$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: 0ZgM98pThIEwCOtvDwzm5yjjzznDXSqQai+pWeCccUU= Subject key identifier: 43:BA:CA:56:A4:A3:17:40:38:3B:E2:73:90:FE:B8:68:41:A6:FD:8C Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 04F5 Signing time: Sun 19 Oct 2025 01:29:25 +0000 Manifest this update: Sun 19 Oct 2025 01:29:24 +0000 Manifest next update: Sun 26 Oct 2025 01:29:24 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: r1amxmO6xSGgg+qX4rY6CgI5mFwFdnLBVOLtuRMxFMY=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Oct 19 01:29:24 2025 GMT Not After : Oct 26 01:29:24 2025 GMT Subject: CN=68f43ef5-c826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:3e:30:47:d0:3a:61:d3:83:95:23:b3:e3: bf:cb:c8:42:61:17:67:3d:48:e6:3b:b7:e3:f4:df: 8b:d0:64:ea:2d:55:93:79:1c:49:d1:12:c6:da:1e: 64:c8:ad:ca:11:6b:84:68:86:f3:af:6c:3c:36:d4: 3a:68:df:38:28:12:fb:c8:9f:b7:77:34:c4:7b:0d: c7:ea:28:2a:e0:81:1f:da:fc:38:4c:95:89:5c:f5: 24:36:a6:ab:7c:cc:f2:28:63:b3:c9:b6:df:3c:01: 7a:6d:bf:6d:4c:eb:e0:e9:41:5b:32:95:b7:e5:7b: 52:63:31:f2:a6:05:0b:eb:30:54:4c:57:ee:47:ef: 9c:a7:65:43:b7:3b:ac:b4:38:fc:d4:1e:30:3c:b5: 09:32:b4:ad:d0:af:db:a2:f8:a8:77:42:5f:a9:25: bf:10:12:50:2d:c3:32:c2:ca:cf:1d:9c:5d:93:20: ad:8a:e2:38:8c:a6:7c:96:85:c8:58:57:94:8c:8e: ae:0a:9f:95:1d:72:33:4a:cc:96:68:db:72:fe:f0: 90:3e:e0:bc:48:bc:5f:5d:42:5b:18:7c:6d:73:a6: 6e:5d:b6:c8:5f:0a:f6:23:18:09:9d:67:db:5b:85: 91:a9:5e:33:f0:c3:09:ae:52:25:66:d1:f4:79:43: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BA:CA:56:A4:A3:17:40:38:3B:E2:73:90:FE:B8:68:41:A6:FD:8C X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7e:b4:70:b9:99:7b:5b:93:2b:a7:7e:f4:03:87:31:af:4b: 69:ed:42:11:4d:a8:6a:be:e7:f4:ad:91:ed:6f:0c:71:55:8e: 5f:4a:5e:8c:1d:8d:e7:c8:19:65:f5:db:b0:2a:7a:c8:3b:32: b2:07:07:00:2f:15:3f:cd:d8:c3:f0:03:63:04:a7:21:5c:f2: bb:78:28:89:70:d6:38:a5:c4:0d:76:05:82:8f:a5:3b:d6:cb: 3f:e7:0c:ea:22:c6:cb:6a:2f:ff:38:0b:c0:88:3e:2a:a6:d7: 4c:63:55:f5:50:eb:61:14:ed:ff:aa:8b:65:4e:dc:a8:70:8b: 7c:59:01:b9:fb:87:19:ea:fb:c5:be:c3:8d:3c:ca:7c:b1:57: 86:b5:97:98:e5:23:2d:f7:a0:6a:37:da:e2:e0:55:eb:a9:0a: ec:7c:2c:e1:1e:5a:c3:de:78:b2:52:5d:2c:d7:e8:7d:ab:99: d2:2d:b9:64:11:a1:ea:fc:ce:29:da:e4:ba:46:08:81:07:84: 2b:7a:8a:4c:51:b0:f2:62:7f:08:53:1b:00:7d:5f:db:2a:db: aa:dd:fb:5a:be:bf:1f:de:b7:14:18:0c:77:28:02:ab:7b:5a: 25:5a:75:00:1c:80:b5:e5:fa:4f:e9:84:65:58:2f:8a:47:e2: ed:fe:d9:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUxMDE5MDEyOTI0WhcNMjUxMDI2MDEyOTI0WjAYMRYwFAYD VQQDEw02OGY0M2VmNS1jODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt34+MEfQOmHTg5Ujs+O/y8hCYRdnPUjmO7fj9N+L0GTqLVWTeRxJ0RLG2h5k yK3KEWuEaIbzr2w8NtQ6aN84KBL7yJ+3dzTEew3H6igq4IEf2vw4TJWJXPUkNqar fMzyKGOzybbfPAF6bb9tTOvg6UFbMpW35XtSYzHypgUL6zBUTFfuR++cp2VDtzus tDj81B4wPLUJMrSt0K/boviod0JfqSW/EBJQLcMywsrPHZxdkyCtiuI4jKZ8loXI WFeUjI6uCp+VHXIzSsyWaNty/vCQPuC8SLxfXUJbGHxtc6ZuXbbIXwr2IxgJnWfb W4WRqV4z8MMJrlIlZtH0eUNliQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO6ylak oxdAODvic5D+uGhBpv2MMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPfrRwuZl7W5Mrp370A4cxr0tp7UIRTahqvuf0rZHtbwxxVY5fSl6M HY3nyBll9duwKnrIOzKyBwcALxU/zdjD8ANjBKchXPK7eCiJcNY4pcQNdgWCj6U7 1ss/5wzqIsbLai//OAvAiD4qptdMY1X1UOthFO3/qotlTtyocIt8WQG5+4cZ6vvF vsONPMp8sVeGtZeY5SMt96BqN9ri4FXrqQrsfCzhHlrD3niyUl0s1+h9q5nSLblk EaHq/M4p2uS6RgiBB4QreopMUbDyYn8IUxsAfV/bKtuq3ftavr8f3rcUGAx3KAKr e1olWnUAHIC15fpP6YRlWC+KR+Lt/tmZ -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:37 2025 by rpki-client