$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json) Hash identifier: CPW14ADLRhRdvpcBLVWjj2VIM3W2rSrHQUI+e9HPIaM= Subject key identifier: F4:AC:09:9A:ED:6B:1B:77:66:EA:6E:8F:19:D1:78:96:8A:D2:19:87 Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft Manifest number: 22E5 Signing time: Sat 18 Oct 2025 16:05:51 +0000 Manifest this update: Sat 18 Oct 2025 16:05:50 +0000 Manifest next update: Sat 25 Oct 2025 16:05:50 +0000 Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: Exda71rAcyxeCe+APOKnZAh4ECiNSUDBSJzlDQXQGJw=) 2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: oQ+XeX3QPr5MKR/Pv82IWUhiWxAkN4R4paMHXTKKeg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Validity Not Before: Oct 18 16:05:50 2025 GMT Not After : Oct 25 16:05:50 2025 GMT Subject: CN=68f3badf-ef18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:c0:3f:57:6e:a0:f3:3c:81:a2:3f:c6:18: ae:da:20:c3:89:95:57:37:f1:cf:3c:76:88:63:40: 94:99:d8:00:da:21:53:c3:2e:b8:e8:b0:c3:c6:35: c8:a5:e2:dd:f4:4f:f0:97:70:f2:4f:14:06:0d:25: ef:92:85:58:99:20:f1:5e:bf:0b:f6:6b:29:bb:48: dd:e2:f8:38:c2:c3:b2:55:49:4e:bb:c0:ec:18:e9: ff:ad:e8:1e:43:5a:70:61:fb:12:ef:6e:e2:96:b8: f7:33:ae:c4:12:d8:19:05:17:89:5f:e9:9a:de:57: 38:b1:d1:2c:e7:31:a7:6f:b1:94:37:0c:e2:7b:ce: 6b:36:86:8e:79:e4:04:0b:4c:9c:5c:a3:f5:e4:a4: f6:8d:99:3b:8e:08:29:79:04:39:e2:f5:09:29:a4: bf:65:17:a6:71:18:a3:13:f4:fa:30:8e:a8:7e:d0: e6:37:2c:88:e3:a0:b8:8f:c6:e6:9e:40:b8:15:c7: 14:cf:b5:01:7b:51:4a:19:73:e8:d3:b1:a6:a7:31: a9:6e:28:bc:8b:53:77:ec:e0:87:91:bf:f7:6c:79: c0:6a:2b:51:9b:9f:ea:a8:10:5c:d4:ac:a9:77:b2: f9:b4:49:f8:60:0e:b3:d3:cc:0c:9c:c8:a0:d3:62: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AC:09:9A:ED:6B:1B:77:66:EA:6E:8F:19:D1:78:96:8A:D2:19:87 X509v3 Authority Key Identifier: keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:17:6d:be:5a:b8:81:fa:97:20:43:21:14:5c:7e:bc:57:2c: f9:45:0f:c7:10:1d:ac:67:a3:0b:f4:30:9f:4a:d3:75:0c:93: f9:cb:ef:73:c0:da:c0:1f:98:74:e7:38:ea:ab:0f:89:f2:22: 41:73:a4:58:c2:05:11:2f:2b:21:d5:7a:94:d3:90:cf:c1:1b: 25:3d:4e:a1:84:e9:eb:e8:30:b2:32:66:c9:f1:69:28:fe:2d: 96:fa:55:c8:ce:02:74:b8:8f:47:c2:f0:31:03:56:11:42:ec: 14:05:b9:4f:2a:93:50:5a:8a:16:6e:01:a7:c5:7e:ce:b0:b1: 48:2c:0e:ce:46:de:12:cc:6b:3d:a6:f9:1e:80:37:10:28:93: cd:62:80:e0:fe:81:8c:a9:d3:34:f2:ce:22:e4:b3:af:76:29: d8:88:f4:cf:71:1d:de:54:ab:19:03:62:1d:36:42:34:af:7f: d6:25:20:db:c1:1a:c1:4a:52:2e:c3:89:13:64:3d:61:5d:79: 74:6e:ae:74:73:d4:8c:70:50:36:fc:f9:8b:ec:a2:9f:64:d7: fb:98:2e:9f:d8:23:33:e9:5b:15:3f:79:c3:e1:31:aa:64:ee: 59:df:0d:ad:48:ff:91:60:19:dc:2d:53:39:83:32:a4:bf:20: d7:8f:ec:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0RUUwQzVGRjMw RDQ5MUNEMEUwHhcNMjUxMDE4MTYwNTUwWhcNMjUxMDI1MTYwNTUwWjAYMRYwFAYD VQQDEw02OGYzYmFkZi1lZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU/AP1duoPM8gaI/xhiu2iDDiZVXN/HPPHaIY0CUmdgA2iFTwy646LDDxjXI peLd9E/wl3DyTxQGDSXvkoVYmSDxXr8L9mspu0jd4vg4wsOyVUlOu8DsGOn/rege Q1pwYfsS727ilrj3M67EEtgZBReJX+ma3lc4sdEs5zGnb7GUNwzie85rNoaOeeQE C0ycXKP15KT2jZk7jggpeQQ54vUJKaS/ZRemcRijE/T6MI6oftDmNyyI46C4j8bm nkC4FccUz7UBe1FKGXPo07GmpzGpbii8i1N37OCHkb/3bHnAaitRm5/qqBBc1Kyp d7L5tEn4YA6z08wMnMig02J5UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSsCZrt axt3ZupujxnReJaK0hmHMB8GA1UdIwQYMBaAFFEmGd4MHRuz5XeZTuDF/zDUkc0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFGMC9GMTYyREE0RTlG OTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3UGxkNWxPNE1YX01OU1J6 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTWVozZ3dkRzdQbGQ1bE80TVhfTU5TUnpRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3 UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgF22+WriB+pcgQyEUXH68Vyz5RQ/HEB2sZ6ML9DCfStN1DJP5y+9z wNrAH5h05zjqqw+J8iJBc6RYwgURLysh1XqU05DPwRslPU6hhOnr6DCyMmbJ8Wko /i2W+lXIzgJ0uI9HwvAxA1YRQuwUBblPKpNQWooWbgGnxX7OsLFILA7ORt4SzGs9 pvkegDcQKJPNYoDg/oGMqdM08s4i5LOvdinYiPTPcR3eVKsZA2IdNkI0r3/WJSDb wRrBSlIuw4kTZD1hXXl0bq50c9SMcFA2/PmL7KKfZNf7mC6f2CMz6VsVP3nD4TGq ZO5Z3w2tSP+RYBncLVM5gzKkvyDXj+xP -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:15 2025 by rpki-client