$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: 4Pj+wwCKadqFtKksBQTIEmZnKmzCe6KuJKSde5fxVz0= Subject key identifier: B5:96:72:A5:89:42:81:65:50:9B:00:9F:F5:31:8B:91:5E:31:9F:A0 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: D3 Signing time: Sun 19 Oct 2025 09:12:44 +0000 Manifest this update: Sun 19 Oct 2025 09:12:43 +0000 Manifest next update: Sun 26 Oct 2025 09:12:43 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: Tf1LLwCWs5ikKsNCMPMXWLCXAvxgpKzAItpOQ/UGNkg=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Oct 19 09:12:43 2025 GMT Not After : Oct 26 09:12:43 2025 GMT Subject: CN=68f4ab8b-f29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:95:72:99:df:ba:6b:30:0a:2c:28:af:60: fa:16:0a:c2:1e:d2:39:2a:9f:cf:1f:16:48:f2:18: cf:34:58:cb:92:97:9f:0f:98:20:3b:1f:05:ef:4c: fb:9c:c7:3b:e4:d8:3f:0b:93:74:98:f9:6a:21:99: 96:6b:bd:d7:11:96:44:54:8a:f9:09:33:b1:7a:3b: ac:5e:d0:84:2e:39:1a:be:d7:e6:cf:6d:99:9c:0b: 2b:31:64:3d:bf:a5:cb:b5:fe:de:04:72:0d:49:98: 02:2e:2a:a6:0c:ff:71:80:01:52:33:92:13:54:2a: 3c:e9:9d:a9:51:63:58:a4:5a:55:2a:a5:2b:75:d5: de:7f:f1:89:74:c6:25:d9:3c:65:2f:13:17:df:3c: 86:e9:b4:5a:00:18:a0:39:e8:9c:05:95:99:03:8d: 44:e1:9c:ea:74:43:1a:c1:83:2f:cf:ff:1a:2a:2b: ff:60:9d:10:93:db:c3:88:26:11:bc:21:7f:79:05: f7:cc:62:13:06:59:fb:1b:8b:0e:22:4b:bc:ea:0c: 30:cb:dd:cf:f6:8c:48:44:ef:ed:f6:26:8c:c2:d3: 0b:c5:b1:58:d8:a7:91:c0:01:50:07:19:3b:10:43: 00:19:e1:4d:7b:08:44:c6:d7:8d:44:37:9d:17:42: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:96:72:A5:89:42:81:65:50:9B:00:9F:F5:31:8B:91:5E:31:9F:A0 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:23:45:02:5d:a2:a2:cf:f3:73:42:6a:94:64:96:dd:cd:ed: 44:41:25:72:d6:bc:c2:ef:2f:09:d5:79:37:f7:30:e5:1b:ba: 29:11:48:34:df:d9:30:7d:42:07:e4:2d:9b:95:07:22:8b:53: d4:57:42:5f:46:a5:d4:22:a0:d7:96:2b:72:b4:61:04:48:b6: bb:9a:77:6f:e3:32:9d:80:f0:72:3a:b7:05:56:48:4b:97:ce: cd:f1:e0:b7:82:fd:ff:ab:01:43:4a:42:1c:82:f8:98:d1:4c: 89:56:40:32:21:bf:1d:7a:b6:5e:aa:82:69:e6:5d:74:79:74: 03:ed:c5:db:f9:fc:3e:3e:43:f9:4d:81:9a:07:0a:90:f5:27: fc:90:bc:fb:8e:0c:c0:28:09:6c:c9:38:a5:7f:6f:3d:48:12: a6:a3:bc:5e:ed:61:61:4f:42:28:0b:56:4b:f9:49:9f:3d:01: ae:48:00:e9:0c:fd:20:42:81:a8:f1:1d:1d:5e:fd:51:c6:72: 1f:1d:67:7e:aa:5d:34:0f:0e:c1:5a:bb:55:e6:bc:ad:28:89: b5:80:4d:15:ad:c7:94:f2:c7:80:36:25:3c:72:ba:06:b3:f7: 2e:55:83:0e:eb:ce:e5:36:41:2b:4c:b0:a4:d3:fb:ae:ba:b2: 87:eb:26:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUxMDE5MDkxMjQzWhcNMjUxMDI2MDkxMjQzWjAYMRYwFAYD VQQDEw02OGY0YWI4Yi1mMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ySVcpnfumswCiwor2D6FgrCHtI5Kp/PHxZI8hjPNFjLkpefD5ggOx8F70z7 nMc75Ng/C5N0mPlqIZmWa73XEZZEVIr5CTOxejusXtCELjkavtfmz22ZnAsrMWQ9 v6XLtf7eBHINSZgCLiqmDP9xgAFSM5ITVCo86Z2pUWNYpFpVKqUrddXef/GJdMYl 2TxlLxMX3zyG6bRaABigOeicBZWZA41E4ZzqdEMawYMvz/8aKiv/YJ0Qk9vDiCYR vCF/eQX3zGITBln7G4sOIku86gwwy93P9oxIRO/t9iaMwtMLxbFY2KeRwAFQBxk7 EEMAGeFNewhExteNRDedF0KZjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWWcqWJ QoFlUJsAn/Uxi5FeMZ+gMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+I0UCXaKiz/NzQmqUZJbdze1EQSVy1rzC7y8J1Xk39zDlG7opEUg0 39kwfUIH5C2blQcii1PUV0JfRqXUIqDXlitytGEESLa7mndv4zKdgPByOrcFVkhL l87N8eC3gv3/qwFDSkIcgviY0UyJVkAyIb8derZeqoJp5l10eXQD7cXb+fw+PkP5 TYGaBwqQ9Sf8kLz7jgzAKAlsyTilf289SBKmo7xe7WFhT0IoC1ZL+UmfPQGuSADp DP0gQoGo8R0dXv1RxnIfHWd+ql00Dw7BWrtV5rytKIm1gE0VrceU8seANiU8croG s/cuVYMO687lNkErTLCk0/uuurKH6yZo -----END CERTIFICATE-----Generated at Tue Oct 21 08:13:09 2025 by rpki-client