$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: J7y+eIiBU11qrUX8u9zkig206l3vTgk8+ty344Nk+2k= Subject key identifier: 10:C7:BF:F9:3C:5A:AA:F6:8D:73:D7:05:84:65:E1:56:31:6D:52:45 Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 02C3 Signing time: Sun 19 Oct 2025 03:33:42 +0000 Manifest this update: Sun 19 Oct 2025 03:33:41 +0000 Manifest next update: Sun 26 Oct 2025 03:33:41 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: lmeUG9HptNdrhnu5zdxcgevCv/ReflnGnsTvHTz7rF0=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: M5cm8ltbxVdRcxdqwX20eH12vgkHWhKoQMG7Vy7tBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: Oct 19 03:33:41 2025 GMT Not After : Oct 26 03:33:41 2025 GMT Subject: CN=68f45c15-55f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:e8:91:14:45:61:e4:e7:67:65:b6:2d:bf: 68:9a:0e:1b:45:67:1d:b9:b7:cb:8c:79:6c:fa:ed: 74:66:a2:a3:34:2a:f4:20:7a:ee:c1:77:cc:d2:2b: c2:5b:b7:c3:b6:dc:8f:2c:98:e5:76:be:46:7f:1a: de:42:73:f3:02:43:c2:33:fe:4d:ef:48:4b:a1:11: b1:3e:dc:cb:f2:de:40:a4:dc:a8:91:a2:43:66:86: f1:b8:f6:b4:98:e3:f0:ec:15:8a:bc:5d:97:ad:40: 2a:eb:36:61:ac:8b:22:d5:9e:d2:f3:86:ab:fc:85: c9:19:72:7e:15:1f:ec:d6:c1:4a:8b:b2:77:3f:58: 7f:bd:7d:c7:ba:e3:aa:09:d3:81:f5:ee:40:9f:90: 86:ac:46:b7:e5:f5:9f:3d:3a:ec:fd:d3:77:e7:a4: d1:f1:48:9e:3e:c2:74:dd:96:5f:71:3c:4e:30:64: cd:c5:08:31:c7:75:97:9c:28:94:72:b7:8a:e5:3b: 89:eb:df:fd:69:de:73:9f:0f:5f:95:21:4a:c8:e6: f6:cb:9a:b2:0b:cd:87:21:cf:dc:67:de:cd:74:c7: fe:9e:af:cd:81:8f:40:0b:c3:09:17:bf:50:39:fc: c2:5a:d2:4e:1e:88:65:96:61:9f:b3:26:eb:d2:1b: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C7:BF:F9:3C:5A:AA:F6:8D:73:D7:05:84:65:E1:56:31:6D:52:45 X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7a:ce:45:7f:b4:8a:9d:40:80:95:af:fd:f0:06:d1:6f:34: 9f:01:eb:a3:26:36:19:37:e3:dd:dc:ed:c9:8b:b2:6e:d7:8d: 31:04:d2:7b:e7:fa:2c:af:56:3b:b8:14:56:6f:d2:c1:c5:63: 70:27:0f:62:d1:42:65:c1:06:44:84:a5:d8:67:97:96:c6:69: 94:11:eb:d5:ca:25:68:4c:37:b8:35:ac:f9:54:0b:52:bb:36: 11:c1:10:b5:59:30:d3:8e:81:b2:cd:97:ca:74:5e:45:9b:27: a1:34:81:55:ed:29:f8:1f:fa:b5:af:d5:2b:09:a5:20:ce:20: f3:b8:67:ba:2b:f1:03:7c:83:b1:5d:c0:d4:0d:20:af:64:e6: 0b:83:99:ba:ed:93:5b:49:4b:04:58:2c:00:85:c3:e9:67:84: 46:42:33:1e:7d:55:fe:4c:0c:9b:d5:24:bd:49:11:37:ff:0c: 16:a4:58:53:49:ba:c3:50:a9:ea:d0:9a:35:f6:ee:43:39:ea: f4:f0:a9:a0:eb:14:fe:05:33:a4:81:44:93:1d:43:04:cc:9b: 96:94:a0:8e:61:bb:3e:be:35:39:81:71:3b:78:f1:2f:5c:2d: b8:e5:27:7b:f9:46:bf:5c:5e:ab:11:b3:02:07:fc:d7:c5:44: 95:f0:36:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjUxMDE5MDMzMzQxWhcNMjUxMDI2MDMzMzQxWjAYMRYwFAYD VQQDEw02OGY0NWMxNS01NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WvokRRFYeTnZ2W2Lb9omg4bRWcdubfLjHls+u10ZqKjNCr0IHruwXfM0ivC W7fDttyPLJjldr5GfxreQnPzAkPCM/5N70hLoRGxPtzL8t5ApNyokaJDZobxuPa0 mOPw7BWKvF2XrUAq6zZhrIsi1Z7S84ar/IXJGXJ+FR/s1sFKi7J3P1h/vX3HuuOq CdOB9e5An5CGrEa35fWfPTrs/dN356TR8UiePsJ03ZZfcTxOMGTNxQgxx3WXnCiU creK5TuJ69/9ad5znw9flSFKyOb2y5qyC82HIc/cZ97NdMf+nq/NgY9AC8MJF79Q OfzCWtJOHohllmGfsybr0htyBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDHv/k8 Wqr2jXPXBYRl4VYxbVJFMB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbes5Ff7SKnUCAla/98AbRbzSfAeujJjYZN+Pd3O3Ji7Ju140xBNJ7 5/osr1Y7uBRWb9LBxWNwJw9i0UJlwQZEhKXYZ5eWxmmUEevVyiVoTDe4Naz5VAtS uzYRwRC1WTDTjoGyzZfKdF5FmyehNIFV7Sn4H/q1r9UrCaUgziDzuGe6K/EDfIOx XcDUDSCvZOYLg5m67ZNbSUsEWCwAhcPpZ4RGQjMefVX+TAyb1SS9SRE3/wwWpFhT SbrDUKnq0Jo19u5DOer08Kmg6xT+BTOkgUSTHUMEzJuWlKCOYbs+vjU5gXE7ePEv XC245Sd7+Ua/XF6rEbMCB/zXxUSV8Da8 -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:20 2025 by rpki-client