$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json) Hash identifier: 3eS97qJzFP2Se91zUz5ghKLxJfj4ulKleBcDf24FlmI= Subject key identifier: 84:11:DB:53:E0:18:8B:CC:1F:93:D6:16:A7:D0:58:28:A2:18:EA:49 Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft Manifest number: 23 Signing time: Sun 19 Oct 2025 11:18:01 +0000 Manifest this update: Sun 19 Oct 2025 11:18:01 +0000 Manifest next update: Sun 26 Oct 2025 11:18:01 +0000 Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: Yvjj1z4pgDXp5tqfFIJy0WxqovL77Sn+5SOs2gcsD7o=) 2: BAC878D0799511F098E98265C4F9AE02.roa (hash: DOKXlcoim3mGT1/5T41gtrSkQeSIUWzOdLmQqGxlYWw=) 3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: ENyfebcRoladpIqoDMvyVSOny2O0G7/P5ahmxQmU81s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Oct 19 11:18:01 2025 GMT Not After : Oct 26 11:18:01 2025 GMT Subject: CN=68f4c8e9-041d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:59:dd:ba:c1:63:d4:05:4e:a0:f5:2a:ea: 47:45:96:9b:22:7e:e8:83:cd:bd:ae:33:ed:50:c1: 45:e8:ff:4f:ee:aa:e8:1b:f0:6f:fa:23:dd:ae:67: 07:f7:44:c5:d4:51:c7:d7:c1:ea:b3:69:0c:3f:1d: d7:05:8b:53:e6:a1:98:74:59:fd:5e:d7:ff:3b:73: 39:b9:9d:8f:2f:25:fd:ba:66:8d:30:ac:4a:05:f9: 9d:c5:31:56:38:e5:19:d1:06:7d:72:dd:c1:df:9b: 18:b6:33:61:e5:50:e6:b4:b3:7d:2c:f5:9b:2f:ba: bb:16:50:bd:03:10:62:9c:90:5e:29:cc:67:b2:31: 7c:ad:93:d1:d6:a2:58:5d:7a:d4:f3:3a:3a:b1:0e: 86:e2:e6:96:97:8e:da:c7:49:62:16:bd:bf:fe:19: e4:0c:bd:c0:fe:4e:27:8e:79:33:73:12:db:a1:61: 18:15:f8:e3:05:6f:cf:05:85:59:52:1e:94:43:a8: 8d:6c:bb:61:71:cc:41:e3:44:05:79:d7:49:82:7f: a1:e1:f2:dd:4b:47:75:56:55:6f:72:43:67:13:44: e2:b5:21:fa:5d:51:e3:31:f2:1d:1a:47:24:21:19: bf:65:ab:64:a7:82:41:c2:c1:80:6c:fb:5b:de:f3: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:11:DB:53:E0:18:8B:CC:1F:93:D6:16:A7:D0:58:28:A2:18:EA:49 X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b7:bd:77:96:34:b9:85:c0:68:f2:f3:3e:90:85:1b:ca:7a: 23:54:59:fd:d0:53:5a:12:72:72:65:90:76:d8:f6:09:47:48: c3:7f:72:d0:d8:40:97:81:a1:5d:ca:1d:27:38:ff:2d:0b:bd: 8d:4a:88:da:e3:d5:c0:0d:28:ff:f0:f1:97:fd:9e:3a:53:97: c9:14:3d:fb:d1:ed:4e:d8:c3:7d:5c:d8:f2:f1:fc:a9:65:d5: e7:50:d3:87:da:ff:d2:2f:15:07:5a:2b:0e:9c:2a:3e:e6:f1: 0c:a7:fa:3c:e4:b1:af:3c:77:c8:0e:df:d8:ca:e3:09:59:83: da:6e:2b:76:b1:60:7d:73:6a:b5:4c:63:d1:c1:45:16:fc:a7: 39:20:27:4a:07:47:a8:e7:2a:86:e8:e9:7b:36:89:e2:ce:00: 1f:2b:55:fa:c4:d2:9b:24:82:db:4b:4f:2f:23:53:90:fb:4a: 14:2a:d9:be:c6:f9:b9:46:2a:ef:e1:47:6e:7e:8f:c8:79:74: 15:59:6e:8a:c4:9d:af:6e:8a:98:67:6d:64:d7:e5:6f:c9:ea: 73:be:d3:2c:fb:5c:af:dc:41:35:d3:1c:3c:4e:4d:0c:db:9d: 36:39:ba:1e:87:f4:c8:7a:9b:35:30:ec:35:0a:c9:63:23:a1: 69:d2:40:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3 N0M0REIzNzAeFw0yNTEwMTkxMTE4MDFaFw0yNTEwMjYxMTE4MDFaMBgxFjAUBgNV BAMTDTY4ZjRjOGU5LTA0MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLBlndusFj1AVOoPUq6kdFlpsifuiDzb2uM+1QwUXo/0/uqugb8G/6I92uZwf3 RMXUUcfXweqzaQw/HdcFi1PmoZh0Wf1e1/87czm5nY8vJf26Zo0wrEoF+Z3FMVY4 5RnRBn1y3cHfmxi2M2HlUOa0s30s9ZsvursWUL0DEGKckF4pzGeyMXytk9HWolhd etTzOjqxDobi5paXjtrHSWIWvb/+GeQMvcD+TieOeTNzEtuhYRgV+OMFb88FhVlS HpRDqI1su2FxzEHjRAV510mCf6Hh8t1LR3VWVW9yQ2cTROK1IfpdUeMx8h0aRyQh Gb9lq2SngkHCwYBs+1ve84unAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhBHbU+AY i8wfk9YWp9BYKKIY6kkwHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5 NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NjRGLzM2MENBMTdBNzk5NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNL UXNSQWpJMWlKVEhmRTJ6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI23vXeWNLmFwGjy8z6QhRvKeiNUWf3QU1oScnJlkHbY9glHSMN/ctDY QJeBoV3KHSc4/y0LvY1KiNrj1cANKP/w8Zf9njpTl8kUPfvR7U7Yw31c2PLx/Kll 1edQ04fa/9IvFQdaKw6cKj7m8Qyn+jzksa88d8gO39jK4wlZg9puK3axYH1zarVM Y9HBRRb8pzkgJ0oHR6jnKobo6Xs2ieLOAB8rVfrE0pskgttLTy8jU5D7ShQq2b7G +blGKu/hR25+j8h5dBVZborEna9uiphnbWTX5W/J6nO+0yz7XK/cQTXTHDxOTQzb nTY5uh6H9Mh6mzUw7DUKyWMjoWnSQJA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:10 2025 by rpki-client