$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft File: sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json) Hash identifier: 9It1SMULqBr6dwPLV4j/f3QoOCtX5rn4/rZAxv849SI= Subject key identifier: 4F:92:FF:A6:77:CA:64:6C:6B:B9:5A:B3:9D:79:82:F0:BD:3A:50:EA Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 Certificate issuer: /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft Manifest number: 44 Signing time: Sun 19 Oct 2025 10:53:59 +0000 Manifest this update: Sun 19 Oct 2025 10:53:58 +0000 Manifest next update: Sun 26 Oct 2025 10:53:58 +0000 Files and hashes: 1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: X8up3U1sC8tg3goO9P641WUqiiBuFtwpXpoN+SE6Iko=) 2: D6E8451C889611F0B5CFE458C4F9AE02.roa (hash: o6qskbuLkzt0B6DeqPyqMtn3vK2zO8Pni4GeYykc/7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Validity Not Before: Oct 19 10:53:58 2025 GMT Not After : Oct 26 10:53:58 2025 GMT Subject: CN=68f4c346-cabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:c4:0a:34:8e:2e:b6:93:f2:95:8a:8d:c5: a3:d0:44:f9:b2:9a:a0:d7:1e:23:8e:8f:70:73:c1: c2:51:f4:2b:c0:12:82:57:51:68:4c:a9:1f:f0:aa: 20:1b:b8:69:33:37:45:7b:00:92:3e:6f:b8:fa:64: 6a:18:7e:c7:8a:0c:2f:e3:e1:c0:ab:cc:a6:0c:f2: d6:e0:ce:a2:27:31:32:20:39:b6:95:0f:bd:37:c2: d4:b3:45:01:74:35:eb:ca:f2:12:2a:db:f9:3b:75: 1e:2a:08:5f:c6:dd:d0:12:fa:cd:9e:fb:02:b0:17: 33:9b:3a:4f:37:e8:7b:9e:8f:b6:5e:df:be:42:00: 98:bc:b5:ee:91:5b:35:d6:f2:0f:ab:c6:29:e0:31: d7:98:c7:97:28:d2:3a:47:47:a6:f4:5a:4e:f5:3f: cf:7a:a2:5e:59:21:3e:ec:7d:e7:cd:60:75:d6:8b: 59:56:26:93:a9:70:dc:40:67:b9:5c:aa:ab:56:05: cf:47:a3:6d:00:58:a2:be:2e:5b:23:23:04:68:74: 5a:3d:82:9d:fa:5b:42:21:5d:80:b3:65:ec:25:7b: f7:4c:85:f3:64:aa:fe:0e:88:b6:3d:cb:12:7d:93: 78:06:46:97:41:23:02:e8:4a:8d:d0:c9:cd:a5:32: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:92:FF:A6:77:CA:64:6C:6B:B9:5A:B3:9D:79:82:F0:BD:3A:50:EA X509v3 Authority Key Identifier: keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:66:56:91:97:98:7e:61:a7:6c:c3:8f:6c:ee:6c:cb:75:54: 55:30:a7:73:5a:dd:0d:f1:e0:c6:36:0d:02:a0:89:39:e7:b5: 1c:9d:8e:9f:54:86:35:ad:f5:a9:89:70:80:29:c6:15:1b:b8: cb:e9:46:19:9e:2b:1b:8f:21:e9:aa:bf:1b:90:87:c9:86:e6: 05:af:6e:e8:cb:ec:5c:33:f3:ce:c8:d1:a0:21:32:b5:70:b8: ab:53:b7:2b:d7:a6:21:08:9b:fb:64:f0:9b:59:13:5a:09:dc: c0:d5:f1:ed:c8:09:11:0b:9e:26:56:57:3e:a0:e7:cb:0f:86: 8e:5c:1d:4d:d5:4b:d7:aa:9c:e9:dd:4c:7a:5b:93:78:b9:7d: d3:f1:c0:52:fa:25:fe:b6:4f:20:65:35:f0:ba:4f:dd:70:f2: b5:29:a7:2e:e3:db:16:a5:06:58:49:c9:23:65:f3:6c:18:38: 13:26:21:a5:dd:9c:42:08:ca:64:68:a5:d4:c7:40:7f:b8:45: ba:9c:02:bc:b3:58:4a:ee:28:6f:0b:96:8e:1c:8d:59:76:c6: bf:6a:3e:b8:b0:cf:1d:76:52:e5:6a:47:cf:c4:38:15:5b:c6: 6c:ad:fb:d3:7d:24:3f:41:93:e0:bb:28:32:94:e8:dc:70:b0: 65:52:47:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoQjE1QjQwNTdBQjUwOTZCMzI0QUJDQjFDN0YwMjdCNkZB MzY2QzhENTAeFw0yNTEwMTkxMDUzNThaFw0yNTEwMjYxMDUzNThaMBgxFjAUBgNV BAMTDTY4ZjRjMzQ2LWNhYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCifcQKNI4utpPylYqNxaPQRPmymqDXHiOOj3BzwcJR9CvAEoJXUWhMqR/wqiAb uGkzN0V7AJI+b7j6ZGoYfseKDC/j4cCrzKYM8tbgzqInMTIgObaVD703wtSzRQF0 NevK8hIq2/k7dR4qCF/G3dAS+s2e+wKwFzObOk836Huej7Ze375CAJi8te6RWzXW 8g+rxingMdeYx5co0jpHR6b0Wk71P896ol5ZIT7sfefNYHXWi1lWJpOpcNxAZ7lc qqtWBc9Ho20AWKK+LlsjIwRodFo9gp36W0IhXYCzZewle/dMhfNkqv4OiLY9yxJ9 k3gGRpdBIwLoSo3Qyc2lMh/TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT5L/pnfK ZGxruVqznXmC8L06UOowHwYDVR0jBBgwFoAUsVtAV6tQlrMkq8scfwJ7b6NmyNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0MyN0UzNzk2NEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJNa3E4c2Nmd0o3YjZObXlO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1Z0QVY2dFFsck1rcThzY2Z3SjdiNk5teU5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QThCL0MyN0UzNzk2NEI4MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJN a3E4c2Nmd0o3YjZObXlOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABtmVpGXmH5hp2zDj2zubMt1VFUwp3Na3Q3x4MY2DQKgiTnntRydjp9U hjWt9amJcIApxhUbuMvpRhmeKxuPIemqvxuQh8mG5gWvbujL7Fwz887I0aAhMrVw uKtTtyvXpiEIm/tk8JtZE1oJ3MDV8e3ICRELniZWVz6g58sPho5cHU3VS9eqnOnd THpbk3i5fdPxwFL6Jf62TyBlNfC6T91w8rUppy7j2xalBlhJySNl82wYOBMmIaXd nEIIymRopdTHQH+4RbqcAryzWEruKG8Llo4cjVl2xr9qPriwzx12UuVqR8/EOBVb xmyt+9N9JD9Bk+C7KDKU6NxwsGVSRyg= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:48 2025 by rpki-client