$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json) Hash identifier: W+oVT2ts0MOP60wZr07/iodTFbtrDKEVYQDeuwrdGLQ= Subject key identifier: D7:77:90:B4:D9:0F:66:E0:AD:2D:AA:E2:E6:01:FB:CC:87:3F:91:CC Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft Manifest number: 0C3E Signing time: Sat 18 Oct 2025 19:25:37 +0000 Manifest this update: Sat 18 Oct 2025 19:25:36 +0000 Manifest next update: Sat 25 Oct 2025 19:25:36 +0000 Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: WTIZfG5u7vfihH/mR4xYouRChHRlBo/Lt60vj7YWswc=) 2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Oct 18 19:25:36 2025 GMT Not After : Oct 25 19:25:36 2025 GMT Subject: CN=68f3e9b1-7abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:b4:42:82:6f:76:b0:5f:0e:d7:c3:08:d3: a3:dd:cd:3b:14:dd:ca:0e:a3:41:0c:6b:80:3a:d1: 5e:b2:d8:54:9e:25:b2:b7:b4:d9:c0:3c:53:c8:c1: 61:95:b3:d0:d5:b3:39:59:91:0b:ee:75:54:37:47: 94:b5:69:b9:1a:cd:56:17:dc:ea:5a:c7:7f:57:6c: 3e:dc:9e:74:af:24:f6:8d:6d:ea:c3:f0:70:1c:38: 73:28:93:03:76:1d:79:2c:90:ef:99:04:67:28:18: 5b:85:45:0d:82:88:7e:32:a4:aa:06:49:6c:8a:aa: dc:5f:ff:1e:3c:bb:79:26:a6:6a:98:3b:32:bf:b7: 04:8a:0d:a5:fe:89:cf:90:8d:9d:21:5b:5a:6b:b5: d4:eb:e0:95:74:b0:f2:e8:ed:02:36:b9:09:40:ec: b0:b2:61:a3:2e:9e:f1:3e:39:f1:e9:6c:cf:fe:2f: 60:c0:ab:ba:37:9f:6d:b6:b3:c2:d6:3e:34:4e:57: aa:ff:e3:88:31:16:ae:19:51:7f:68:3c:47:1a:28: 25:5a:c7:1d:bf:8a:4c:66:53:20:d8:71:8a:85:11: 28:d8:03:96:42:71:4c:57:b0:f3:03:09:49:a5:82: a6:a0:ca:a2:03:e0:93:af:6c:89:2f:f7:61:19:cc: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:77:90:B4:D9:0F:66:E0:AD:2D:AA:E2:E6:01:FB:CC:87:3F:91:CC X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:bb:1c:18:0d:04:4b:a5:d3:9d:d0:27:4c:84:91:9a:6b:f5: f3:48:45:75:f6:33:e4:64:70:d7:ea:49:84:aa:9d:7c:15:08: 8c:a0:75:c1:7b:e5:08:a3:75:1e:14:75:44:cc:7e:22:13:64: 3c:60:fd:8d:d6:3a:51:4e:fe:c0:83:14:8e:f2:79:0b:98:93: c2:6e:21:28:1f:0b:23:b8:2b:4e:c8:c1:63:d6:a6:ec:c3:68: 9d:db:73:1f:0d:d0:03:78:2d:82:7d:3f:b9:da:f6:24:c8:85: e1:5f:ae:cc:10:33:09:87:0a:44:5c:7a:83:d4:93:f7:96:52: ad:75:b5:99:04:de:6a:d4:19:21:39:64:7b:02:cb:d4:6f:31: c2:9b:9c:47:88:39:c0:ad:a4:e4:22:ca:68:8f:d9:01:3a:8c: 96:47:cf:12:52:f7:5e:80:56:62:00:86:91:8b:e7:a7:97:d7: 79:7a:9c:96:73:f4:e2:3a:94:55:61:10:ab:b2:f4:67:14:e7: 32:51:67:26:de:ce:39:e9:11:79:92:ba:da:10:54:f7:77:f8: 48:85:b7:81:0e:85:60:81:de:46:1c:66:ba:b3:67:c6:d7:ea: 25:d2:a9:27:f9:1e:7e:08:71:ae:a5:21:54:69:50:d3:67:de: 12:d8:8b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUxMDE4MTkyNTM2WhcNMjUxMDI1MTkyNTM2WjAYMRYwFAYD VQQDEw02OGYzZTliMS03YWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7a0QoJvdrBfDtfDCNOj3c07FN3KDqNBDGuAOtFesthUniWyt7TZwDxTyMFh lbPQ1bM5WZEL7nVUN0eUtWm5Gs1WF9zqWsd/V2w+3J50ryT2jW3qw/BwHDhzKJMD dh15LJDvmQRnKBhbhUUNgoh+MqSqBklsiqrcX/8ePLt5JqZqmDsyv7cEig2l/onP kI2dIVtaa7XU6+CVdLDy6O0CNrkJQOywsmGjLp7xPjnx6WzP/i9gwKu6N59ttrPC 1j40Tleq/+OIMRauGVF/aDxHGiglWscdv4pMZlMg2HGKhREo2AOWQnFMV7DzAwlJ pYKmoMqiA+CTr2yJL/dhGcxhAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd3kLTZ D2bgrS2q4uYB+8yHP5HMMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3 dkNvUVlUQ0plZmVZb1NFVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXuxwYDQRLpdOd0CdMhJGaa/XzSEV19jPkZHDX6kmEqp18FQiMoHXB e+UIo3UeFHVEzH4iE2Q8YP2N1jpRTv7AgxSO8nkLmJPCbiEoHwsjuCtOyMFj1qbs w2id23MfDdADeC2CfT+52vYkyIXhX67MEDMJhwpEXHqD1JP3llKtdbWZBN5q1Bkh OWR7AsvUbzHCm5xHiDnAraTkIspoj9kBOoyWR88SUvdegFZiAIaRi+enl9d5epyW c/TiOpRVYRCrsvRnFOcyUWcm3s456RF5krraEFT3d/hIhbeBDoVggd5GHGa6s2fG 1+ol0qkn+R5+CHGupSFUaVDTZ94S2ItY -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:50 2025 by rpki-client