$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: d8XZUp9CX7Nd/NMdu9hJo+Q3k3Kr4nGgZwj1BziI20I= Subject key identifier: D4:15:2B:5F:FE:47:8A:74:35:D9:45:38:69:22:55:63:0B:AC:E5:09 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: A3 Signing time: Sun 19 Oct 2025 09:37:17 +0000 Manifest this update: Sun 19 Oct 2025 09:37:16 +0000 Manifest next update: Sun 26 Oct 2025 09:37:16 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: aSwi7mBEFgQft5+hfMqIwzvAxZJnAVervkl1cnZIB/k=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Oct 19 09:37:16 2025 GMT Not After : Oct 26 09:37:16 2025 GMT Subject: CN=68f4b14d-faef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8f:4b:79:3d:70:70:c9:60:00:2a:1b:b5:55: 90:32:15:5e:5f:ba:04:fd:27:ef:b6:9a:af:df:7f: cc:44:32:fd:4c:c8:28:46:06:84:e8:af:3f:31:c2: ae:e1:eb:88:a5:7f:e9:e1:1b:d3:a1:25:7d:11:4d: e2:57:59:66:8c:79:62:f5:2b:7a:63:08:26:9b:a9: e6:42:28:03:ce:7d:4f:01:c4:2b:6b:29:af:78:88: bf:f7:f4:b8:48:0b:51:f5:c3:1a:39:06:df:6a:bb: 63:0a:40:ba:98:73:ce:21:59:53:c1:ce:b0:73:78: 0f:25:39:84:6f:2a:6a:e8:f4:7f:9f:e0:27:18:71: 6a:44:e8:de:99:c8:e7:72:56:5f:a0:70:87:15:66: 3c:3f:3e:83:dd:79:77:d1:9c:4a:f9:c7:21:59:76: e5:ad:40:c7:86:a4:21:2e:7e:55:87:17:81:f4:28: 92:f7:28:3a:92:b3:59:bc:0b:f2:ff:ec:d3:29:0a: 78:b2:81:24:c8:14:24:c4:d8:d5:c0:d4:9c:94:76: 73:83:25:ed:ad:75:0a:54:c7:ca:0a:c1:31:92:d0: fa:f7:c0:ee:e0:36:09:14:bc:7b:6d:82:2d:72:4b: f1:9f:76:22:b7:58:10:3d:92:39:05:66:aa:e1:47: ef:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:2B:5F:FE:47:8A:74:35:D9:45:38:69:22:55:63:0B:AC:E5:09 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b8:0d:ff:42:91:58:bc:b9:54:30:76:12:f3:fa:cf:7f:65: 50:e7:0c:68:e2:a8:87:0a:39:f2:40:68:c5:5e:04:2e:8e:53: 57:30:b8:1f:84:ef:d8:f6:45:f8:f5:5e:50:f2:54:85:8d:56: 3e:bb:54:d7:f2:58:d6:04:f1:b9:1c:a7:96:84:20:f6:9f:18: aa:72:15:2e:00:f2:61:99:16:87:05:53:7b:e8:1a:66:08:65: 70:45:4e:ae:bc:39:50:bb:af:c9:95:38:d0:ce:c6:89:e2:83: b1:31:6c:61:99:17:71:4b:a7:17:a1:53:f4:a0:eb:3d:78:d5: 37:ef:d3:2a:27:80:df:12:20:10:05:35:0d:69:75:80:28:36: 1c:1f:a4:92:16:59:3b:97:1a:01:d5:c1:d5:dc:63:f8:b9:14: d1:5b:35:d6:5b:95:70:a0:d2:ad:b1:4d:bf:e0:e5:77:5f:38: 3e:a3:5b:f8:b2:81:b2:3c:9b:07:ed:d1:a5:35:6c:fc:4b:d8: 80:6d:9e:17:de:9b:d3:98:71:ab:46:c1:f1:be:10:15:3d:dc: 3f:db:07:ee:5e:d4:90:85:0e:74:b7:54:8f:9c:ac:cf:ae:1c: 8f:da:e6:78:ba:6d:45:46:0d:6a:79:12:42:5f:8d:a0:e7:dd: 27:e8:78:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjUxMDE5MDkzNzE2WhcNMjUxMDI2MDkzNzE2WjAYMRYwFAYD VQQDEw02OGY0YjE0ZC1mYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA549LeT1wcMlgACobtVWQMhVeX7oE/Sfvtpqv33/MRDL9TMgoRgaE6K8/McKu 4euIpX/p4RvToSV9EU3iV1lmjHli9St6Ywgmm6nmQigDzn1PAcQraymveIi/9/S4 SAtR9cMaOQbfartjCkC6mHPOIVlTwc6wc3gPJTmEbypq6PR/n+AnGHFqROjemcjn clZfoHCHFWY8Pz6D3Xl30ZxK+cchWXblrUDHhqQhLn5VhxeB9CiS9yg6krNZvAvy /+zTKQp4soEkyBQkxNjVwNSclHZzgyXtrXUKVMfKCsExktD698Du4DYJFLx7bYIt ckvxn3Yit1gQPZI5BWaq4UfvnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQVK1/+ R4p0NdlFOGkiVWMLrOUJMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeuA3/QpFYvLlUMHYS8/rPf2VQ5wxo4qiHCjnyQGjFXgQujlNXMLgf hO/Y9kX49V5Q8lSFjVY+u1TX8ljWBPG5HKeWhCD2nxiqchUuAPJhmRaHBVN76Bpm CGVwRU6uvDlQu6/JlTjQzsaJ4oOxMWxhmRdxS6cXoVP0oOs9eNU379MqJ4DfEiAQ BTUNaXWAKDYcH6SSFlk7lxoB1cHV3GP4uRTRWzXWW5VwoNKtsU2/4OV3Xzg+o1v4 soGyPJsH7dGlNWz8S9iAbZ4X3pvTmHGrRsHxvhAVPdw/2wfuXtSQhQ50t1SPnKzP rhyP2uZ4um1FRg1qeRJCX42g590n6Hgg -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:56 2025 by rpki-client