$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: NOXxvfRmYNO0/EOVm2aI4wl6ac2sAvtFWjt5p9ejn+Q= Subject key identifier: 6D:C4:C3:78:D8:BB:62:30:5F:CD:11:93:27:6F:45:C1:72:89:B5:0B Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 1485 Signing time: Sat 18 Oct 2025 17:21:38 +0000 Manifest this update: Sat 18 Oct 2025 17:21:37 +0000 Manifest next update: Sat 25 Oct 2025 17:21:37 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: SwMPS6C9XLFx2iibbEJynkXxSwIXZdIOao7aQAx0Z80=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5264 (0x1490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Oct 18 17:21:37 2025 GMT Not After : Oct 25 17:21:37 2025 GMT Subject: CN=68f3cca1-72b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:5c:34:52:9f:91:9f:db:5b:5a:19:33:2a: e2:bf:5b:7c:c4:9c:ed:8a:6a:b8:6a:8b:be:0b:6e: 25:b3:62:b1:24:06:f7:49:c7:f6:1a:6e:c5:fa:15: 26:21:d0:74:cd:77:f3:d8:19:ed:26:95:8c:2c:a7: 22:24:e2:25:f0:f8:30:ff:18:68:7f:c4:49:70:21: 55:43:df:a1:2a:8e:35:62:28:4e:cb:7b:78:f3:5d: 8b:5c:bc:e4:e2:34:61:46:c6:52:0a:f1:38:fc:b1: 93:4e:2f:06:e0:cf:3c:2e:ff:b8:90:55:7a:1a:25: df:f8:e8:d4:df:10:4c:8e:2d:3b:e9:94:1d:66:42: ec:73:e6:0e:46:7d:84:a8:69:d4:20:01:78:28:03: ef:f7:79:08:e7:f2:85:b0:62:13:73:0c:13:37:72: b3:07:85:19:1b:07:b6:80:e6:f8:60:cc:e3:ef:36: 05:67:3b:68:35:26:b1:aa:ba:a6:b5:da:74:d3:e4: ac:32:97:89:5a:f5:be:2f:71:fe:11:70:77:71:e0: cb:32:d5:36:9c:a2:ef:10:3e:52:5d:cd:a0:06:0b: 0f:ef:8d:0a:a4:fc:3f:c3:a3:f2:bf:06:c2:e9:85: fc:ea:64:57:fc:dd:4c:51:9b:32:5a:4a:86:b2:65: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C4:C3:78:D8:BB:62:30:5F:CD:11:93:27:6F:45:C1:72:89:B5:0B X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a9:a4:c7:f0:20:8b:20:5d:55:2c:33:ef:ef:30:cc:7f:83: 15:fd:87:bc:45:1c:aa:aa:29:83:f5:f1:fb:a9:38:32:20:f1: 1b:e4:97:2b:bd:d3:06:38:f8:9b:91:bc:4d:7d:42:8c:cb:a5: 8a:3e:9c:b5:76:b8:23:7d:f7:e2:1f:6e:2c:65:4b:00:8d:41: 9b:b5:7f:b5:02:ca:0c:45:cb:aa:4b:ed:6d:98:5b:df:ef:02: 63:40:2a:aa:c6:8b:39:1c:87:7e:1f:60:d2:f2:c0:0f:54:f8: c4:39:e4:9c:36:aa:0f:99:8a:9f:50:6f:21:ed:68:43:26:ac: a2:a1:05:c3:95:87:44:6a:59:2a:96:51:3e:e2:91:4d:fe:e9: 11:4d:ae:27:b6:25:80:37:c9:ae:8d:c0:8d:16:13:d7:eb:8d: 85:58:83:6e:39:6d:bf:5a:71:f1:f1:1b:d1:b7:83:06:0d:4a: 3e:4f:bd:34:2f:76:45:9f:a0:63:b6:e9:fc:96:60:0c:fb:cf: a6:58:e8:86:6c:87:65:eb:c4:70:19:3f:41:ff:69:5b:35:41: 56:8f:e7:7f:75:10:dd:4b:cb:54:f9:ed:69:ea:cb:62:5a:24: 55:81:9b:29:42:be:05:98:e2:c8:60:c9:bf:77:55:cf:96:29: 7d:b8:05:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUxMDE4MTcyMTM3WhcNMjUxMDI1MTcyMTM3WjAYMRYwFAYD VQQDEw02OGYzY2NhMS03MmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsdcNFKfkZ/bW1oZMyriv1t8xJztimq4aou+C24ls2KxJAb3Scf2Gm7F+hUm IdB0zXfz2BntJpWMLKciJOIl8Pgw/xhof8RJcCFVQ9+hKo41YihOy3t4812LXLzk 4jRhRsZSCvE4/LGTTi8G4M88Lv+4kFV6GiXf+OjU3xBMji076ZQdZkLsc+YORn2E qGnUIAF4KAPv93kI5/KFsGITcwwTN3KzB4UZGwe2gOb4YMzj7zYFZztoNSaxqrqm tdp00+SsMpeJWvW+L3H+EXB3ceDLMtU2nKLvED5SXc2gBgsP740KpPw/w6PyvwbC 6YX86mRX/N1MUZsyWkqGsmV0iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3Ew3jY u2IwX80RkydvRcFyibULMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzqaTH8CCLIF1VLDPv7zDMf4MV/Ye8RRyqqimD9fH7qTgyIPEb5Jcr vdMGOPibkbxNfUKMy6WKPpy1drgjfffiH24sZUsAjUGbtX+1AsoMRcuqS+1tmFvf 7wJjQCqqxos5HId+H2DS8sAPVPjEOeScNqoPmYqfUG8h7WhDJqyioQXDlYdEalkq llE+4pFN/ukRTa4ntiWAN8mujcCNFhPX642FWINuOW2/WnHx8RvRt4MGDUo+T700 L3ZFn6Bjtun8lmAM+8+mWOiGbIdl68RwGT9B/2lbNUFWj+d/dRDdS8tU+e1p6sti WiRVgZspQr4FmOLIYMm/d1XPlil9uAX6 -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:26 2025 by rpki-client