$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: WSpp6ZHCkbUncuNJQg3HFrOvz8RWrU216SCVVtDrIy0= Subject key identifier: F3:8D:D7:0C:73:2C:CC:CA:41:2E:30:FA:4C:B9:E4:5B:5C:91:63:73 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0AF2 Signing time: Mon 20 Oct 2025 20:08:06 +0000 Manifest this update: Mon 20 Oct 2025 20:08:04 +0000 Manifest next update: Mon 27 Oct 2025 20:08:04 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: vbXdWq6CBAhqzxAe3Sb7TrXBoyIzsuy3/6PJzfuR2ag=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Oct 20 20:08:04 2025 GMT Not After : Oct 27 20:08:04 2025 GMT Subject: CN=68f696a6-7317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:f7:db:0f:0c:9c:bd:6b:07:b7:16:d5:c0: 5f:cd:e1:89:ca:75:fe:63:67:01:01:ba:2f:0f:36: 86:d9:7b:9c:06:a8:f8:b7:58:49:60:96:bf:da:00: a1:24:b0:ea:d0:8d:1d:46:70:d1:d0:2b:3c:af:81: e0:47:14:ed:4e:3e:dd:ee:ee:d7:2f:e0:5a:1d:32: 62:d6:85:b4:0b:9c:f4:7b:4c:9c:cf:38:16:02:2d: 1f:6a:2a:48:15:24:f1:40:0e:b6:4f:72:67:45:e9: 12:6e:a7:cc:6d:54:67:f2:56:46:b1:8b:a3:3b:a0: 31:34:6e:cf:dd:fa:a5:94:0c:70:69:20:1c:d3:49: a7:f2:5d:48:b9:43:75:73:a2:4a:4a:d6:80:e9:b9: 03:db:6c:4e:a9:e4:03:cc:57:b0:83:d2:b1:ac:bf: ad:cc:5f:3c:ce:e7:9c:ad:fa:d5:94:47:b5:32:22: 26:ca:07:84:f6:c7:7f:d2:ee:b5:94:7b:b8:35:b1: ea:5a:b0:15:58:ef:b1:3c:21:e9:bd:74:f1:0a:a7: db:2f:39:ac:7a:80:17:b6:ef:8e:26:2d:93:70:c6: 46:32:1a:f1:ea:47:0d:95:51:2b:ea:59:70:99:35: 26:44:f6:72:f4:08:33:fe:b5:84:5c:dd:95:44:10: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8D:D7:0C:73:2C:CC:CA:41:2E:30:FA:4C:B9:E4:5B:5C:91:63:73 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:51:06:d7:e0:0e:8d:54:66:55:aa:c1:62:21:5e:fe:37:49: 43:2c:1b:5b:b1:66:43:46:8b:ec:6f:ec:8c:6b:80:c6:ea:7a: 74:80:29:83:77:6e:e5:1c:a0:a6:e6:e7:d7:a1:05:71:d0:57: a5:f1:e8:43:31:97:08:3c:d4:7e:29:43:cf:fa:7a:c0:cd:b0: 4d:99:5c:27:8a:c7:b3:95:69:25:04:0f:1a:96:7b:e7:57:fe: 9e:af:79:60:27:b3:67:49:fc:1e:b4:e2:53:55:b6:89:46:91: d8:e8:54:7c:23:3d:45:a9:2c:0a:5d:f1:08:1c:fe:ac:4a:40: af:6b:df:ea:00:6a:dc:ea:61:b2:96:f9:03:dd:e9:f7:4b:d3: c1:ab:83:de:b8:8c:d8:cb:3f:79:22:1f:f3:2c:4d:ac:71:05: 31:c4:06:67:5a:d0:f5:c5:33:02:de:13:e0:b8:60:09:b0:92: 1a:8c:3b:47:95:ab:68:52:70:35:79:29:47:52:3c:59:ec:6e: fd:ca:05:0a:ff:47:c0:44:2e:53:98:a7:dc:8c:3f:28:65:0d: af:e8:6f:4d:b6:6f:b9:b3:2c:13:8f:cb:ba:d3:5a:a9:83:26: ce:cf:e4:29:2c:13:3f:a4:81:9a:87:f3:cb:bb:15:f0:d7:c7: 88:58:76:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUxMDIwMjAwODA0WhcNMjUxMDI3MjAwODA0WjAYMRYwFAYD VQQDEw02OGY2OTZhNi03MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cL32w8MnL1rB7cW1cBfzeGJynX+Y2cBAbovDzaG2XucBqj4t1hJYJa/2gCh JLDq0I0dRnDR0Cs8r4HgRxTtTj7d7u7XL+BaHTJi1oW0C5z0e0yczzgWAi0faipI FSTxQA62T3JnRekSbqfMbVRn8lZGsYujO6AxNG7P3fqllAxwaSAc00mn8l1IuUN1 c6JKStaA6bkD22xOqeQDzFewg9KxrL+tzF88zuecrfrVlEe1MiImygeE9sd/0u61 lHu4NbHqWrAVWO+xPCHpvXTxCqfbLzmseoAXtu+OJi2TcMZGMhrx6kcNlVEr6llw mTUmRPZy9Agz/rWEXN2VRBBUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPON1wxz LMzKQS4w+ky55FtckWNzMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjUQbX4A6NVGZVqsFiIV7+N0lDLBtbsWZDRovsb+yMa4DG6np0gCmD d27lHKCm5ufXoQVx0Fel8ehDMZcIPNR+KUPP+nrAzbBNmVwnisezlWklBA8alnvn V/6er3lgJ7NnSfwetOJTVbaJRpHY6FR8Iz1FqSwKXfEIHP6sSkCva9/qAGrc6mGy lvkD3en3S9PBq4PeuIzYyz95Ih/zLE2scQUxxAZnWtD1xTMC3hPguGAJsJIajDtH latoUnA1eSlHUjxZ7G79ygUK/0fARC5TmKfcjD8oZQ2v6G9Ntm+5sywTj8u601qp gybOz+QpLBM/pIGah/PLuxXw18eIWHZn -----END CERTIFICATE-----Generated at Mon Oct 20 21:59:50 2025 by rpki-client