$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: S5Oonu0xUqe8/uqchaSqPAh4ri5XL91HfTeyJ7eFNjw= Subject key identifier: 16:0C:04:0F:FF:9C:EE:DE:8F:9F:C5:2C:C0:16:7E:F7:BF:B7:19:46 Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: A9 Signing time: Sun 19 Oct 2025 09:28:00 +0000 Manifest this update: Sun 19 Oct 2025 09:28:00 +0000 Manifest next update: Sun 26 Oct 2025 09:28:00 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: 7/CydcBHjo51dgLVbdypE44QT30RvhMONTu/FYmVXz4=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Oct 19 09:28:00 2025 GMT Not After : Oct 26 09:28:00 2025 GMT Subject: CN=68f4af20-3e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:ca:e5:48:ab:33:43:32:95:99:07:3d:8c: 3a:24:d7:57:67:1f:4f:17:e1:2e:06:4e:0c:0d:63: 6f:7f:8b:7a:d9:fe:ec:94:78:d9:6d:c3:48:51:47: b7:66:e8:3e:b5:6d:cc:17:02:ab:ef:fd:e4:47:95: 18:67:2b:49:f4:1f:ef:83:83:5e:f6:7d:05:0b:03: 9d:be:b2:23:16:3a:e8:e5:31:f1:35:cd:ab:84:78: c6:d9:14:c2:24:33:61:65:8c:2b:71:8f:97:9e:b4: 0d:f4:31:62:23:e2:91:1a:25:35:ba:2c:e8:61:f8: ba:bb:c8:c6:e3:6b:2f:17:10:4a:c2:fb:16:53:93: b8:1f:c6:72:52:ff:83:7c:7b:0f:20:6a:e3:eb:09: 98:e6:0a:bc:6f:07:c7:ba:de:ee:4f:c9:81:3a:e5: 65:8c:e7:37:b7:2d:c1:ab:d1:79:99:6b:a6:04:04: e3:f0:20:93:ee:93:58:81:d7:b6:8c:0d:f5:ac:c2: 3d:5e:a1:26:15:ba:74:26:99:60:c6:8a:19:37:36: 93:bd:2c:fd:1b:ed:f4:e1:fc:92:19:45:38:79:67: 7d:64:e5:f1:e3:b4:8b:8d:bf:37:aa:df:88:c8:0a: 01:19:9a:35:58:f2:3e:91:a8:b0:a6:2a:8e:11:47: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0C:04:0F:FF:9C:EE:DE:8F:9F:C5:2C:C0:16:7E:F7:BF:B7:19:46 X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:c1:89:9a:cb:bc:d9:75:3c:de:3b:21:82:dc:24:a6:b8: 83:2f:ad:02:24:d6:cb:37:2e:ea:26:77:90:3a:3b:df:f7:d9: 52:d8:e5:d9:5b:fb:52:7b:18:10:44:a9:38:1a:6a:dc:2c:25: 5b:8f:d6:81:23:ae:ac:b5:17:88:2a:a4:71:05:32:43:b3:11: a8:90:78:31:c9:de:68:d0:9c:71:cc:ae:da:fd:82:77:31:96: 0c:02:4c:e8:8f:b2:98:b6:f1:f7:40:b8:cb:db:3d:1d:a7:a9: d5:f0:88:a6:73:06:9e:13:52:2a:81:a9:86:22:20:44:1c:61: 21:d2:a1:83:68:04:c4:8e:fa:1c:07:05:09:0a:bf:2a:b9:bc: b4:29:87:ed:1a:08:dd:30:a0:39:cf:5a:e2:1f:f7:0f:de:bc: 46:c2:b8:3d:07:85:cd:6c:64:e7:c7:6c:d7:fc:0f:40:fc:bd: f5:08:11:16:fc:94:4d:dd:ff:54:7b:ce:c2:25:df:ca:23:01: 44:dd:8a:d2:ee:37:81:0f:9c:fb:3e:9e:44:8f:58:d8:7d:77: f3:00:d0:95:90:35:be:19:d7:41:df:a6:2c:43:f1:9b:a6:69: 07:4a:60:8a:9e:f7:6a:2b:82:fb:11:69:16:2b:df:cd:6c:b6: 6a:c6:8c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEUyRTYzMDY2NzVENUY1NEQyMDdCNjc4MkE5NkM3QUE5 NjdCMUZDOTEwHhcNMjUxMDE5MDkyODAwWhcNMjUxMDI2MDkyODAwWjAYMRYwFAYD VQQDEw02OGY0YWYyMC0zZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD3K5UirM0MylZkHPYw6JNdXZx9PF+EuBk4MDWNvf4t62f7slHjZbcNIUUe3 Zug+tW3MFwKr7/3kR5UYZytJ9B/vg4Ne9n0FCwOdvrIjFjro5THxNc2rhHjG2RTC JDNhZYwrcY+XnrQN9DFiI+KRGiU1uizoYfi6u8jG42svFxBKwvsWU5O4H8ZyUv+D fHsPIGrj6wmY5gq8bwfHut7uT8mBOuVljOc3ty3Bq9F5mWumBATj8CCT7pNYgde2 jA31rMI9XqEmFbp0JplgxooZNzaTvSz9G+304fySGUU4eWd9ZOXx47SLjb83qt+I yAoBGZo1WPI+kaiwpiqOEUekGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYMBA// nO7ej5/FLMAWfve/txlGMB8GA1UdIwQYMBaAFOLmMGZ11fVNIHtngqlseqlnsfyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FOUJFMDVEQ0Ix M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlVMGdlMmVDcVd4NnFXZXhf SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9KRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FOUJFMDVEQ0IxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlV MGdlMmVDcVd4NnFXZXhfSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCU8GJmsu82XU83jshgtwkpriDL60CJNbLNy7qJneQOjvf99lS2OXZ W/tSexgQRKk4GmrcLCVbj9aBI66stReIKqRxBTJDsxGokHgxyd5o0JxxzK7a/YJ3 MZYMAkzoj7KYtvH3QLjL2z0dp6nV8IimcwaeE1IqgamGIiBEHGEh0qGDaATEjvoc BwUJCr8quby0KYftGgjdMKA5z1riH/cP3rxGwrg9B4XNbGTnx2zX/A9A/L31CBEW /JRN3f9Ue87CJd/KIwFE3YrS7jeBD5z7Pp5Ej1jYfXfzANCVkDW+GddB36YsQ/Gb pmkHSmCKnvdqK4L7EWkWK9/NbLZqxow+ -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:30 2025 by rpki-client