$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: GBfNsUkA6mcBC67dEO+tHMzvsbhHTTrFdnhEHRaMHVM= Subject key identifier: 5D:0F:7E:88:FA:3E:52:8E:5D:D4:C5:02:DD:48:09:5A:91:B2:70:A7 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0FBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0FB4 Signing time: Sat 18 Oct 2025 18:06:11 +0000 Manifest this update: Sat 18 Oct 2025 18:06:10 +0000 Manifest next update: Sat 25 Oct 2025 18:06:10 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: 9pez/lTqnaxElo0WV1rsWWlBt0iKuGHJVQWKgJ0ihMY=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Oct 18 18:06:10 2025 GMT Not After : Oct 25 18:06:10 2025 GMT Subject: CN=68f3d713-8b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:bc:60:c6:f8:53:cc:4f:ca:35:9f:28:75: fd:23:06:ee:42:9a:f1:82:76:0c:a5:de:6c:d6:ae: 6a:47:f9:71:28:a9:78:d9:de:a6:1a:66:cb:3b:4b: f7:c1:38:51:e6:08:e8:02:b1:4e:a8:34:31:f7:5f: ab:ad:a8:e0:01:b7:87:8b:61:d8:fb:05:0f:a7:cc: c5:54:48:62:d7:94:73:f7:83:f0:e8:ba:1f:f6:4f: 28:88:bc:36:f6:0e:8d:6a:30:b1:a6:d8:e7:8f:53: d1:b8:ca:96:db:c6:41:f2:16:b7:dc:f0:a7:70:f5: 62:46:a5:a8:da:67:93:23:6c:75:c1:5d:76:d1:6f: 28:88:9b:b4:b5:de:73:9f:bd:9c:3e:a1:8a:57:6e: 18:9e:86:60:f6:06:37:7f:98:66:b6:60:5c:92:de: 72:ea:d4:3e:cc:a8:c4:0f:81:c5:08:6e:3b:88:9e: 4e:56:b7:bd:55:a5:d5:cd:a9:83:a6:5f:4f:52:18: f4:cd:c5:35:ee:d4:7d:f9:af:20:08:6d:83:14:44: 24:fa:b0:e5:c1:64:bb:bb:fa:95:ca:8e:35:d2:ce: 6c:c2:fb:9e:45:f1:5a:62:b1:e0:39:52:8b:41:4f: 01:8a:c0:e2:e8:6e:30:b0:99:60:fc:03:31:80:14: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0F:7E:88:FA:3E:52:8E:5D:D4:C5:02:DD:48:09:5A:91:B2:70:A7 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:93:ee:61:d9:3b:d3:04:be:65:32:23:0f:05:09:7a:ac:76: 87:17:f8:3d:56:57:73:11:0f:33:ac:61:b7:5e:6c:0c:51:f7: 10:87:49:e0:9d:d6:6d:2a:06:6a:a6:b0:ca:4a:f1:4f:77:f2: 92:d9:15:26:5c:78:a9:3a:3c:7e:2d:d3:f6:40:29:8a:ac:ad: 36:cd:a0:45:08:f8:0a:77:d3:64:cb:61:e4:cb:50:be:f3:f3: 7d:5e:e3:7b:ca:f0:cf:f4:a1:0b:9c:45:bb:5a:2d:35:6c:b9: 23:ff:ef:76:a6:9d:17:06:a9:00:78:40:4b:c5:1b:a1:e7:3a: 8a:5a:cd:63:5b:a6:56:c0:02:24:a3:12:f5:b3:6d:3d:ba:34: 00:31:1c:33:bd:34:0d:c2:01:90:34:fa:23:fa:9a:6a:86:1c: f3:e1:19:a0:e4:7c:ba:2a:ce:8d:85:8f:a4:38:2d:81:2a:14: 6a:c8:7d:b0:ce:5a:82:0b:c1:1d:e8:09:03:34:e9:56:7f:3a: 9d:bc:06:35:6e:ac:be:d9:c5:58:04:58:03:34:98:f6:89:d8: 24:06:a0:1f:75:c5:cf:f2:42:3a:8f:a9:e3:3d:cb:4e:64:c6: 34:7d:bf:0a:7f:8e:3c:e9:ec:93:01:6b:d3:7a:ae:02:27:d2: 1a:a1:5b:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUxMDE4MTgwNjEwWhcNMjUxMDI1MTgwNjEwWjAYMRYwFAYD VQQDEw02OGYzZDcxMy04YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9i8YMb4U8xPyjWfKHX9IwbuQprxgnYMpd5s1q5qR/lxKKl42d6mGmbLO0v3 wThR5gjoArFOqDQx91+rrajgAbeHi2HY+wUPp8zFVEhi15Rz94Pw6Lof9k8oiLw2 9g6NajCxptjnj1PRuMqW28ZB8ha33PCncPViRqWo2meTI2x1wV120W8oiJu0td5z n72cPqGKV24YnoZg9gY3f5hmtmBckt5y6tQ+zKjED4HFCG47iJ5OVre9VaXVzamD pl9PUhj0zcU17tR9+a8gCG2DFEQk+rDlwWS7u/qVyo410s5swvueRfFaYrHgOVKL QU8BisDi6G4wsJlg/AMxgBQHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0Pfoj6 PlKOXdTFAt1ICVqRsnCnMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZk+5h2TvTBL5lMiMPBQl6rHaHF/g9VldzEQ8zrGG3XmwMUfcQh0ng ndZtKgZqprDKSvFPd/KS2RUmXHipOjx+LdP2QCmKrK02zaBFCPgKd9Nky2Hky1C+ 8/N9XuN7yvDP9KELnEW7Wi01bLkj/+92pp0XBqkAeEBLxRuh5zqKWs1jW6ZWwAIk oxL1s209ujQAMRwzvTQNwgGQNPoj+ppqhhzz4Rmg5Hy6Ks6NhY+kOC2BKhRqyH2w zlqCC8Ed6AkDNOlWfzqdvAY1bqy+2cVYBFgDNJj2idgkBqAfdcXP8kI6j6njPctO ZMY0fb8Kf4486eyTAWvTeq4CJ9IaoVva -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:04 2025 by rpki-client