$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: cSHZzziVB1NTSPFbPGfoz+WmGRKjdBNMlCEa7/WvW4E= Subject key identifier: 14:FF:98:0F:FE:EB:29:3D:C5:EF:D0:31:38:B1:F4:CB:44:86:67:22 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 0628 Signing time: Sun 19 Oct 2025 00:20:36 +0000 Manifest this update: Sun 19 Oct 2025 00:20:35 +0000 Manifest next update: Sun 26 Oct 2025 00:20:35 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: 6uPWuYUNirRQu/f9hxNGuYBUojaiMXC25/ZkgIj4bFg=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Oct 19 00:20:35 2025 GMT Not After : Oct 26 00:20:35 2025 GMT Subject: CN=68f42ed3-914d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:fc:c9:d4:d5:c5:fb:82:30:fa:9f:fc:18: c8:78:75:22:99:c6:a3:75:fb:5c:81:b1:9f:96:91: 5c:c1:09:30:3d:bb:fe:d2:61:5a:87:5b:e8:fb:ad: 83:52:be:b7:ef:83:87:c2:f5:a6:04:8d:45:f2:0f: 54:ec:f1:db:62:b1:5c:1a:c3:ad:f8:0f:2c:d0:b6: 0b:fe:6f:95:3e:81:ff:d8:2f:94:de:8a:a0:91:1a: 57:fb:2a:30:06:12:5a:57:5d:84:84:af:85:4c:6e: 1b:f4:05:f1:9a:90:01:32:e1:66:25:64:51:22:10: cb:02:13:c6:e6:10:78:9e:10:c8:b3:77:d8:2f:f5: db:d5:4c:49:bf:01:65:2a:b1:52:c2:c7:4b:21:18: e5:88:f3:8a:ae:cb:a9:12:bf:33:31:53:1c:b1:f6: 12:e6:67:91:b8:96:65:91:8b:3d:ee:33:a1:7e:d7: a0:17:f7:8d:e7:d6:78:d8:45:87:a5:10:e8:66:45: b4:4e:e8:a3:bd:18:6d:6f:70:0f:06:a6:9f:1f:4c: d5:d3:33:38:4f:00:11:e9:42:d3:00:f8:9e:a4:25: eb:68:b3:88:57:4b:80:d9:ec:f7:e8:59:7b:26:55: ef:5d:fb:ab:4f:4f:8f:6b:6b:1b:10:35:b6:31:f9: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FF:98:0F:FE:EB:29:3D:C5:EF:D0:31:38:B1:F4:CB:44:86:67:22 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:7a:6d:7a:63:41:7c:e4:ae:e0:77:b4:25:19:57:b9:c3:0a: f7:5a:56:98:31:08:77:90:00:bb:7b:35:71:5c:2c:1b:77:e4: 93:4c:95:bd:16:6e:bb:36:e7:ee:b6:e6:f8:d0:6b:29:a6:98: 9a:fd:43:55:7b:a2:f1:c9:a0:01:a7:98:8b:b9:50:43:e3:45: fd:fe:dd:c5:c1:19:c8:bf:f0:a0:60:1a:77:c1:ea:69:28:11: a5:80:39:e6:3b:11:7b:84:e5:37:b3:f6:66:67:23:42:49:d4: da:80:71:d1:21:01:ad:1e:f7:34:ee:b3:74:7e:2e:c3:05:9b: 81:b4:52:e8:3a:c4:38:e7:7b:63:88:27:e8:7a:33:b5:8f:c0: 30:c7:fb:ac:9d:ab:3e:62:32:1a:37:80:62:7f:16:d3:32:1b: fb:a3:93:83:0d:ff:f2:98:5c:9c:bd:8f:5b:4f:c9:15:d3:a4: 2b:5b:d4:09:35:da:99:8c:6c:b3:b2:e0:34:bb:fa:6c:ef:a8: 1d:75:04:91:fb:58:72:11:29:82:b7:f6:22:15:a1:8c:a9:39: 0d:61:dc:f4:b9:e6:8b:bc:6f:90:90:61:21:59:a9:98:28:c8: b1:24:66:1d:58:4b:1b:fd:df:35:2f:22:da:98:93:34:d2:96: e6:26:e2:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUxMDE5MDAyMDM1WhcNMjUxMDI2MDAyMDM1WjAYMRYwFAYD VQQDEw02OGY0MmVkMy05MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1v8ydTVxfuCMPqf/BjIeHUimcajdftcgbGflpFcwQkwPbv+0mFah1vo+62D Ur6374OHwvWmBI1F8g9U7PHbYrFcGsOt+A8s0LYL/m+VPoH/2C+U3oqgkRpX+yow BhJaV12EhK+FTG4b9AXxmpABMuFmJWRRIhDLAhPG5hB4nhDIs3fYL/Xb1UxJvwFl KrFSwsdLIRjliPOKrsupEr8zMVMcsfYS5meRuJZlkYs97jOhftegF/eN59Z42EWH pRDoZkW0TuijvRhtb3APBqafH0zV0zM4TwAR6ULTAPiepCXraLOIV0uA2ez36Fl7 JlXvXfurT0+Pa2sbEDW2Mfk/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT/mA/+ 6yk9xe/QMTix9MtEhmciMB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLem16Y0F85K7gd7QlGVe5wwr3WlaYMQh3kAC7ezVxXCwbd+STTJW9 Fm67Nufutub40Gspppia/UNVe6LxyaABp5iLuVBD40X9/t3FwRnIv/CgYBp3wepp KBGlgDnmOxF7hOU3s/ZmZyNCSdTagHHRIQGtHvc07rN0fi7DBZuBtFLoOsQ453tj iCfoejO1j8Awx/usnas+YjIaN4BifxbTMhv7o5ODDf/ymFycvY9bT8kV06QrW9QJ NdqZjGyzsuA0u/ps76gddQSR+1hyESmCt/YiFaGMqTkNYdz0ueaLvG+QkGEhWamY KMixJGYdWEsb/d81LyLamJM00pbmJuJm -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:09 2025 by rpki-client