$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: pH5HrLCHdKqYGbB/ruOljoet7pBrSptBJMETnKBmwh0= Subject key identifier: 12:46:86:A3:29:46:9A:2F:7C:EA:FE:69:D9:C1:56:9E:17:8C:0B:16 Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0A04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 09FD Signing time: Sat 18 Oct 2025 20:53:06 +0000 Manifest this update: Sat 18 Oct 2025 20:53:06 +0000 Manifest next update: Sat 25 Oct 2025 20:53:06 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: u+pArqgY68DPubs/TntSZxvofxlbP4egLeJY6fMSpdM=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ZlFR2HTwg3fDW4lClQanT4TaI4rdoCBr8+QBrXHDB9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Oct 18 20:53:06 2025 GMT Not After : Oct 25 20:53:06 2025 GMT Subject: CN=68f3fe32-6fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:8e:d0:72:1f:a1:38:a1:da:5f:73:f1:d0: cd:08:7f:27:c3:3c:5e:b2:ef:41:2f:62:77:78:07: 0a:92:f2:1a:84:45:8e:6b:bd:03:71:99:74:ca:26: 40:12:7f:b2:d6:e9:dd:93:f8:fd:40:c8:99:ae:f9: 68:56:ca:46:9a:fa:c7:d2:bf:bb:22:89:16:52:7b: 5b:fe:80:6d:48:a8:8e:2b:6c:70:cc:61:f4:64:f5: 2c:6d:e0:7e:d7:ed:bb:bf:fb:43:9a:8b:97:b2:80: 35:a8:cb:32:9a:45:59:1f:a3:66:23:75:26:35:9b: 56:71:51:f0:51:8a:a1:1a:30:40:07:3b:98:3e:9e: 54:5a:11:03:66:7f:96:84:37:20:ce:5a:90:2c:ab: 5a:26:aa:06:7e:8d:ce:04:1f:94:ab:e7:0c:83:7d: c6:6d:10:05:a3:35:14:6e:e5:e6:ef:87:02:fe:02: 64:a7:75:d9:35:cb:76:42:7a:05:1b:13:d4:b2:a9: 5e:91:d1:dd:1a:19:64:b9:0f:2c:f3:78:8d:01:fa: d2:dd:06:2a:43:99:35:23:bc:10:a4:85:b8:34:fb: 4c:6d:d3:97:35:00:36:5c:03:79:ee:5e:1f:70:d7: a7:60:cf:ee:16:ef:02:d8:0c:dc:38:10:b9:08:e2: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:86:A3:29:46:9A:2F:7C:EA:FE:69:D9:C1:56:9E:17:8C:0B:16 X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4f:cc:14:bc:fe:43:fd:54:b3:29:ba:54:eb:88:cf:f2:91: e1:b7:00:97:40:12:84:11:13:5e:55:16:28:14:85:c8:30:73: bb:c8:1e:ff:de:10:2b:bc:37:0d:c8:1d:d4:72:82:88:1e:f3: ba:44:2d:35:99:d5:ab:c5:a6:0f:f4:4c:5f:f9:e1:e9:7e:e2: 80:b7:7c:59:16:7f:94:a3:10:62:e9:6e:d1:17:e4:53:8b:a2: 98:34:46:fd:fb:3f:36:9f:a7:52:6a:bf:a6:72:16:7b:35:b9: 6a:a5:e8:c8:e8:f3:7d:dc:cc:0e:9d:9d:32:b3:30:f2:26:bb: 6f:e9:0c:a4:2d:68:52:b5:ee:6c:7b:2e:27:fc:6b:57:38:bc: 50:f2:2c:0e:4f:ff:97:bb:05:80:82:83:a7:bb:82:7f:7f:50: a9:42:d7:d3:b4:3e:dc:4c:0d:3f:9a:bc:56:d8:59:fd:ff:09: 81:fc:dd:3f:ae:14:d8:77:ed:66:b4:94:77:ab:72:73:b7:f6: 46:13:03:dc:95:62:d5:44:2c:1f:db:60:69:b5:59:c0:26:24: 9a:84:2a:24:6f:99:5c:86:cb:84:48:dd:32:f2:f8:5c:67:31: d2:16:60:08:91:41:8a:49:4f:8b:63:96:d4:c6:ad:ba:7a:c7: 07:8b:d5:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjUxMDE4MjA1MzA2WhcNMjUxMDI1MjA1MzA2WjAYMRYwFAYD VQQDEw02OGYzZmUzMi02ZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1qO0HIfoTih2l9z8dDNCH8nwzxesu9BL2J3eAcKkvIahEWOa70DcZl0yiZA En+y1undk/j9QMiZrvloVspGmvrH0r+7IokWUntb/oBtSKiOK2xwzGH0ZPUsbeB+ 1+27v/tDmouXsoA1qMsymkVZH6NmI3UmNZtWcVHwUYqhGjBABzuYPp5UWhEDZn+W hDcgzlqQLKtaJqoGfo3OBB+Uq+cMg33GbRAFozUUbuXm74cC/gJkp3XZNct2QnoF GxPUsqlekdHdGhlkuQ8s83iNAfrS3QYqQ5k1I7wQpIW4NPtMbdOXNQA2XAN57l4f cNenYM/uFu8C2AzcOBC5COLBMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJGhqMp RpovfOr+adnBVp4XjAsWMB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOT8wUvP5D/VSzKbpU64jP8pHhtwCXQBKEERNeVRYoFIXIMHO7yB7/ 3hArvDcNyB3UcoKIHvO6RC01mdWrxaYP9Exf+eHpfuKAt3xZFn+UoxBi6W7RF+RT i6KYNEb9+z82n6dSar+mchZ7NblqpejI6PN93MwOnZ0yszDyJrtv6QykLWhSte5s ey4n/GtXOLxQ8iwOT/+XuwWAgoOnu4J/f1CpQtfTtD7cTA0/mrxW2Fn9/wmB/N0/ rhTYd+1mtJR3q3Jzt/ZGEwPclWLVRCwf22BptVnAJiSahCokb5lchsuESN0y8vhc ZzHSFmAIkUGKSU+LY5bUxq26escHi9Vb -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:10 2025 by rpki-client