$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: Miz3cYlsVFWnAQV3Sbi7B06fnBZpJV9hIM2+yvqN9hk= Subject key identifier: 91:A6:4A:FB:17:90:08:9D:22:B8:A1:B4:02:05:C3:4C:06:FC:4E:0D Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 12D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 12AF Signing time: Sat 18 Oct 2025 17:34:54 +0000 Manifest this update: Sat 18 Oct 2025 17:34:53 +0000 Manifest next update: Sat 25 Oct 2025 17:34:53 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: E0yzAQJZcqM4hdFUV8Ajhs7fVvGcxxemZ+ltd3c92mA=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4820 (0x12d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Oct 18 17:34:53 2025 GMT Not After : Oct 25 17:34:53 2025 GMT Subject: CN=68f3cfbe-2bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:b2:42:fd:39:0e:8f:92:eb:d7:7e:59:29: 82:01:e0:a0:f8:a5:cd:48:dd:bf:4a:2a:0a:d5:22: 04:f6:65:d3:5c:c0:2b:f7:1f:97:67:09:0b:80:8c: 51:f0:65:05:04:94:4e:19:90:d6:01:10:50:18:94: 74:e8:7d:40:a6:09:2c:8a:ad:5a:f7:4c:b3:37:ec: 03:5f:d9:48:1e:bd:33:75:fa:b3:ea:5d:cf:73:29: 3f:3d:04:19:1d:47:44:66:09:72:ef:f1:c5:2f:d8: 3d:82:2a:18:6d:dc:a8:c8:c1:99:5d:d4:8b:75:c3: da:6f:2e:85:eb:1a:ea:d9:17:5d:d9:e6:3d:09:d3: 55:dd:d4:45:82:a9:f4:96:7a:be:e3:f7:86:77:c0: 6a:16:53:88:ed:80:e7:ac:7e:a3:2c:6a:11:17:6b: d7:b1:13:c1:82:01:db:54:bf:47:e1:dc:b1:84:03: 4a:cf:a8:5b:f5:13:ac:cf:b5:5a:78:ee:04:49:97: f4:47:fa:7b:5d:88:a0:80:f7:47:b1:11:ae:7f:d0: 44:51:a1:f6:49:d6:82:5a:20:30:01:57:08:c4:01: 4c:54:69:49:06:ba:74:2a:90:d4:2f:d4:e0:1a:67: 0f:04:a3:9d:c0:d5:74:03:75:63:5f:aa:34:d3:2b: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A6:4A:FB:17:90:08:9D:22:B8:A1:B4:02:05:C3:4C:06:FC:4E:0D X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:20:57:68:a8:78:a8:f1:f7:7f:84:c2:23:c9:7c:a8:20:fe: f0:46:26:72:d8:26:fd:fa:ec:bb:a9:57:c9:c7:3d:47:2e:4f: 26:8d:be:3d:08:ef:47:dc:e2:c2:f5:45:84:ad:c2:4b:fa:21: a3:48:82:d5:03:31:0f:3f:02:53:d8:5b:5e:a2:1a:c5:9a:54: 91:76:77:48:52:ac:35:a9:c4:dc:7b:50:9f:5b:18:67:e1:62: 46:1b:45:bf:f9:ae:22:f6:a1:4e:74:54:ad:0b:9f:65:56:82: b8:cc:2a:25:a2:97:9c:27:a9:17:f7:58:83:b8:fb:19:4c:54: ac:24:0b:98:5c:f3:5c:d8:65:a1:22:ca:f0:83:15:a4:14:3b: 31:f9:1e:e3:32:c8:96:1f:42:d8:85:74:31:21:51:89:73:6c: 78:29:9b:25:eb:ab:7c:8c:09:f1:10:dc:3a:d1:f5:9e:d6:b9: 72:1c:9e:70:ce:2a:38:a6:90:f4:14:a9:a8:a8:cd:b9:44:38: e0:6e:ba:92:86:06:04:28:ce:8d:d0:49:ff:85:90:56:ce:a1: 1e:d8:4a:d4:3d:7f:19:ae:fb:cc:20:1e:c3:e3:ea:fa:7d:c0: b8:f1:cc:bf:9f:d2:df:1d:ba:b0:27:ee:c5:ec:c3:8c:23:18: 0c:a6:98:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUxMDE4MTczNDUzWhcNMjUxMDI1MTczNDUzWjAYMRYwFAYD VQQDEw02OGYzY2ZiZS0yYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC2yQv05Do+S69d+WSmCAeCg+KXNSN2/SioK1SIE9mXTXMAr9x+XZwkLgIxR 8GUFBJROGZDWARBQGJR06H1Apgksiq1a90yzN+wDX9lIHr0zdfqz6l3Pcyk/PQQZ HUdEZgly7/HFL9g9gioYbdyoyMGZXdSLdcPaby6F6xrq2Rdd2eY9CdNV3dRFgqn0 lnq+4/eGd8BqFlOI7YDnrH6jLGoRF2vXsRPBggHbVL9H4dyxhANKz6hb9ROsz7Va eO4ESZf0R/p7XYiggPdHsRGuf9BEUaH2SdaCWiAwAVcIxAFMVGlJBrp0KpDUL9Tg GmcPBKOdwNV0A3VjX6o00ytifQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGmSvsX kAidIrihtAIFw0wG/E4NMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMIFdoqHio8fd/hMIjyXyoIP7wRiZy2Cb9+uy7qVfJxz1HLk8mjb49 CO9H3OLC9UWErcJL+iGjSILVAzEPPwJT2FteohrFmlSRdndIUqw1qcTce1CfWxhn 4WJGG0W/+a4i9qFOdFStC59lVoK4zColopecJ6kX91iDuPsZTFSsJAuYXPNc2GWh IsrwgxWkFDsx+R7jMsiWH0LYhXQxIVGJc2x4KZsl66t8jAnxENw60fWe1rlyHJ5w zio4ppD0FKmoqM25RDjgbrqShgYEKM6N0En/hZBWzqEe2ErUPX8ZrvvMIB7D4+r6 fcC48cy/n9LfHbqwJ+7F7MOMIxgMppjw -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:50 2025 by rpki-client