$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: Tk7rfCIJy5+RCKU8IS58rGaBQatNdV+m9Sj2Q6e1xz4= Subject key identifier: D4:B4:B7:64:8E:46:58:C8:58:D0:20:E5:FA:84:24:04:D6:13:AD:36 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 01BF Signing time: Sun 19 Oct 2025 05:31:34 +0000 Manifest this update: Sun 19 Oct 2025 05:31:33 +0000 Manifest next update: Sun 26 Oct 2025 05:31:33 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: cA0R68HV+9b6E7nBXf0xdceCMtB69t0NdcAb6s+1StY=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Oct 19 05:31:33 2025 GMT Not After : Oct 26 05:31:33 2025 GMT Subject: CN=68f477b5-683c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:ad:ca:41:c0:8b:50:fe:cd:9d:6d:e7:9e: 78:5b:88:b9:bb:f8:3e:ca:d4:d2:f7:8b:38:b6:73: 81:8c:78:97:e7:9a:6e:62:65:26:9d:36:24:b4:9a: 6c:02:ed:05:52:40:70:32:11:1a:35:17:ac:c9:d0: 29:b3:34:b8:47:0e:2a:26:82:1b:26:ea:b4:da:b9: dd:0b:c4:93:ba:6f:02:0f:22:6e:45:15:ff:00:3e: c0:67:d1:d8:47:89:f8:89:a0:11:d9:e5:1a:83:0a: 05:74:21:1c:27:18:b2:65:7c:a4:03:f8:89:b1:e5: 39:e4:c9:6b:ab:5b:fd:23:67:e6:7a:b1:77:6d:7f: 85:cd:bd:9c:58:be:b8:0d:d6:57:e5:8b:a5:3b:f1: 79:ad:9e:ac:71:97:4a:ba:65:8a:40:ea:83:a0:6f: ba:95:65:d7:ac:ae:3c:ba:08:f7:13:a8:6a:dd:ee: b7:54:3f:d1:09:e9:2b:5f:1c:d2:55:de:ff:af:39: 79:d1:c9:eb:a8:83:be:94:77:e9:ec:12:64:64:fa: 90:92:0a:f7:11:76:7c:d2:5a:a3:d5:46:24:42:37: 4e:d0:7a:b6:0e:64:3c:6c:6d:20:d4:b5:73:c5:b3: e5:f0:8d:50:27:e6:1c:8c:e1:2f:93:74:58:68:6f: 69:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:B7:64:8E:46:58:C8:58:D0:20:E5:FA:84:24:04:D6:13:AD:36 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a2:79:6e:f2:20:6d:7e:b7:9b:65:91:a1:7b:27:7b:f2:65: 62:19:47:62:1d:1b:56:10:f6:01:40:0e:5b:d4:9a:f5:8b:50: d3:f0:05:76:c5:45:04:61:76:69:ac:25:51:1b:81:be:c9:95: 52:48:ca:35:c4:9c:6d:ec:3d:b4:e0:c9:0f:e7:15:d5:e3:a8: 86:dd:49:07:4f:02:fb:e7:b1:aa:10:25:0e:5f:ab:82:ef:6a: c7:76:f3:eb:d0:36:79:42:e2:13:e9:10:de:d3:ce:b2:e5:df: 5a:d3:62:e8:d6:9a:b8:f1:e0:fe:06:f3:75:98:a4:28:6c:d3: f7:ad:aa:5f:76:5f:67:94:1a:9e:05:59:3f:e3:63:aa:df:7b: 23:0f:ed:05:b2:8b:94:7d:ec:12:40:23:e3:3d:28:db:e5:30: 80:07:63:7e:d2:98:33:e6:b0:9f:3c:f4:54:31:5f:09:b1:02: cc:c5:10:8e:be:e1:f2:53:61:14:a8:b8:45:e5:7f:a0:dc:1a: 03:05:b0:2c:02:6f:72:a1:06:bf:32:12:97:9d:2b:f7:fb:75: d4:fb:1b:8d:0c:df:b8:da:f5:73:ed:6b:02:ef:57:24:6a:06: e8:bc:b9:e1:87:10:68:ea:09:bc:33:e2:6e:d6:cc:94:19:46: 87:18:5b:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUxMDE5MDUzMTMzWhcNMjUxMDI2MDUzMTMzWjAYMRYwFAYD VQQDEw02OGY0NzdiNS02ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jGtykHAi1D+zZ1t5554W4i5u/g+ytTS94s4tnOBjHiX55puYmUmnTYktJps Au0FUkBwMhEaNResydApszS4Rw4qJoIbJuq02rndC8STum8CDyJuRRX/AD7AZ9HY R4n4iaAR2eUagwoFdCEcJxiyZXykA/iJseU55Mlrq1v9I2fmerF3bX+Fzb2cWL64 DdZX5YulO/F5rZ6scZdKumWKQOqDoG+6lWXXrK48ugj3E6hq3e63VD/RCekrXxzS Vd7/rzl50cnrqIO+lHfp7BJkZPqQkgr3EXZ80lqj1UYkQjdO0Hq2DmQ8bG0g1LVz xbPl8I1QJ+YcjOEvk3RYaG9pMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS0t2SO RljIWNAg5fqEJATWE602MB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOonlu8iBtfrebZZGheyd78mViGUdiHRtWEPYBQA5b1Jr1i1DT8AV2 xUUEYXZprCVRG4G+yZVSSMo1xJxt7D204MkP5xXV46iG3UkHTwL757GqECUOX6uC 72rHdvPr0DZ5QuIT6RDe086y5d9a02Lo1pq48eD+BvN1mKQobNP3rapfdl9nlBqe BVk/42Oq33sjD+0FsouUfewSQCPjPSjb5TCAB2N+0pgz5rCfPPRUMV8JsQLMxRCO vuHyU2EUqLhF5X+g3BoDBbAsAm9yoQa/MhKXnSv3+3XU+xuNDN+42vVz7WsC71ck agbovLnhhxBo6gm8M+Ju1syUGUaHGFtG -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:54 2025 by rpki-client