$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: D2444EIQoCfzNcpuNqaJlH+LqKXyd5gn4WrguKRN4UI= Subject key identifier: EA:2F:3A:BB:AE:66:1D:05:B5:9B:E7:F6:00:14:BA:3F:5A:14:61:1C Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: DD Signing time: Sun 19 Oct 2025 08:34:21 +0000 Manifest this update: Sun 19 Oct 2025 08:34:20 +0000 Manifest next update: Sun 26 Oct 2025 08:34:20 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: aDSe3OUB4DZe8mhmGXAOZvmB/kMPuadtBkDtmNlpgNA=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: BteKkWaHztNY5RPMXMdQaz6E2A7IVRfTkJnalZdJs5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Oct 19 08:34:20 2025 GMT Not After : Oct 26 08:34:20 2025 GMT Subject: CN=68f4a28c-be62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:1a:d2:e2:33:2d:ca:02:a9:c2:55:9e:68: 9f:16:6e:7a:73:28:48:d0:4b:d6:06:2b:7f:a8:a3: 5c:ce:2d:33:de:21:87:44:5e:ce:b6:d3:30:4c:4c: e4:81:eb:6e:15:4a:57:5e:b2:18:82:b5:69:e6:e2: 66:79:18:88:f6:bd:ca:14:a7:9a:57:b5:7c:bb:c1: 44:3b:75:48:37:23:ef:f2:42:85:72:c1:34:da:b9: dc:bd:8c:25:97:7e:ee:7d:f6:2b:94:d1:04:e3:4a: 7c:c7:e4:6e:73:01:02:64:30:34:ca:c7:98:db:20: 80:1d:a6:90:b2:78:b1:c3:4c:e6:94:11:4f:e3:ee: 0c:1f:d1:6c:5e:12:6c:e6:92:cb:a3:ff:ea:19:9c: 8f:8f:13:0a:e0:bf:32:09:7f:ce:6e:b8:f8:de:53: c7:b8:c9:ee:5b:69:88:ce:cf:b3:28:68:be:b6:6f: 6c:30:c1:8f:0c:cc:c0:76:09:f1:1b:ff:f7:fc:fd: f6:53:e5:c6:15:6b:01:ba:8d:56:a6:1a:2a:b3:00: 0e:08:bb:9f:e1:9c:95:b0:54:f2:f6:36:3f:65:00: 3f:54:f0:ac:c4:9f:0a:1c:30:97:2b:cf:69:25:de: ca:d3:cf:0c:14:02:68:c3:bc:5b:40:39:5e:38:08: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2F:3A:BB:AE:66:1D:05:B5:9B:E7:F6:00:14:BA:3F:5A:14:61:1C X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7d:b9:8b:a7:97:2a:25:e0:d5:74:1d:3e:68:d0:35:4f:bd: 04:6d:44:5a:e0:cf:d8:19:03:5a:a6:4f:b7:33:da:1c:fa:dd: a6:9c:4c:7e:5a:aa:e5:c3:17:9f:b8:02:69:49:74:66:45:58: 75:d9:c4:41:05:ae:02:03:33:bc:52:ab:00:d8:e7:d6:db:22: 0d:7f:8e:99:4f:d8:8d:85:a7:10:9f:22:55:65:dc:c1:dc:f1: 61:da:5c:6f:df:60:db:3d:4f:5f:13:9e:53:c6:5c:eb:c0:f0: 02:1b:87:10:22:39:50:ed:cb:88:a6:49:40:ff:35:45:2d:6b: 41:9d:4e:97:98:b1:04:0a:42:ac:54:d5:59:9f:2c:ba:b3:01: 2e:29:3a:0e:86:18:49:f5:6c:15:81:3e:45:f5:d9:fe:b2:d6: 9c:ae:77:5e:05:f9:e9:fb:d1:2c:dc:ce:a1:cf:60:b4:db:66: e3:70:32:4a:0c:c4:7b:60:3f:ad:c9:1c:d5:92:8d:4d:67:a4: 03:ac:ce:aa:b8:d5:82:a2:90:87:69:ea:56:28:e2:aa:05:3b: 42:d1:28:3a:ac:37:40:b8:81:ec:6d:60:b2:b7:18:fd:ab:c0: 87:b2:1f:5b:76:69:34:10:b2:a2:7a:25:f2:13:bb:1b:57:fc: 7d:8f:4a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUxMDE5MDgzNDIwWhcNMjUxMDI2MDgzNDIwWjAYMRYwFAYD VQQDEw02OGY0YTI4Yy1iZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhYa0uIzLcoCqcJVnmifFm56cyhI0EvWBit/qKNczi0z3iGHRF7OttMwTEzk getuFUpXXrIYgrVp5uJmeRiI9r3KFKeaV7V8u8FEO3VINyPv8kKFcsE02rncvYwl l37uffYrlNEE40p8x+RucwECZDA0yseY2yCAHaaQsnixw0zmlBFP4+4MH9FsXhJs 5pLLo//qGZyPjxMK4L8yCX/Obrj43lPHuMnuW2mIzs+zKGi+tm9sMMGPDMzAdgnx G//3/P32U+XGFWsBuo1WphoqswAOCLuf4ZyVsFTy9jY/ZQA/VPCsxJ8KHDCXK89p Jd7K088MFAJow7xbQDleOAhrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOovOruu Zh0FtZvn9gAUuj9aFGEcMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrfbmLp5cqJeDVdB0+aNA1T70EbURa4M/YGQNapk+3M9oc+t2mnEx+ WqrlwxefuAJpSXRmRVh12cRBBa4CAzO8UqsA2OfW2yINf46ZT9iNhacQnyJVZdzB 3PFh2lxv32DbPU9fE55TxlzrwPACG4cQIjlQ7cuIpklA/zVFLWtBnU6XmLEECkKs VNVZnyy6swEuKToOhhhJ9WwVgT5F9dn+stacrndeBfnp+9Es3M6hz2C022bjcDJK DMR7YD+tyRzVko1NZ6QDrM6quNWCopCHaepWKOKqBTtC0Sg6rDdAuIHsbWCytxj9 q8CHsh9bdmk0ELKieiXyE7sbV/x9j0rw -----END CERTIFICATE-----Generated at Mon Oct 20 04:17:35 2025 by rpki-client