:f5:f3:2d:be:ce:08:90:4d:cb: a1:54:71:14:f2:bc:9d:d5:8d:96:b0:c4:c5:5e:68: fb:97:aa:ce:f9:4e:c5:a1:68:83:6e:bc:e6:1b:99: da:a5:0b:fb:47:61:c7:c7:af:87:6f:6c:c4:a5:0f: 4c:f6:48:d2:f6:01:e2:4d:f1:90:49:89:03:52:48: 09:1c:e3:9c:9f:d1:8e:eb:a4:87:a5:1b:03:1d:ba: 04:d4:bd:3d:0b:ee:95:a8:a1:92:67:2d:64:f0:1e: b4:79:9c:c6:d1:a2:d8:1c:a3:68:96:51:e6:27:f4: 6f:c7:ae:33:eb:9e:e1:86:48:3d:25:d0:ac:a0:ee: dd:e3:ce:4d:da:af:e7:c7:c3:70:0b:4e:38:fe:98: 0f:9a:07:22:e4:b9:2c:af:9c:3d:fe:a8:32:da:bb: e5:e5:ea:07:28:04:8f:a5:f8:70:c1:09:68:8d:3b: f1:6d:36:54:39:47:c1:0c:ba:c4:39:26:65:96:cc: 1f:53:35:93:c7:47:a8:b1:7b:b1:09:2a:06:e5:5e: 1e:7b:9f:31:bf:c3:94:0b:3c:06:4c:c9:18:c9:eb: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A8:62:8B:75:0C:BA:30:24:03:BC:B6:8D:6B:67:E6:B9:92:56:55 X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:85:58:2a:ef:95:f3:b9:7c:05:e1:78:82:e7:35:eb:8b:67: d4:cf:26:2c:1b:09:d5:c4:62:b5:6f:1e:ad:11:c2:6b:18:92: 2b:45:af:d0:cd:23:b9:b2:93:62:1f:88:a5:43:9d:c9:c5:9c: 12:6d:25:2a:ca:47:2b:75:c8:bb:66:7e:f9:65:47:e9:d5:e5: 8a:54:44:05:23:11:14:4f:73:f2:4e:f6:52:0b:91:8f:00:7e: 85:e2:02:15:c4:99:d0:a3:0f:b7:70:94:19:c2:ac:7c:8b:3e: fc:c4:1b:32:e9:19:3c:92:84:db:06:91:2b:66:23:b1:dd:5e: 39:79:1a:89:8b:12:db:1d:8c:4f:44:d5:af:c8:06:3c:96:8a: 6d:b3:9d:b1:b8:e0:9e:6c:f6:96:91:3a:18:29:af:ac:f2:a4: 4d:69:c4:82:40:0f:19:9b:88:bf:e2:b6:7b:2c:fa:af:d9:4a: 63:52:54:39:21:72:1d:d9:65:8e:de:a3:4c:11:d1:fb:35:35: 39:32:f8:4a:fa:9c:bb:9d:4c:6d:be:ce:d7:4e:9c:c1:c3:ca: df:d4:b7:4e:36:b7:99:29:04:23:cd:19:56:1f:79:bc:51:a1: 95:f7:16:ec:26:fd:15:5b:b8:cc:e8:2c:74:30:5a:4b:e2:a1: b1:6e:7e:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTEwMTkxMDI5MjVaFw0yNTEwMjYxMDI5MjVaMBgxFjAUBgNV BAMTDTY4ZjRiZDg1LTVkOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz20tSuPoxq7mjFCHVu2cR4ciesAmV8Mso3wHD7aGKo7ApbfXzLb7OCJBNy6FU cRTyvJ3VjZawxMVeaPuXqs75TsWhaINuvOYbmdqlC/tHYcfHr4dvbMSlD0z2SNL2 AeJN8ZBJiQNSSAkc45yf0Y7rpIelGwMdugTUvT0L7pWooZJnLWTwHrR5nMbRotgc o2iWUeYn9G/HrjPrnuGGSD0l0Kyg7t3jzk3ar+fHw3ALTjj+mA+aByLkuSyvnD3+ qDLau+Xl6gcoBI+l+HDBCWiNO/FtNlQ5R8EMusQ5JmWWzB9TNZPHR6ixe7EJKgbl Xh57nzG/w5QLPAZMyRjJ65ClAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVKhii3UM ujAkA7y2jWtn5rmSVlUwHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6FWCrvlfO5fAXheILnNeuLZ9TPJiwbCdXEYrVvHq0RwmsYkitFr9DN I7myk2IfiKVDncnFnBJtJSrKRyt1yLtmfvllR+nV5YpURAUjERRPc/JO9lILkY8A foXiAhXEmdCjD7dwlBnCrHyLPvzEGzLpGTyShNsGkStmI7HdXjl5GomLEtsdjE9E 1a/IBjyWim2znbG44J5s9paROhgpr6zypE1pxIJADxmbiL/itnss+q/ZSmNSVDkh ch3ZZY7eo0wR0fs1NTky+Er6nLudTG2+ztdOnMHDyt/Ut042t5kpBCPNGVYfebxR oZX3Fuwm/RVbuMzoLHQwWkviobFufoA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:58 2025 by rpki-client