$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json) Hash identifier: UtR2x8dQej+MoaHmInt+qclTK/Xal5jGZfSlDzrUWE0= Subject key identifier: FB:99:14:EE:65:94:77:6F:79:50:F9:28:1A:94:4C:4D:CF:E4:AF:BA Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft Manifest number: 0233 Signing time: Sun 19 Oct 2025 04:08:34 +0000 Manifest this update: Sun 19 Oct 2025 04:08:33 +0000 Manifest next update: Sun 26 Oct 2025 04:08:33 +0000 Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: mrC4yGccHRosewrEefZSMHeB36sBqgVsPe4jOR1ANbg=) 2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: ih5APdD+Nurby0NtdsRTrQ51xACa7dPtth9SlQyC+ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Validity Not Before: Oct 19 04:08:33 2025 GMT Not After : Oct 26 04:08:33 2025 GMT Subject: CN=68f46442-d52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:1d:71:4c:1c:2b:db:01:dc:97:32:9f:a1: 92:30:ea:1d:b5:f6:3a:b4:f3:a0:db:7d:2f:28:29: c3:a1:d0:68:bb:ae:06:0c:51:5d:b9:4d:d6:33:5e: 17:45:24:29:db:6c:49:8c:01:fb:0e:6c:5c:d4:93: b6:6d:ff:bd:a1:6e:42:5a:03:6b:7a:f5:74:20:f1: 16:23:0a:fe:09:5b:3f:6c:d4:ea:a8:6f:39:dd:8e: 1a:5d:a5:89:19:54:c7:4f:0f:79:9a:ae:f3:06:8e: b4:4d:7c:ff:bf:8e:93:6d:3c:78:a1:b7:ea:97:97: c9:f9:7d:91:12:10:64:bf:83:e2:a8:09:65:d0:5a: fa:0c:f9:4c:f2:46:fa:c6:21:a7:bd:ac:90:31:fe: 73:bc:ff:d9:1a:ad:99:7e:cc:80:e3:38:92:95:a3: 91:6c:cd:03:65:5f:a5:75:17:d0:e8:50:60:1e:84: ea:41:a1:89:cd:06:78:8c:b4:cf:3c:0a:4f:50:09: b6:ff:28:db:09:e7:8d:54:fd:60:4a:9a:16:59:64: f8:76:15:37:5e:b6:5f:b3:2b:31:26:9c:1f:17:4a: f5:42:9c:19:19:c6:76:eb:fc:48:4c:30:39:ba:8a: 7d:0c:5e:3f:d0:23:6c:9f:97:b3:6e:58:32:73:9d: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:99:14:EE:65:94:77:6F:79:50:F9:28:1A:94:4C:4D:CF:E4:AF:BA X509v3 Authority Key Identifier: keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:20:50:0f:31:f1:3f:3f:65:02:6a:3e:97:fd:ef:1f:d3:d5: b0:0f:be:18:a0:38:cf:c1:da:a0:6f:68:bb:a4:71:57:dd:25: e8:b7:50:2b:dc:60:39:39:bb:03:9f:d1:c6:b5:01:55:0b:16: 02:3c:17:a3:35:f3:89:20:ae:0d:b2:fd:97:3c:18:50:bd:6e: db:25:de:d4:1f:3d:0e:04:bc:df:23:1e:71:d6:41:3e:a4:5b: e5:0f:42:24:9d:29:ab:49:f4:23:af:ec:4b:35:5a:02:a8:f4: d5:f1:5d:3e:e0:cc:3d:7b:30:07:6a:39:af:89:c4:3d:42:16: 15:49:c7:c5:cd:4e:db:31:78:c5:a0:22:a3:41:48:8a:23:e0: 0f:25:17:01:70:4a:47:cf:36:dc:6a:83:95:86:f9:e0:0f:76: 11:4b:fb:67:57:27:b8:51:ca:e1:58:b4:a4:9c:de:ab:71:66: 9c:3d:9b:c8:00:3c:04:ae:77:74:c9:d3:62:c5:e0:24:97:d3: 46:24:35:5e:0d:95:48:20:fc:f1:d9:3f:c5:5b:8b:d2:a8:c0: 96:1c:3e:d8:74:1b:5e:fd:2a:7e:5b:c3:e2:1a:9b:a2:1f:f7: a4:02:c7:0a:09:10:63:ea:39:0a:e3:b5:30:2d:b1:93:6c:d2: bb:0a:ea:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4 RTFDNDM3QjYwHhcNMjUxMDE5MDQwODMzWhcNMjUxMDI2MDQwODMzWjAYMRYwFAYD VQQDEw02OGY0NjQ0Mi1kNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonAdcUwcK9sB3Jcyn6GSMOodtfY6tPOg230vKCnDodBou64GDFFduU3WM14X RSQp22xJjAH7Dmxc1JO2bf+9oW5CWgNrevV0IPEWIwr+CVs/bNTqqG853Y4aXaWJ GVTHTw95mq7zBo60TXz/v46TbTx4obfql5fJ+X2REhBkv4PiqAll0Fr6DPlM8kb6 xiGnvayQMf5zvP/ZGq2ZfsyA4ziSlaORbM0DZV+ldRfQ6FBgHoTqQaGJzQZ4jLTP PApPUAm2/yjbCeeNVP1gSpoWWWT4dhU3XrZfsysxJpwfF0r1QpwZGcZ26/xITDA5 uop9DF4/0CNsn5ezblgyc53Z8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuZFO5l lHdveVD5KBqUTE3P5K+6MB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNDMC9DRkE3OUYxQTUwM0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4 RFZkb05UQTZMcGVPSEVON1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnIFAPMfE/P2UCaj6X/e8f09WwD74YoDjPwdqgb2i7pHFX3SXot1Ar 3GA5ObsDn9HGtQFVCxYCPBejNfOJIK4Nsv2XPBhQvW7bJd7UHz0OBLzfIx5x1kE+ pFvlD0IknSmrSfQjr+xLNVoCqPTV8V0+4Mw9ezAHajmvicQ9QhYVScfFzU7bMXjF oCKjQUiKI+APJRcBcEpHzzbcaoOVhvngD3YRS/tnVye4UcrhWLSknN6rcWacPZvI ADwErnd0ydNixeAkl9NGJDVeDZVIIPzx2T/FW4vSqMCWHD7YdBte/Sp+W8PiGpui H/ekAscKCRBj6jkK47UwLbGTbNK7Cupo -----END CERTIFICATE-----Generated at Mon Oct 20 19:57:47 2025 by rpki-client