$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: 7K1LKEN2zJHIAZrMRdjanIeSjW2t42TKfyZDL1qMQZA= Subject key identifier: 4F:F7:E1:A4:D0:91:68:8A:3B:70:6A:19:4C:AE:AF:9A:22:9C:50:3A Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: B1 Signing time: Sun 19 Oct 2025 09:13:56 +0000 Manifest this update: Sun 19 Oct 2025 09:13:56 +0000 Manifest next update: Sun 26 Oct 2025 09:13:56 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: 3kSjXm3x/3yLu4uXRZvPZgXQ/5OxTnI2eW1gj9O/ojw=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Oct 19 09:13:56 2025 GMT Not After : Oct 26 09:13:56 2025 GMT Subject: CN=68f4abd4-6268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:cd:64:3a:26:bf:0c:b6:e8:5a:12:fc:2e: a0:50:dd:6c:01:bb:74:9b:4e:e9:90:9e:5f:b2:ab: ef:2c:2c:dd:b4:a6:7b:c8:02:1c:3b:93:e2:3e:b6: ce:a7:ed:65:50:3b:f9:b2:c4:bc:06:fa:ac:b6:0b: 59:78:f4:c7:4f:cb:3c:55:f3:80:1a:f0:49:1f:97: 8f:1e:19:c0:76:5a:6d:e7:ea:f9:48:99:9e:c4:22: 83:e9:57:63:33:0b:93:aa:c2:9c:a1:0c:50:5a:78: 33:b8:d7:da:2f:c0:cb:7d:5f:4c:e5:e3:11:cd:a0: 83:71:e0:27:ca:d9:b4:96:93:0e:55:22:4c:88:2b: 0b:1c:7c:a8:35:73:0d:ba:fd:16:0e:c6:46:5d:a3: 2d:26:ed:66:d1:74:8e:23:85:dd:85:61:a3:72:1c: d4:14:4b:24:3c:6c:24:62:1c:5c:c7:4f:62:75:d1: 0e:24:30:54:7e:6b:8e:26:de:88:f4:c9:5c:88:6a: 63:d3:e2:c4:11:c4:a0:1a:b0:d8:f0:9d:a8:b7:80: b0:49:23:e1:4d:2c:fa:31:15:54:e0:a8:09:2d:b0: 58:80:d6:ee:28:55:2f:c6:90:75:12:53:72:0d:1e: 10:c1:04:25:d8:6a:01:2d:6c:8a:84:b2:5e:f1:47: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F7:E1:A4:D0:91:68:8A:3B:70:6A:19:4C:AE:AF:9A:22:9C:50:3A X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ba:ec:7b:c1:b9:f5:d4:63:5a:59:52:42:48:ec:7c:24:a8: 2f:9c:7a:a4:0a:12:1a:ae:2c:9d:94:e9:98:8e:f7:eb:44:20: 21:3e:9b:26:84:81:c2:09:e2:35:42:98:32:13:db:b3:fd:9c: 80:79:75:de:3f:6a:0f:1c:35:77:18:d6:83:b4:7a:51:05:97: dc:df:19:dc:25:3f:a1:d4:64:fd:72:4c:ae:37:26:bf:fc:20: fc:6d:b8:5e:ba:fe:e8:e8:84:cd:12:77:6c:32:1a:d4:ca:8d: c7:da:81:e4:7d:01:ad:ab:d7:d2:cb:62:e6:04:58:af:5f:5f: f4:77:d5:72:a4:33:29:34:54:9a:65:a5:93:50:fe:6d:97:1e: 4f:4f:1d:6c:69:66:76:a6:73:12:39:dd:29:71:cc:32:5d:4c: a6:1e:91:64:20:8f:24:a5:54:92:bc:a9:c2:6b:0b:18:f5:ff: d8:9c:3b:02:00:b7:c0:3d:d0:c9:07:ec:dd:f4:1b:cc:4c:97: e5:df:47:02:41:07:a7:5b:cf:6a:5c:9a:99:5d:41:f6:00:bd: 59:99:bf:bb:e4:b3:21:93:8a:88:d6:d1:9c:47:c1:26:09:43: 32:6f:79:d1:e3:06:d6:18:ab:71:68:b6:89:23:08:0d:53:8a: b8:9e:23:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjUxMDE5MDkxMzU2WhcNMjUxMDI2MDkxMzU2WjAYMRYwFAYD VQQDEw02OGY0YWJkNC02MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmo7NZDomvwy26FoS/C6gUN1sAbt0m07pkJ5fsqvvLCzdtKZ7yAIcO5PiPrbO p+1lUDv5ssS8BvqstgtZePTHT8s8VfOAGvBJH5ePHhnAdlpt5+r5SJmexCKD6Vdj MwuTqsKcoQxQWngzuNfaL8DLfV9M5eMRzaCDceAnytm0lpMOVSJMiCsLHHyoNXMN uv0WDsZGXaMtJu1m0XSOI4XdhWGjchzUFEskPGwkYhxcx09iddEOJDBUfmuOJt6I 9MlciGpj0+LEEcSgGrDY8J2ot4CwSSPhTSz6MRVU4KgJLbBYgNbuKFUvxpB1ElNy DR4QwQQl2GoBLWyKhLJe8UfnbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/34aTQ kWiKO3BqGUyur5oinFA6MB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0 dlYtZG1uTW9yMWcyTHJJc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbuux7wbn11GNaWVJCSOx8JKgvnHqkChIariydlOmYjvfrRCAhPpsm hIHCCeI1QpgyE9uz/ZyAeXXeP2oPHDV3GNaDtHpRBZfc3xncJT+h1GT9ckyuNya/ /CD8bbheuv7o6ITNEndsMhrUyo3H2oHkfQGtq9fSy2LmBFivX1/0d9VypDMpNFSa ZaWTUP5tlx5PTx1saWZ2pnMSOd0pccwyXUymHpFkII8kpVSSvKnCawsY9f/YnDsC ALfAPdDJB+zd9BvMTJfl30cCQQenW89qXJqZXUH2AL1Zmb+75LMhk4qI1tGcR8Em CUMyb3nR4wbWGKtxaLaJIwgNU4q4niOv -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:20 2025 by rpki-client