$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: o/ZZG+TAGwUHAqOKLK0DsQobmIEwagVafBpk5TWbFgY= Subject key identifier: 4C:B7:96:FD:B8:A3:0D:FE:DA:78:CD:16:88:DD:44:46:06:FE:52:3E Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 34CF Signing time: Mon 20 Oct 2025 15:24:55 +0000 Manifest this update: Mon 20 Oct 2025 15:24:54 +0000 Manifest next update: Mon 27 Oct 2025 15:24:54 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: 9V0UfrTIz3Tktnp7ii8+vbgEEwj2wwTpvuuu6veq+aI=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Oct 20 15:24:54 2025 GMT Not After : Oct 27 15:24:54 2025 GMT Subject: CN=68f65447-b06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:40:e4:15:11:df:58:0f:3f:3d:1f:d5:f1: e3:87:0e:6b:1d:2a:ef:9c:1d:d0:b2:ee:ac:73:01: 11:a2:e0:6b:8a:eb:7d:76:17:0d:fa:15:7d:7e:c9: 3b:ce:f3:2b:ba:dd:ce:4f:b9:78:6a:96:e9:3a:e6: 2d:6d:19:6f:dc:7e:5e:25:23:cb:87:41:4e:ef:cf: b8:1c:8e:dc:43:de:04:a2:c2:c3:c8:42:9f:78:8f: 5c:96:72:18:e1:d9:ef:dc:99:d5:86:11:94:af:bb: 63:a2:47:88:b6:17:62:77:74:a4:d2:7c:ac:45:a6: ca:e0:05:17:46:94:ab:f9:0d:ce:c2:68:ea:f9:61: 42:e8:ed:8f:15:c7:82:42:d3:9f:04:3f:12:eb:02: 18:b6:e1:7f:c1:5b:48:e3:04:bb:11:41:74:30:9a: aa:81:a1:6f:9c:c1:46:f8:25:72:df:dd:bd:88:28: f9:c4:76:e8:f6:14:86:4c:fe:28:71:90:c9:70:8f: c8:b3:f1:36:23:04:86:3a:91:4d:7e:14:63:4e:5d: f2:b8:c5:d1:d3:a2:e7:45:8f:23:8a:a7:8e:45:b5: 94:93:d8:8b:5d:a4:f5:64:e3:1c:f6:a6:cd:56:49: f9:d9:9a:86:86:ef:7c:f4:8a:3c:ba:e0:dd:5d:13: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B7:96:FD:B8:A3:0D:FE:DA:78:CD:16:88:DD:44:46:06:FE:52:3E X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:85:94:12:10:6e:f4:78:cf:64:5f:ad:09:15:fd:e7:5d:65: dd:bb:f9:f7:fe:1a:4a:7a:25:96:1a:f9:f0:b8:bb:dc:09:b2: dd:2d:56:cf:c4:71:f1:1b:b9:06:8b:3e:46:84:28:30:39:10: 28:14:4c:46:a5:84:83:4e:ff:75:0d:15:c6:51:c5:14:6b:b9: d2:20:c8:bd:ec:61:c1:7a:81:ab:d8:a1:ca:64:19:f9:e5:59: 98:83:91:3e:ee:8e:b6:a3:c1:21:ae:47:00:08:55:81:2f:b8: 3c:3a:e7:cb:89:ea:2c:e3:ad:8a:4c:2f:27:04:12:c6:bd:b9: dd:59:78:01:78:f2:b4:c9:cb:cf:b4:51:61:e2:13:34:b8:60: 24:e2:02:51:06:6c:52:37:3e:40:90:cc:a3:80:94:e5:ee:6b: e7:38:47:08:2a:cb:ab:d6:0a:f3:02:ff:47:05:a9:d9:ca:69: af:d7:a6:16:a3:68:7b:c7:7b:8f:17:82:6b:21:1a:79:a8:b3: 98:bc:f9:32:f4:ef:9e:3e:22:9a:3f:5b:cb:1e:f1:f5:2a:1b: c0:7a:17:3c:21:38:1c:f3:c3:30:54:0a:d1:c7:92:26:82:bf: d2:42:de:17:b9:05:93:a7:91:c0:0b:8b:f5:82:5d:b0:93:b5: d1:2e:43:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjUxMDIwMTUyNDU0WhcNMjUxMDI3MTUyNDU0WjAYMRYwFAYD VQQDEw02OGY2NTQ0Ny1iMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W5A5BUR31gPPz0f1fHjhw5rHSrvnB3Qsu6scwERouBriut9dhcN+hV9fsk7 zvMrut3OT7l4apbpOuYtbRlv3H5eJSPLh0FO78+4HI7cQ94EosLDyEKfeI9clnIY 4dnv3JnVhhGUr7tjokeIthdid3Sk0nysRabK4AUXRpSr+Q3Owmjq+WFC6O2PFceC QtOfBD8S6wIYtuF/wVtI4wS7EUF0MJqqgaFvnMFG+CVy3929iCj5xHbo9hSGTP4o cZDJcI/Is/E2IwSGOpFNfhRjTl3yuMXR06LnRY8jiqeORbWUk9iLXaT1ZOMc9qbN Vkn52ZqGhu989Io8uuDdXROzXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy3lv24 ow3+2njNFojdREYG/lI+MB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYhZQSEG70eM9kX60JFf3nXWXdu/n3/hpKeiWWGvnwuLvcCbLdLVbP xHHxG7kGiz5GhCgwORAoFExGpYSDTv91DRXGUcUUa7nSIMi97GHBeoGr2KHKZBn5 5VmYg5E+7o62o8EhrkcACFWBL7g8OufLieos462KTC8nBBLGvbndWXgBePK0ycvP tFFh4hM0uGAk4gJRBmxSNz5AkMyjgJTl7mvnOEcIKsur1grzAv9HBanZymmv16YW o2h7x3uPF4JrIRp5qLOYvPky9O+ePiKaP1vLHvH1KhvAehc8ITgc88MwVArRx5Im gr/SQt4XuQWTp5HAC4v1gl2wk7XRLkOD -----END CERTIFICATE-----Generated at Tue Oct 21 02:36:59 2025 by rpki-client