$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: 0JWcALL2OZ6MJWMyt7u4phdcQtBZtPcPyYLPOruRRgo= Subject key identifier: A8:5A:2A:51:36:2F:75:DB:BA:15:41:17:A3:C6:4D:48:D3:08:0A:C7 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 64 Signing time: Sun 19 Oct 2025 10:25:46 +0000 Manifest this update: Sun 19 Oct 2025 10:25:45 +0000 Manifest next update: Sun 26 Oct 2025 10:25:45 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: b5C+lPKnjzvkPMLkO0Ya547P28Mc9Vzkwl+RbJWV5x8=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Oct 19 10:25:45 2025 GMT Not After : Oct 26 10:25:45 2025 GMT Subject: CN=68f4bca9-9ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:c2:ec:b6:cd:26:1b:8a:3e:01:c0:a3:a8: 0c:49:25:b8:49:c1:37:96:1b:3d:f0:f8:7c:62:12: 0f:c7:1e:1f:7a:07:6d:e1:d4:99:b2:9d:00:69:77: 86:81:e6:d5:1c:40:7d:8f:ce:04:6c:9f:aa:7e:d4: 85:19:8a:8a:fd:76:b1:6c:f3:0f:96:96:6d:df:4e: 19:9e:77:44:03:d7:81:b5:3f:ca:fb:1f:38:b0:8f: 78:ef:3a:e4:7b:d7:5f:27:39:3f:07:b5:08:bf:c6: e5:d1:8f:ae:18:99:fe:46:09:9a:15:0b:db:05:22: 8e:32:05:50:3f:e2:29:21:d5:e6:64:07:2e:f6:fc: 6a:8b:a3:cf:f3:f1:55:5d:b7:74:e8:3e:7a:e8:92: f9:80:23:41:6b:f9:c7:34:d8:e2:4c:2a:5d:6a:12: 4b:33:45:39:ba:52:0e:db:14:9e:c0:31:98:60:a0: ce:d7:80:7a:06:0a:f3:f7:4e:e8:8f:8a:f5:d1:79: d2:a5:9b:cf:4c:e9:b1:a2:d5:eb:80:68:4b:3a:8b: f9:34:b8:e1:ae:98:ae:0f:49:ec:01:93:d5:26:8a: 25:d3:cb:0a:78:74:45:4b:65:29:0a:1d:7a:a8:e3: 3e:42:fd:29:98:1a:f6:ba:c0:32:d9:15:d9:a8:39: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5A:2A:51:36:2F:75:DB:BA:15:41:17:A3:C6:4D:48:D3:08:0A:C7 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:9e:f3:46:fe:53:4a:b7:9b:c6:e4:98:26:d0:ca:39:55:bd: 9e:b7:60:ef:72:22:44:5b:ac:79:2e:f6:85:8e:67:0b:65:b8: 5c:c8:59:20:dd:08:0b:f9:e8:d9:27:01:ed:d9:e0:7e:6c:c0: 7f:7e:65:08:94:32:5a:08:dc:70:de:a5:30:5d:d2:c5:a9:8f: 2b:60:1b:fe:44:77:3e:56:58:cb:dc:36:f2:0a:8c:63:7c:65: 53:99:cb:3c:62:4a:2f:58:c0:ba:5b:d9:2e:ac:52:22:06:37: 2e:d0:cd:f8:85:f5:27:46:6c:cd:cc:28:70:57:ec:83:84:dc: 98:f2:78:25:5f:d5:e9:12:e6:e0:43:43:1f:f1:90:5e:7a:2b: 68:c9:78:0f:3f:a6:36:c8:e5:7d:09:25:51:51:a8:2a:de:8f: 82:47:2b:bb:14:11:5c:78:d0:0f:51:a8:fe:3c:48:d4:eb:e7: 8a:7f:8f:76:36:5f:e2:31:8d:72:90:ce:43:28:4f:39:f9:b5: d7:bc:6a:ed:3e:85:84:35:f8:c8:ec:01:0c:e0:f3:be:1c:31: 12:53:d6:90:06:5c:92:6d:a5:af:7e:47:d6:9f:1e:41:f4:3a: 74:66:e0:99:09:b3:64:ca:c5:d5:57:08:84:96:13:91:e6:95: f9:10:4f:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTEwMTkxMDI1NDVaFw0yNTEwMjYxMDI1NDVaMBgxFjAUBgNV BAMTDTY4ZjRiY2E5LTllYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1acLsts0mG4o+AcCjqAxJJbhJwTeWGz3w+HxiEg/HHh96B23h1JmynQBpd4aB 5tUcQH2PzgRsn6p+1IUZior9drFs8w+Wlm3fThmed0QD14G1P8r7Hziwj3jvOuR7 118nOT8HtQi/xuXRj64Ymf5GCZoVC9sFIo4yBVA/4ikh1eZkBy72/GqLo8/z8VVd t3ToPnrokvmAI0Fr+cc02OJMKl1qEkszRTm6Ug7bFJ7AMZhgoM7XgHoGCvP3TuiP ivXRedKlm89M6bGi1euAaEs6i/k0uOGumK4PSewBk9UmiiXTywp4dEVLZSkKHXqo 4z5C/SmYGva6wDLZFdmoOcJRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqFoqUTYv ddu6FUEXo8ZNSNMICscwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADae80b+U0q3m8bkmCbQyjlVvZ63YO9yIkRbrHku9oWOZwtluFzIWSDd CAv56NknAe3Z4H5swH9+ZQiUMloI3HDepTBd0sWpjytgG/5Edz5WWMvcNvIKjGN8 ZVOZyzxiSi9YwLpb2S6sUiIGNy7QzfiF9SdGbM3MKHBX7IOE3JjyeCVf1ekS5uBD Qx/xkF56K2jJeA8/pjbI5X0JJVFRqCrej4JHK7sUEVx40A9RqP48SNTr54p/j3Y2 X+IxjXKQzkMoTzn5tde8au0+hYQ1+MjsAQzg874cMRJT1pAGXJJtpa9+R9afHkH0 OnRm4JkJs2TKxdVXCISWE5HmlfkQTwk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:20 2025 by rpki-client