$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft File: n095sMMg0u--SKvL-paoRdZHlu8.mft (raw, json) Hash identifier: +twJ4SRUYaLQMj5YmYsissMW4swCYBpnG6s5usjIMSI= Subject key identifier: 3F:07:5B:B6:17:68:38:64:FE:D6:7B:2B:D0:61:59:1D:F7:01:91:B5 Authority key identifier: 9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF Certificate issuer: /CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft Manifest number: 021A Signing time: Sun 19 Oct 2025 03:33:44 +0000 Manifest this update: Sun 19 Oct 2025 03:33:44 +0000 Manifest next update: Sun 26 Oct 2025 03:33:44 +0000 Files and hashes: 1: n095sMMg0u--SKvL-paoRdZHlu8.crl (hash: owECMCxDuLO5/QvUHm75XfcoHtbe8g8qUIxSeQE5EsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF Validity Not Before: Oct 19 03:33:44 2025 GMT Not After : Oct 26 03:33:44 2025 GMT Subject: CN=68f45c18-14a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:ab:05:c2:8a:1e:c5:01:3f:6f:12:1c:8a: c6:96:1a:fc:35:a7:c0:f1:a7:08:b3:a4:a7:d5:20: 58:1d:4a:e4:f3:7c:b8:17:ae:81:db:ea:d2:8d:66: 89:e1:cf:76:ab:01:6f:6b:e4:68:8b:da:e5:56:82: 8a:03:5d:bb:89:e7:2e:e9:56:45:eb:45:5c:5e:f9: a1:fb:59:a5:6c:fb:da:f6:0f:a7:cd:93:d2:09:21: 66:8e:85:45:91:c9:b4:57:72:54:72:f6:35:6b:15: 94:a1:ef:50:9e:f7:0f:40:d1:83:17:14:27:d5:de: 85:31:a5:c2:e0:70:44:3e:aa:34:24:c6:5d:83:7f: ac:85:5e:d8:e8:84:a5:75:fc:98:6f:d6:a1:ff:76: e0:9e:d4:b1:a2:9d:8b:aa:46:5b:fe:50:6d:f4:ca: 2c:f0:3b:2f:1e:4a:e8:20:c0:e4:c9:ec:c5:f4:7d: c7:7e:50:4c:ab:db:e2:38:46:ec:54:95:78:0c:e3: ea:1b:89:3a:3f:f9:ff:e7:15:ca:7d:be:08:b5:6c: ac:18:29:24:3f:86:c0:4e:cf:4e:9e:0c:d0:c1:bc: 08:13:49:43:18:4a:d0:b0:3a:7f:03:1d:26:f8:5e: 7e:ea:50:50:28:1b:9b:27:c8:05:51:b4:74:9a:b4: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:07:5B:B6:17:68:38:64:FE:D6:7B:2B:D0:61:59:1D:F7:01:91:B5 X509v3 Authority Key Identifier: keyid:9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5d:c2:45:06:40:bc:21:29:af:2f:72:f9:ba:8e:0d:4b:60: cc:e8:23:32:d3:3d:35:d3:10:c1:d2:55:5f:19:94:fc:25:4b: f9:f3:ce:23:81:4c:d4:f5:87:7e:24:b1:3b:ec:37:c1:bc:b0: 7b:d4:32:00:65:9e:43:e7:c8:62:ba:7b:3c:6c:4e:76:92:fb: c1:09:52:4b:d3:fa:91:71:8a:c7:83:78:7b:98:5b:8f:49:cb: 7a:7d:4b:12:68:7a:e2:86:0a:b4:77:81:3b:09:f1:22:b4:8d: d3:c9:a9:e3:40:62:de:70:b5:53:cd:36:1f:e2:a4:e4:03:4e: fc:1c:89:b3:92:75:a0:ba:28:85:7f:cc:69:84:4d:02:14:54: 0b:cd:a9:d2:e5:7d:bb:89:04:c4:29:e5:15:f1:d7:18:b2:49: 18:b2:6a:b9:e6:16:16:a3:a0:77:8c:2a:f5:95:4f:5d:12:3f: 26:01:cb:5b:48:aa:86:56:f8:33:d7:84:ea:c8:5f:a5:f3:41: 2b:73:d9:56:e0:16:f0:7a:32:5f:3d:0d:20:ee:ad:74:56:ed: 18:47:51:fc:ef:a9:c9:4d:2d:7c:a4:56:4c:80:d7:8f:bb:88: de:84:9e:d8:df:5a:9f:75:07:61:66:8e:7a:72:16:3c:c6:87: e6:07:f5:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDlGNEY3OUIwQzMyMEQyRUZCRTQ4QUJDQkZBOTZBODQ1 RDY0Nzk2RUYwHhcNMjUxMDE5MDMzMzQ0WhcNMjUxMDI2MDMzMzQ0WjAYMRYwFAYD VQQDEw02OGY0NWMxOC0xNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVerBcKKHsUBP28SHIrGlhr8NafA8acIs6Sn1SBYHUrk83y4F66B2+rSjWaJ 4c92qwFva+Roi9rlVoKKA127iecu6VZF60VcXvmh+1mlbPva9g+nzZPSCSFmjoVF kcm0V3JUcvY1axWUoe9QnvcPQNGDFxQn1d6FMaXC4HBEPqo0JMZdg3+shV7Y6ISl dfyYb9ah/3bgntSxop2LqkZb/lBt9Mos8DsvHkroIMDkyezF9H3HflBMq9viOEbs VJV4DOPqG4k6P/n/5xXKfb4ItWysGCkkP4bATs9OngzQwbwIE0lDGErQsDp/Ax0m +F5+6lBQKBubJ8gFUbR0mrQXqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8HW7YX aDhk/tZ7K9BhWR33AZG1MB8GA1UdIwQYMBaAFJ9PebDDINLvvkiry/qWqEXWR5bv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy81MEQ2MUJCNjcx M0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1LS1TS3ZMLXBhb1JkWkhs dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wOTVzTU1nMHUtLVNLdkwtcGFvUmRaSGx1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy81MEQ2MUJCNjcxM0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1 LS1TS3ZMLXBhb1JkWkhsdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNXcJFBkC8ISmvL3L5uo4NS2DM6CMy0z010xDB0lVfGZT8JUv5884j gUzU9Yd+JLE77DfBvLB71DIAZZ5D58hiuns8bE52kvvBCVJL0/qRcYrHg3h7mFuP Sct6fUsSaHrihgq0d4E7CfEitI3TyanjQGLecLVTzTYf4qTkA078HImzknWguiiF f8xphE0CFFQLzanS5X27iQTEKeUV8dcYskkYsmq55hYWo6B3jCr1lU9dEj8mActb SKqGVvgz14TqyF+l80Erc9lW4BbwejJfPQ0g7q10Vu0YR1H876nJTS18pFZMgNeP u4jehJ7Y31qfdQdhZo56chY8xofmB/We -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:59 2025 by rpki-client