$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: nFOYmcxP/7R+7+bDxY7r8+8Mb5BS1/6iCVdL2K91Wpk= Subject key identifier: 46:10:6C:72:2F:EE:12:E2:5F:D3:68:5A:41:6C:EB:B5:29:68:82:AD Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 07AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 07A9 Signing time: Sat 18 Oct 2025 22:42:27 +0000 Manifest this update: Sat 18 Oct 2025 22:42:26 +0000 Manifest next update: Sat 25 Oct 2025 22:42:26 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: w49FqS6RCVnVZKTQObJKNOO6prRGJBHMrRA7MffONt0=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: Oct 18 22:42:26 2025 GMT Not After : Oct 25 22:42:26 2025 GMT Subject: CN=68f417d2-9c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:d7:94:f8:94:a4:86:b7:ed:c6:f1:3e:ea: 3c:9e:e1:23:e5:2d:03:d1:7a:2a:8a:53:0a:ce:58: fe:82:f3:dc:96:d3:2b:e8:b8:72:86:cb:ed:20:5b: 99:be:9e:40:84:17:56:cd:21:f1:be:3f:11:06:2e: 69:25:93:a3:c9:73:0e:27:aa:81:92:a8:5a:3e:e0: 77:9a:e8:64:ae:bb:04:d4:ad:d0:58:91:47:3b:98: d3:ea:8e:32:b6:ca:94:80:ef:dd:fb:cf:aa:6f:0a: 05:2b:e9:7a:7c:b1:4c:c1:7f:4f:be:5d:c4:20:62: 42:85:15:73:4f:c7:0b:11:7d:95:ee:6f:09:ee:2e: 02:96:2d:ee:1d:f8:79:0d:b1:b8:4a:76:64:32:2c: fe:47:75:c9:51:62:9a:1d:d1:34:4a:fb:b5:ce:03: 0a:4e:ca:4f:b0:8c:54:f2:31:89:c1:29:92:c6:10: dc:2a:57:af:2b:5d:cc:89:4c:39:5d:0c:1a:67:62: 2a:bf:a4:30:ea:22:22:51:44:12:17:60:b1:77:3c: 3b:f4:69:bd:8f:69:7d:74:fd:4c:30:e1:71:14:42: c9:95:7d:ed:91:6d:24:34:62:e3:59:6c:10:4e:cb: f9:3c:a7:08:8a:d4:ae:ff:28:62:e8:6a:cf:3d:22: a2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:10:6C:72:2F:EE:12:E2:5F:D3:68:5A:41:6C:EB:B5:29:68:82:AD X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:49:59:0e:8b:b9:cd:9f:a0:34:d6:67:4c:76:4b:6f:c9:d5: d5:5d:2a:11:36:bc:c2:15:8f:91:5c:67:06:35:3d:c7:52:ae: 21:9d:56:81:6f:60:98:c2:57:b8:61:36:c0:1e:ea:7c:27:85: 2d:ea:33:48:b3:e5:03:20:32:89:97:6f:58:ce:c7:64:80:6e: 3e:db:cc:81:14:ab:d4:6f:fd:bb:a1:ae:9d:22:89:e5:90:66: c7:aa:b4:2e:5e:94:db:0f:a0:f8:9b:06:a5:35:44:cf:d2:5b: d8:a8:c5:bc:de:7c:18:81:ae:a7:50:31:6a:c1:76:5e:e6:d3: e2:1f:b6:c0:a0:83:75:34:1a:b2:88:b0:c5:8a:cd:7c:0f:fa: 30:95:b7:e8:da:d6:50:bd:1b:60:13:19:73:74:ee:a4:00:37: c6:e3:eb:be:b6:ee:71:72:31:75:39:6c:7a:eb:7c:25:8e:0b: 47:19:ba:96:4b:5c:dd:68:7c:cf:24:6c:39:3d:70:92:9e:0c: 73:55:06:b1:10:0b:6d:48:8e:c4:b1:0f:53:40:b4:82:20:e4: a6:5e:fd:e9:09:be:09:dc:48:30:53:83:d2:c1:b2:64:0d:72: 0a:88:d4:92:23:3b:a4:f8:7f:ad:f8:0c:79:2c:ee:26:dc:29: e3:db:9b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUxMDE4MjI0MjI2WhcNMjUxMDI1MjI0MjI2WjAYMRYwFAYD VQQDEw02OGY0MTdkMi05YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/LXlPiUpIa37cbxPuo8nuEj5S0D0XoqilMKzlj+gvPcltMr6LhyhsvtIFuZ vp5AhBdWzSHxvj8RBi5pJZOjyXMOJ6qBkqhaPuB3muhkrrsE1K3QWJFHO5jT6o4y tsqUgO/d+8+qbwoFK+l6fLFMwX9Pvl3EIGJChRVzT8cLEX2V7m8J7i4Cli3uHfh5 DbG4SnZkMiz+R3XJUWKaHdE0Svu1zgMKTspPsIxU8jGJwSmSxhDcKlevK13MiUw5 XQwaZ2Iqv6Qw6iIiUUQSF2Cxdzw79Gm9j2l9dP1MMOFxFELJlX3tkW0kNGLjWWwQ Tsv5PKcIitSu/yhi6GrPPSKiawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYQbHIv 7hLiX9NoWkFs67UpaIKtMB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHSVkOi7nNn6A01mdMdktvydXVXSoRNrzCFY+RXGcGNT3HUq4hnVaB b2CYwle4YTbAHup8J4Ut6jNIs+UDIDKJl29YzsdkgG4+28yBFKvUb/27oa6dIonl kGbHqrQuXpTbD6D4mwalNUTP0lvYqMW83nwYga6nUDFqwXZe5tPiH7bAoIN1NBqy iLDFis18D/owlbfo2tZQvRtgExlzdO6kADfG4+u+tu5xcjF1OWx663wljgtHGbqW S1zdaHzPJGw5PXCSngxzVQaxEAttSI7EsQ9TQLSCIOSmXv3pCb4J3EgwU4PSwbJk DXIKiNSSIzuk+H+t+Ax5LO4m3Cnj25uk -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:21 2025 by rpki-client