$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: 9ugBpxELmjjLT/HzkgUQNkOxM/zNG48zINlhNrq2Rok= Subject key identifier: 90:C9:E4:BE:2B:9E:68:72:C6:8C:24:0E:62:D7:1B:50:0F:3E:03:20 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0B79 Signing time: Sat 18 Oct 2025 19:54:49 +0000 Manifest this update: Sat 18 Oct 2025 19:54:48 +0000 Manifest next update: Sat 25 Oct 2025 19:54:48 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: vHWQ9CGbY8poFr4Sapcifep18zZNR4JgmcNESiZ50Qc=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2947 (0xb83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Oct 18 19:54:48 2025 GMT Not After : Oct 25 19:54:48 2025 GMT Subject: CN=68f3f089-79ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:90:84:92:cf:c6:d9:ce:27:0e:28:48:89: 7b:64:ec:6d:2c:4f:a3:8f:c5:b5:aa:76:4a:46:cb: 67:c0:d0:f8:ba:f5:e6:d7:a9:72:a5:6b:ee:71:74: 46:be:04:07:25:0f:e8:60:10:fd:4a:34:4d:41:c2: eb:4f:5b:6c:5b:b3:c4:36:79:d8:25:89:bb:e2:87: 6d:a2:d1:4c:a3:3c:b1:8b:f3:f0:5c:76:9d:75:39: af:a3:d8:b5:29:57:ad:1f:6b:e7:40:bb:2f:ed:f5: dc:55:99:60:07:e2:54:04:9d:c3:7e:69:cd:4a:62: b9:78:75:73:f8:f0:25:49:f2:58:ed:ab:62:ff:5e: f4:8f:69:98:e9:0a:3b:c8:b1:d5:14:9b:01:f7:8a: 44:f3:57:56:c9:f5:bb:59:6c:57:c5:46:9e:a5:45: 7c:a2:2b:e9:08:e4:db:f9:65:ae:24:a6:cc:ca:1a: eb:28:eb:c2:97:99:25:a6:5a:2b:88:69:66:5d:d9: 00:10:91:b6:90:98:7a:51:14:48:cf:33:a4:63:8f: 98:9d:25:30:8b:b6:9f:57:4f:fd:0e:f8:fb:22:c1: 3c:7c:59:c6:0c:56:45:0e:39:f3:a5:df:f3:e1:8e: 59:4e:17:85:30:57:11:b0:35:6c:4c:a7:b4:3a:9b: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C9:E4:BE:2B:9E:68:72:C6:8C:24:0E:62:D7:1B:50:0F:3E:03:20 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e2:21:04:7a:2a:52:0d:52:f1:59:42:9b:83:99:66:d8:e8: f1:2f:e0:e7:28:72:74:6f:32:7c:ee:16:da:3d:26:7a:82:44: 5e:42:72:c5:32:cf:e4:6e:df:00:5f:4c:74:52:46:63:1a:a6: 74:87:0a:7b:23:e7:b3:92:87:62:ea:26:f3:2c:2c:a3:bd:62: e3:31:8a:28:61:42:d6:58:2f:a6:f7:f2:e4:fb:17:b0:ce:79: a1:6d:9c:bd:21:b1:df:ea:29:31:cf:c4:24:ac:c0:66:d8:c0: 67:b6:61:11:d0:c6:6e:7f:90:25:f1:bf:d0:1f:45:79:10:f0: 74:01:0c:2a:aa:29:49:0b:da:60:55:1a:75:ca:c6:68:b9:a7: 85:6f:05:26:49:49:aa:aa:7c:1c:c6:67:7e:6b:05:1d:9d:e7: fd:6c:31:2f:e3:fb:7b:58:09:28:bb:dd:88:d6:89:a9:9b:2f: 71:34:fd:ef:28:2c:90:53:bf:e1:06:1c:b2:1c:6a:e2:c6:ff: 38:4d:fd:98:1b:dc:a4:71:71:63:3a:58:4c:63:9d:77:86:c3: ed:00:f7:73:63:7f:a4:6b:1d:8e:c8:08:3d:85:78:46:d4:e8: 8d:a0:da:60:a8:74:0a:f3:1a:e8:5f:a5:c3:e7:90:1b:4e:0b: 89:1f:03:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUxMDE4MTk1NDQ4WhcNMjUxMDI1MTk1NDQ4WjAYMRYwFAYD VQQDEw02OGYzZjA4OS03OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1WQhJLPxtnOJw4oSIl7ZOxtLE+jj8W1qnZKRstnwND4uvXm16lypWvucXRG vgQHJQ/oYBD9SjRNQcLrT1tsW7PENnnYJYm74odtotFMozyxi/PwXHaddTmvo9i1 KVetH2vnQLsv7fXcVZlgB+JUBJ3DfmnNSmK5eHVz+PAlSfJY7ati/170j2mY6Qo7 yLHVFJsB94pE81dWyfW7WWxXxUaepUV8oivpCOTb+WWuJKbMyhrrKOvCl5klplor iGlmXdkAEJG2kJh6URRIzzOkY4+YnSUwi7afV0/9Dvj7IsE8fFnGDFZFDjnzpd/z 4Y5ZTheFMFcRsDVsTKe0OpvsCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDJ5L4r nmhyxowkDmLXG1APPgMgMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu4iEEeipSDVLxWUKbg5lm2OjxL+DnKHJ0bzJ87hbaPSZ6gkReQnLF Ms/kbt8AX0x0UkZjGqZ0hwp7I+ezkodi6ibzLCyjvWLjMYooYULWWC+m9/Lk+xew znmhbZy9IbHf6ikxz8QkrMBm2MBntmER0MZuf5Al8b/QH0V5EPB0AQwqqilJC9pg VRp1ysZouaeFbwUmSUmqqnwcxmd+awUdnef9bDEv4/t7WAkou92I1ompmy9xNP3v KCyQU7/hBhyyHGrixv84Tf2YG9ykcXFjOlhMY513hsPtAPdzY3+kax2OyAg9hXhG 1OiNoNpgqHQK8xroX6XD55AbTguJHwPa -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:19 2025 by rpki-client