$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: I5NnIUUDT0bURPaiYKiFaFLylq9ogtLgW05Ag/uV4lI= Subject key identifier: CA:94:87:40:A1:DE:F0:58:AA:A9:30:01:22:BB:1F:CE:E6:6C:F3:34 Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 02EC Signing time: Sun 19 Oct 2025 03:21:48 +0000 Manifest this update: Sun 19 Oct 2025 03:21:47 +0000 Manifest next update: Sun 26 Oct 2025 03:21:47 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: +S8VoOkM0SkQWZMbeeHL14i414DFPwy29wNkFjxUfJY=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: vsUIy1tbHWL8V/egiXCJ22jgmvrNd5Q4mwZ6W3OeA1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Validity Not Before: Oct 19 03:21:47 2025 GMT Not After : Oct 26 03:21:47 2025 GMT Subject: CN=68f4594b-b04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:35:ea:e3:96:e1:e4:3f:1d:ff:80:86:42:55: 59:f7:89:2e:8c:11:f3:6d:2a:c1:d4:06:6f:92:1f: d7:30:87:39:6a:4e:d0:82:c3:a2:9d:be:b5:e8:55: 4d:1e:1d:ec:fb:0c:31:a8:2f:14:7f:9b:4b:e3:ae: 11:f3:d4:fe:84:be:3b:a2:7f:5d:02:e5:dd:90:f4: d6:a3:32:83:13:e2:97:88:19:d8:9f:79:95:40:13: 0f:d6:5c:77:1a:94:b4:5c:8b:04:f0:52:af:5e:e3: 2b:5b:4a:d2:f9:03:5e:bc:02:08:77:58:a2:9f:25: b5:94:37:b5:1b:c1:4b:86:4c:0d:55:52:bb:0c:31: f2:97:45:18:e9:62:9f:99:ae:13:d7:eb:d0:f2:93: 4d:46:f8:bc:69:5d:78:3d:4e:db:5b:bd:9f:93:0e: 65:b3:f1:74:de:94:cc:59:b9:40:95:c1:a6:59:d8: 99:c8:9d:41:8b:a1:5f:49:a7:ec:bb:10:12:c9:b4: 1c:e6:06:f8:fc:8c:ef:b4:2a:1e:65:e7:e5:a6:2e: 6a:8b:77:05:a4:9c:74:34:99:3c:c7:e2:5e:be:5a: 3d:c2:fb:a4:de:fc:82:17:8f:d8:ee:dc:03:3e:4f: b4:b9:6d:da:0d:84:96:48:82:bb:4e:45:7f:4a:b4: 93:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:94:87:40:A1:DE:F0:58:AA:A9:30:01:22:BB:1F:CE:E6:6C:F3:34 X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b5:28:88:88:68:1e:ec:27:a1:52:3c:6a:6b:37:1f:0b:59: fd:72:fb:bf:3d:3f:38:10:46:c5:79:c9:ad:2e:3f:40:9e:b3: 12:85:e5:3f:9d:af:1c:c8:31:c3:60:30:ae:4b:35:30:38:50: 16:b6:74:07:78:1e:84:41:a0:1e:8e:5d:63:05:2d:c5:51:c5: 76:ad:7f:aa:b6:57:d4:e1:48:5f:4d:e2:a1:db:45:30:95:90: 29:c2:5f:52:56:8a:f7:67:81:8e:da:9b:a1:3d:43:91:26:7d: 23:67:c7:ca:dd:d8:9d:2c:75:04:ae:82:7e:99:27:78:95:fb: b1:85:d7:35:8f:fd:7b:b2:cc:a1:85:8c:d5:01:0b:1d:8e:72: 19:01:2d:8a:2e:d9:f7:54:16:8d:42:a6:31:8e:fe:71:e6:8a: 75:1e:c2:7a:14:2e:70:b1:7a:5e:13:f5:b1:b6:a8:60:e7:b8: c6:97:66:4d:75:12:96:60:7e:39:62:8e:36:0a:d1:cb:34:da: 36:7b:9a:86:db:9f:ea:ec:53:49:0d:b9:fa:7a:9d:1a:14:5c: 5a:ca:2f:ae:ad:e7:f0:c2:05:5a:7f:a9:b5:fa:b9:d9:13:be: 97:f5:28:91:27:94:39:86:b0:93:7d:3c:3e:d6:55:49:0c:f0: 10:c6:97:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjUxMDE5MDMyMTQ3WhcNMjUxMDI2MDMyMTQ3WjAYMRYwFAYD VQQDEw02OGY0NTk0Yi1iMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TXq45bh5D8d/4CGQlVZ94kujBHzbSrB1AZvkh/XMIc5ak7QgsOinb616FVN Hh3s+wwxqC8Uf5tL464R89T+hL47on9dAuXdkPTWozKDE+KXiBnYn3mVQBMP1lx3 GpS0XIsE8FKvXuMrW0rS+QNevAIId1iinyW1lDe1G8FLhkwNVVK7DDHyl0UY6WKf ma4T1+vQ8pNNRvi8aV14PU7bW72fkw5ls/F03pTMWblAlcGmWdiZyJ1Bi6FfSafs uxASybQc5gb4/IzvtCoeZeflpi5qi3cFpJx0NJk8x+Jevlo9wvuk3vyCF4/Y7twD Pk+0uW3aDYSWSIK7TkV/SrST1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqUh0Ch 3vBYqqkwASK7H87mbPM0MB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWtSiIiGge7CehUjxqazcfC1n9cvu/PT84EEbFecmtLj9AnrMSheU/ na8cyDHDYDCuSzUwOFAWtnQHeB6EQaAejl1jBS3FUcV2rX+qtlfU4UhfTeKh20Uw lZApwl9SVor3Z4GO2puhPUORJn0jZ8fK3didLHUEroJ+mSd4lfuxhdc1j/17ssyh hYzVAQsdjnIZAS2KLtn3VBaNQqYxjv5x5op1HsJ6FC5wsXpeE/Wxtqhg57jGl2ZN dRKWYH45Yo42CtHLNNo2e5qG25/q7FNJDbn6ep0aFFxayi+urefwwgVaf6m1+rnZ E76X9SiRJ5Q5hrCTfTw+1lVJDPAQxpcE -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:55 2025 by rpki-client