$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: YAppMGtyONG0bH/Ll5T5Qkoxje6JGIelhOdoc3umMT4= Subject key identifier: 96:5F:5A:29:04:4B:A6:69:3F:14:A2:D9:08:C9:FA:35:31:75:8B:8F Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 09D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 09CC Signing time: Sat 18 Oct 2025 20:23:42 +0000 Manifest this update: Sat 18 Oct 2025 20:23:41 +0000 Manifest next update: Sat 25 Oct 2025 20:23:41 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: pAxvLC7AqL4Eew/zbg4+E61W7oEX7dxuIGBeDVwCOBM=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2517 (0x9d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Oct 18 20:23:41 2025 GMT Not After : Oct 25 20:23:41 2025 GMT Subject: CN=68f3f74d-8633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:64:db:8c:41:7e:86:81:c5:a8:d1:8b:71:6c: b3:25:53:d2:b8:a8:11:09:c2:b2:b0:eb:bf:f4:85: b0:61:7f:43:58:2e:f4:59:c8:50:f4:9c:2f:52:2b: 7c:21:4e:04:7a:37:72:4e:1c:d4:5d:94:30:95:00: c0:98:29:1d:24:2a:43:f1:88:ea:ab:e4:7d:65:5a: 91:24:fd:8e:37:85:4f:c9:b5:91:5b:c2:e7:6d:fc: 3c:29:1e:67:a7:b8:41:6c:c2:3a:68:ce:9d:34:88: 81:32:d1:24:90:2d:50:c7:5c:9c:f1:a9:ed:2b:07: 36:5c:38:9c:18:9f:ae:19:8b:2d:1f:20:de:f2:3e: 19:4a:af:e3:05:21:ab:1d:55:71:cd:7b:1a:ba:18: 3d:17:58:5f:51:1c:2a:e3:25:3f:d3:ac:03:e1:70: 97:2f:dd:89:7d:d4:9c:55:0c:78:66:08:28:fe:f6: d2:9d:27:d6:0b:e5:cc:77:77:bc:4b:72:ec:b8:fc: 7a:66:34:f1:54:2d:f8:61:84:c4:a7:11:06:98:ef: e8:bc:e8:a5:b2:27:58:a4:4e:57:ed:7b:8a:16:60: fa:0c:ac:9a:d6:b2:00:3b:ba:89:4e:54:25:57:40: 60:18:09:ce:ef:6e:50:99:7f:4b:b1:74:0e:e7:49: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5F:5A:29:04:4B:A6:69:3F:14:A2:D9:08:C9:FA:35:31:75:8B:8F X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4e:b6:eb:a8:12:19:81:b5:96:bb:97:8d:78:18:c0:19:96: 67:6d:f1:a4:d7:ab:d1:6a:2d:74:5e:42:92:aa:02:98:15:66: d4:5e:73:c8:3a:b2:b8:b9:b9:1e:37:e2:51:c5:67:5d:c5:4f: 15:22:6d:3a:a8:96:3e:68:20:ed:17:84:2c:9f:09:20:b9:30: 6d:83:6c:a1:85:a1:a0:a1:e2:2a:13:48:66:c2:75:eb:4b:2c: 95:91:df:1f:85:14:0a:84:c6:bd:e1:80:c9:38:15:35:d6:6b: 44:7a:c9:e8:2d:64:9c:a6:ce:c5:b7:e2:a6:0f:3c:23:71:00: ce:5c:6a:2b:23:81:3b:32:14:0e:b4:06:24:75:bd:fd:a0:f0: 26:73:77:b0:78:60:18:18:be:2b:2f:b1:b8:a9:cd:71:9d:2e: 40:70:5c:5d:17:17:59:1b:55:62:f9:dc:e9:e7:26:e8:1e:ff: bb:03:07:af:c3:72:83:92:5d:e9:69:fd:a8:85:83:73:cf:45: 82:3d:3b:1f:c2:c4:98:77:e9:3e:2f:99:13:9f:b8:ff:b1:7b: 8a:3c:04:c5:bd:9b:32:07:f7:8b:5c:f2:7e:da:c5:9c:94:14: e4:15:c7:84:19:3f:07:a3:9a:d1:3f:0e:41:33:e7:d4:da:63: 09:03:82:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUxMDE4MjAyMzQxWhcNMjUxMDI1MjAyMzQxWjAYMRYwFAYD VQQDEw02OGYzZjc0ZC04NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+mTbjEF+hoHFqNGLcWyzJVPSuKgRCcKysOu/9IWwYX9DWC70WchQ9JwvUit8 IU4EejdyThzUXZQwlQDAmCkdJCpD8Yjqq+R9ZVqRJP2ON4VPybWRW8Lnbfw8KR5n p7hBbMI6aM6dNIiBMtEkkC1Qx1yc8antKwc2XDicGJ+uGYstHyDe8j4ZSq/jBSGr HVVxzXsauhg9F1hfURwq4yU/06wD4XCXL92JfdScVQx4Zggo/vbSnSfWC+XMd3e8 S3LsuPx6ZjTxVC34YYTEpxEGmO/ovOilsidYpE5X7XuKFmD6DKya1rIAO7qJTlQl V0BgGAnO725QmX9LsXQO50nocwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZfWikE S6ZpPxSi2QjJ+jUxdYuPMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYTrbrqBIZgbWWu5eNeBjAGZZnbfGk16vRai10XkKSqgKYFWbUXnPI OrK4ubkeN+JRxWddxU8VIm06qJY+aCDtF4QsnwkguTBtg2yhhaGgoeIqE0hmwnXr SyyVkd8fhRQKhMa94YDJOBU11mtEesnoLWScps7Ft+KmDzwjcQDOXGorI4E7MhQO tAYkdb39oPAmc3eweGAYGL4rL7G4qc1xnS5AcFxdFxdZG1Vi+dzp5yboHv+7Awev w3KDkl3paf2ohYNzz0WCPTsfwsSYd+k+L5kTn7j/sXuKPATFvZsyB/eLXPJ+2sWc lBTkFceEGT8Ho5rRPw5BM+fU2mMJA4K2 -----END CERTIFICATE-----Generated at Mon Oct 20 15:09:33 2025 by rpki-client