$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: xY1icccMFPN3QcoPyYNr7sHCIihHLZI7aBaskn4uvhw= Subject key identifier: DE:02:26:1C:1D:F9:2C:FB:F7:00:CB:C1:2A:33:B9:1E:01:A0:B6:3C Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 130C Signing time: Sat 18 Oct 2025 20:56:17 +0000 Manifest this update: Sat 18 Oct 2025 20:56:16 +0000 Manifest next update: Sat 25 Oct 2025 20:56:16 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: XgfKuPE09xLe6RDAuo8X9YH75YcYAQApns3nFFayMM0=) 2: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: kJ2W8ZtT3EcqQ65yuXA6cG7VqVTYhapLGWIeTZI80LI=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=) 4: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: fPmtLcUFfqmnk0wi645J2lDvp8Mqyw6eXt3q3C30cuA=) 5: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Oct 18 20:56:16 2025 GMT Not After : Oct 25 20:56:16 2025 GMT Subject: CN=68f3fef1-75c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:60:ac:4e:f0:ee:f9:50:25:46:29:16:ac: 80:ef:b7:72:7b:40:26:cb:6f:52:56:26:89:6d:9f: 4f:34:b4:ab:cb:05:49:83:b1:15:00:83:e6:a0:0b: b1:18:88:fe:5e:61:54:10:62:11:72:fe:4a:00:56: 37:15:74:02:8b:6b:40:3b:19:06:e7:bb:bb:e5:5f: 32:b0:ce:21:c8:24:e0:06:e8:f0:55:82:cb:a7:26: 2a:57:47:6a:5e:d4:73:7b:7c:b9:1f:f0:31:41:8e: e8:7f:1a:ad:a5:cd:b8:54:6f:1c:a4:4c:42:df:2f: bc:ad:2f:50:66:9a:2b:91:d2:e2:90:64:c5:03:4f: 2d:76:f0:65:c7:01:d3:c1:73:96:45:64:ab:97:43: 2f:d5:87:d3:25:51:d0:69:7c:b7:46:c8:0e:64:cb: 6b:5d:2e:80:08:4a:10:af:a8:52:30:64:fe:75:0e: a7:4f:cf:d8:bc:af:bd:9b:34:f4:f5:d1:11:da:71: 82:12:42:c2:80:31:45:e9:4a:e3:4d:af:6e:f1:b4: 8b:3e:70:ec:a1:61:54:33:10:06:72:86:e6:0f:4b: e5:f3:4e:eb:55:b6:11:f2:76:2e:e2:36:9a:d6:38: 76:e5:90:54:e9:e9:60:d6:1e:e7:3e:69:59:5f:07: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:02:26:1C:1D:F9:2C:FB:F7:00:CB:C1:2A:33:B9:1E:01:A0:B6:3C X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:26:92:cd:9e:7d:49:7c:f5:33:d9:54:ee:57:d6:aa:f3:3e: 27:27:95:5f:1f:cc:d5:ae:aa:e1:bb:bb:26:2a:4b:2f:b7:cb: bd:e5:db:b5:d0:27:6f:ff:c3:9f:97:4f:52:95:35:df:e3:51: bd:ff:6b:e2:b9:c9:7d:79:07:61:a4:7f:45:f2:e3:1a:82:2e: 7a:d4:34:64:d1:64:8a:c7:ed:fd:c4:78:d9:20:b7:d2:76:ff: 8b:96:12:aa:92:2c:f1:78:cb:91:38:e6:de:4f:40:78:c2:69: f0:2d:d0:01:f8:dc:53:ff:fd:b9:40:0d:5d:e6:3c:6a:e4:72: 12:c2:30:f9:36:66:9c:d2:80:5e:fa:fc:80:2c:c2:0f:c2:bb: 54:f3:1c:f9:39:f2:0b:df:7b:bd:05:0c:3f:20:9f:32:34:a0: 45:4b:ee:2a:29:34:6b:f6:72:2b:17:5e:1d:7e:02:1d:4d:1c: 15:e7:c5:d9:e4:be:6b:95:52:75:c2:2d:0e:b2:ce:31:87:25: bb:03:cf:68:c9:70:50:aa:c9:9f:28:32:e8:10:1f:4b:ad:2c: eb:e9:c3:61:42:2a:19:98:a3:b5:09:88:12:cd:61:40:14:5a: 8c:dd:be:49:d6:66:af:bb:5c:f7:f3:30:57:5f:d0:ad:61:1c: f5:93:ef:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUxMDE4MjA1NjE2WhcNMjUxMDI1MjA1NjE2WjAYMRYwFAYD VQQDEw02OGYzZmVmMS03NWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrpgrE7w7vlQJUYpFqyA77dye0Amy29SViaJbZ9PNLSrywVJg7EVAIPmoAux GIj+XmFUEGIRcv5KAFY3FXQCi2tAOxkG57u75V8ysM4hyCTgBujwVYLLpyYqV0dq XtRze3y5H/AxQY7ofxqtpc24VG8cpExC3y+8rS9QZporkdLikGTFA08tdvBlxwHT wXOWRWSrl0Mv1YfTJVHQaXy3RsgOZMtrXS6ACEoQr6hSMGT+dQ6nT8/YvK+9mzT0 9dER2nGCEkLCgDFF6UrjTa9u8bSLPnDsoWFUMxAGcobmD0vl807rVbYR8nYu4jaa 1jh25ZBU6elg1h7nPmlZXwdzWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4CJhwd +Sz79wDLwSozuR4BoLY8MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0JpLNnn1JfPUz2VTuV9aq8z4nJ5VfH8zVrqrhu7smKksvt8u95du1 0Cdv/8Ofl09SlTXf41G9/2viucl9eQdhpH9F8uMagi561DRk0WSKx+39xHjZILfS dv+LlhKqkizxeMuROObeT0B4wmnwLdAB+NxT//25QA1d5jxq5HISwjD5Nmac0oBe +vyALMIPwrtU8xz5OfIL33u9BQw/IJ8yNKBFS+4qKTRr9nIrF14dfgIdTRwV58XZ 5L5rlVJ1wi0Oss4xhyW7A89oyXBQqsmfKDLoEB9LrSzr6cNhQioZmKO1CYgSzWFA FFqM3b5J1mavu1z38zBXX9CtYRz1k+9j -----END CERTIFICATE-----Generated at Mon Oct 20 04:48:05 2025 by rpki-client