$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json) Hash identifier: XvnNCZ4YAWTUsKsLr47DQ0PTuapjuEUVJ9HD2j5/KQY= Subject key identifier: 94:DA:0E:5D:0C:0C:DA:31:D8:DA:F7:70:6B:FB:A8:7B:A7:76:E2:10 Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft Manifest number: 0B29 Signing time: Sat 18 Oct 2025 20:11:51 +0000 Manifest this update: Sat 18 Oct 2025 20:11:50 +0000 Manifest next update: Sat 25 Oct 2025 20:11:50 +0000 Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: AVj8FY8sH/S/PhUXdTIUm1U9puU9MVNZ1O3wrQrXfYQ=) 2: 52216250493611EAA0968624C4F9AE02.roa (hash: XjkXLtL5CTFLl3MU4C1ptKiUasRS1cFai/QK6ioOeWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Validity Not Before: Oct 18 20:11:50 2025 GMT Not After : Oct 25 20:11:50 2025 GMT Subject: CN=68f3f486-bfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:a3:06:96:9e:41:de:3d:7b:08:a3:50:fd: d6:77:29:49:a7:bb:3c:d2:e7:51:0b:5b:f8:f1:16: d5:59:1b:f2:ab:3c:6b:06:15:64:c9:ac:cd:c6:3f: 98:e5:f2:29:37:eb:06:11:9e:72:4c:93:ae:55:1a: e4:fd:1f:1e:ef:09:fb:16:46:b7:81:b0:89:02:37: f8:85:a1:48:c4:12:58:c0:59:ba:f4:c1:41:44:d3: df:b0:7b:90:3a:85:d3:9b:7b:7b:71:72:c0:ab:8d: 70:62:92:6d:55:ea:94:5e:3a:33:72:6c:90:af:8d: 54:fa:73:06:46:b9:3a:6d:44:0b:24:97:0c:12:af: b6:ea:5b:a3:19:84:75:91:94:7d:06:24:f1:84:df: 5b:7f:f2:9f:1e:46:f3:62:1a:b2:2e:ce:cb:69:41: c1:ee:3d:f3:5d:c0:e3:df:c5:73:d2:29:15:2f:c3: b3:19:fe:64:8a:56:ec:47:47:2e:5b:c5:73:c2:ea: a2:ca:d1:ec:41:b5:f5:db:72:3e:9f:fa:24:58:db: 62:ca:ad:90:eb:3f:5b:8b:4c:27:21:a0:ec:3b:6c: 29:bc:4f:5d:ac:62:8f:2a:80:ba:01:c0:8f:5a:2a: ab:2a:65:37:98:8f:a1:c3:ea:2c:b9:f8:3b:da:43: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DA:0E:5D:0C:0C:DA:31:D8:DA:F7:70:6B:FB:A8:7B:A7:76:E2:10 X509v3 Authority Key Identifier: keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:28:c5:24:46:3b:4f:8f:63:41:f3:21:6a:2a:1f:bd:46:0a: 55:5a:3f:e3:66:64:81:35:7a:24:c5:7c:3b:c0:f7:f7:87:8f: 71:97:04:8b:ac:62:bd:6e:96:77:41:8d:6f:ea:f7:2e:5d:ee: f5:fb:a9:0f:bd:8f:1b:4d:ea:1f:d0:f7:29:f0:3b:91:34:64: 0f:8b:d5:10:4e:25:32:60:75:94:de:12:ae:5e:55:8c:f1:e4: a6:ec:a9:39:0d:6d:07:bb:74:8b:76:77:2d:97:74:ae:00:2f: 8c:46:bf:7b:44:cd:07:6d:7d:93:5a:fb:1b:f1:70:5e:f6:91: 18:fc:6b:90:cc:d2:a9:9d:0d:9d:15:c7:53:67:43:ab:88:28: db:bb:b3:db:99:f8:55:d2:dd:c3:0a:db:24:1b:e3:b6:14:79: af:9c:bd:4f:7c:b1:d0:e3:c2:e4:a4:6d:2e:5e:26:f0:17:0b: 13:bd:b3:1c:61:7d:b0:a9:38:bb:cf:77:cf:81:98:ed:0d:cc: 6a:c7:ab:d6:fb:13:82:02:4d:cf:e2:31:ff:fd:e4:c5:a3:30: d6:94:6f:88:39:9b:06:a4:9c:9b:0b:6d:fc:a8:44:ad:24:c9: e5:c0:d4:4e:92:66:fa:2f:44:9b:bb:ed:8c:86:de:e7:61:e9: 2b:26:a4:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy NjM4M0MyMDUwHhcNMjUxMDE4MjAxMTUwWhcNMjUxMDI1MjAxMTUwWjAYMRYwFAYD VQQDEw02OGYzZjQ4Ni1iZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOejBpaeQd49ewijUP3WdylJp7s80udRC1v48RbVWRvyqzxrBhVkyazNxj+Y 5fIpN+sGEZ5yTJOuVRrk/R8e7wn7Fka3gbCJAjf4haFIxBJYwFm69MFBRNPfsHuQ OoXTm3t7cXLAq41wYpJtVeqUXjozcmyQr41U+nMGRrk6bUQLJJcMEq+26lujGYR1 kZR9BiTxhN9bf/KfHkbzYhqyLs7LaUHB7j3zXcDj38Vz0ikVL8OzGf5kilbsR0cu W8VzwuqiytHsQbX123I+n/okWNtiyq2Q6z9bi0wnIaDsO2wpvE9drGKPKoC6AcCP WiqrKmU3mI+hw+osufg72kMZlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTaDl0M DNox2Nr3cGv7qHunduIQMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5 MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3 Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05 OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2KMUkRjtPj2NB8yFqKh+9RgpVWj/jZmSBNXokxXw7wPf3h49xlwSL rGK9bpZ3QY1v6vcuXe71+6kPvY8bTeof0Pcp8DuRNGQPi9UQTiUyYHWU3hKuXlWM 8eSm7Kk5DW0Hu3SLdnctl3SuAC+MRr97RM0HbX2TWvsb8XBe9pEY/GuQzNKpnQ2d FcdTZ0OriCjbu7PbmfhV0t3DCtskG+O2FHmvnL1PfLHQ48LkpG0uXibwFwsTvbMc YX2wqTi7z3fPgZjtDcxqx6vW+xOCAk3P4jH//eTFozDWlG+IOZsGpJybC238qESt JMnlwNROkmb6L0Sbu+2Mht7nYekrJqQW -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:02 2025 by rpki-client