$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: 2J2JQheidnISYFA+gmlILIt+2VuLuUImg8+tapIouXo= Subject key identifier: 5D:A3:9A:EE:D3:2D:B6:3F:A9:C4:B7:D3:CE:99:2D:4C:F7:AB:42:0E Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: CD Signing time: Sun 19 Oct 2025 08:52:44 +0000 Manifest this update: Sun 19 Oct 2025 08:52:44 +0000 Manifest next update: Sun 26 Oct 2025 08:52:44 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: 01aseiK+glkw7s9YxuU5UcHxzdtoZ5UD6t0XtCzOybs=) 2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: 4V+9+c49QCiHGtiEbNA0Te5WkEwmaqOFQaED8qjsjbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Oct 19 08:52:44 2025 GMT Not After : Oct 26 08:52:44 2025 GMT Subject: CN=68f4a6dc-71ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:59:0d:63:99:30:6b:78:c5:2d:be:f7:ec:8a: a8:5a:2e:da:f5:65:a9:3b:75:aa:77:f7:e1:5b:5a: 5c:ea:81:cb:8c:51:bb:d1:0c:ce:8b:bd:a3:8c:3f: a2:4e:e5:66:d1:99:51:33:3f:5f:b8:fe:00:1c:bf: 4d:ee:0b:8b:7a:49:d9:21:b8:03:50:1e:72:5a:3d: e6:59:62:a8:fe:c9:b9:fb:96:2b:8f:8a:03:da:5a: 77:dc:f1:60:ba:8c:1d:9b:9e:69:01:09:95:2d:b9: fb:04:97:21:4d:60:27:3a:4a:d0:4c:1d:f4:ec:72: 3d:72:f0:4d:f1:16:79:ae:9d:ef:26:e6:df:37:c1: f6:da:db:40:cf:28:8e:03:36:5b:89:3e:4d:62:25: 55:f3:ca:35:a2:76:ed:97:f0:40:39:2e:f3:68:50: 80:cb:f5:38:2a:87:1c:8a:1d:a4:dd:f2:6f:28:05: 50:31:ad:f3:c5:01:aa:ca:b1:c1:ba:f6:b8:69:29: f8:9f:16:ce:5b:5a:a8:ed:4e:da:66:55:e2:fb:49: 84:4a:2b:7f:4c:45:23:73:bc:d2:b5:ca:ba:bf:dc: ac:7a:a8:62:d0:e8:33:84:ec:88:a8:f7:1b:ed:2a: 54:78:c8:c1:2d:25:8d:83:86:64:89:de:6f:49:50: 71:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A3:9A:EE:D3:2D:B6:3F:A9:C4:B7:D3:CE:99:2D:4C:F7:AB:42:0E X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:16:16:37:1b:42:8d:17:98:8a:66:be:07:58:0e:ad:bf:a6: b9:2a:1b:b0:e3:1d:14:ca:38:d7:ed:df:04:7c:70:8b:5d:d3: 1b:cc:40:20:47:d3:1c:c0:80:8f:78:1a:65:0b:d4:79:d5:a3: 5b:f5:81:47:5f:22:3f:4e:a3:6c:c2:eb:40:66:7a:89:96:20: f3:38:81:ec:87:9c:70:cf:d5:5f:b0:f9:a7:2a:26:01:08:68: 73:5f:76:21:e8:1a:5c:c1:ad:40:50:ea:1a:cf:22:9a:b5:ec: ac:d4:1d:d0:a4:d5:59:0a:ed:50:c9:79:04:ef:70:e6:d3:17: 52:2d:7c:22:f7:34:c5:e9:22:86:81:97:57:5b:d4:33:4f:dc: 0e:e7:b0:48:1a:c1:7b:d6:92:7d:8f:98:46:00:98:ff:65:bf: 73:5a:c5:87:30:0d:c6:fa:84:bf:6c:5a:f4:a8:c4:c9:4f:90: 7f:00:19:71:c5:e5:dd:4f:81:57:7c:5e:45:12:0e:f2:e1:16: 98:9b:fc:a0:87:d0:6a:45:90:97:ba:0d:96:25:f8:7e:b2:52: c8:2e:0b:4b:f4:a1:8e:bb:73:5e:f6:2c:63:92:ba:7e:83:41: bf:0b:b9:43:c2:bf:58:05:aa:e6:93:2e:76:8a:d0:d0:88:84: 0b:fb:d6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUxMDE5MDg1MjQ0WhcNMjUxMDI2MDg1MjQ0WjAYMRYwFAYD VQQDEw02OGY0YTZkYy03MWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FkNY5kwa3jFLb737IqoWi7a9WWpO3Wqd/fhW1pc6oHLjFG70QzOi72jjD+i TuVm0ZlRMz9fuP4AHL9N7guLeknZIbgDUB5yWj3mWWKo/sm5+5Yrj4oD2lp33PFg uowdm55pAQmVLbn7BJchTWAnOkrQTB307HI9cvBN8RZ5rp3vJubfN8H22ttAzyiO AzZbiT5NYiVV88o1onbtl/BAOS7zaFCAy/U4Koccih2k3fJvKAVQMa3zxQGqyrHB uva4aSn4nxbOW1qo7U7aZlXi+0mESit/TEUjc7zStcq6v9yseqhi0OgzhOyIqPcb 7SpUeMjBLSWNg4Zkid5vSVBxZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2jmu7T LbY/qcS3086ZLUz3q0IOMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkFhY3G0KNF5iKZr4HWA6tv6a5Khuw4x0UyjjX7d8EfHCLXdMbzEAg R9McwICPeBplC9R51aNb9YFHXyI/TqNswutAZnqJliDzOIHsh5xwz9VfsPmnKiYB CGhzX3Yh6Bpcwa1AUOoazyKateys1B3QpNVZCu1QyXkE73Dm0xdSLXwi9zTF6SKG gZdXW9QzT9wO57BIGsF71pJ9j5hGAJj/Zb9zWsWHMA3G+oS/bFr0qMTJT5B/ABlx xeXdT4FXfF5FEg7y4RaYm/ygh9BqRZCXug2WJfh+slLILgtL9KGOu3Ne9ixjkrp+ g0G/C7lDwr9YBarmky52itDQiIQL+9Ym -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:33 2025 by rpki-client