$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json) Hash identifier: fYje3H3CZV/VX7OkCXkZgGZXUYBkdhE+yxiiB1JPgVw= Subject key identifier: B1:33:42:9B:EB:DF:2C:E8:A7:80:5F:B4:D3:37:D6:CC:19:C6:17:93 Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft Manifest number: 01C5 Signing time: Sun 19 Oct 2025 05:36:58 +0000 Manifest this update: Sun 19 Oct 2025 05:36:58 +0000 Manifest next update: Sun 26 Oct 2025 05:36:58 +0000 Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: XVy7ACayboBRuVOHf+PkBC75qUY8RTHG9Z2uqS2PT5o=) 2: BE9200CE66F511F09788007CC4F9AE02.roa (hash: aHZleMFaFRc6KiAJteLYV0M6bGb3RfGWFtdzpUjd47Y=) 3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Validity Not Before: Oct 19 05:36:58 2025 GMT Not After : Oct 26 05:36:58 2025 GMT Subject: CN=68f478fa-11f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:62:e5:8f:2a:86:ba:63:1e:9b:da:32:a7: 95:1c:1a:3a:d8:00:fc:9f:d7:0c:f9:25:e1:ed:03: 5b:b9:6a:f4:fe:0a:bf:0d:c4:35:c9:c9:ef:bc:03: 6f:db:3c:42:c9:53:4d:35:70:54:b3:27:91:1e:f0: 56:07:7f:99:32:0a:92:5c:c8:3d:4d:a3:8b:02:3f: 85:43:d9:54:92:f8:71:cd:02:d2:89:d1:d9:1a:ce: 19:3a:7a:fa:71:33:34:a8:6d:5d:ae:3c:79:7c:bc: 13:8f:d6:1f:1c:f8:93:80:31:a2:2a:91:51:b9:aa: 2d:f1:52:d3:41:6b:1f:5f:2b:a9:4f:e1:50:80:02: cf:2e:e9:29:6e:56:10:d1:bb:9a:bb:e7:f5:24:fb: 1b:fb:f1:80:fe:70:34:84:07:5f:4f:39:1f:4c:e4: 3a:b5:70:dd:b3:9b:35:8e:4c:60:fb:d9:e3:75:c9: 8b:e0:dd:b3:b6:78:a1:6d:d9:ab:e8:ee:ab:dc:d7: 33:80:83:5a:11:b2:a5:d4:e6:32:80:43:3c:ee:e1: 3b:7f:ec:c1:5d:e7:d0:3a:54:8f:c8:24:e2:56:dd: 06:18:dc:e8:2b:bd:5f:bf:72:ec:55:00:b4:b7:d1: 2f:3c:24:84:73:04:99:f3:01:2d:35:91:04:84:dd: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:33:42:9B:EB:DF:2C:E8:A7:80:5F:B4:D3:37:D6:CC:19:C6:17:93 X509v3 Authority Key Identifier: keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:99:f4:fa:9a:57:cb:6f:88:ad:49:c6:52:dc:d7:18:9b:95: 4c:ac:e6:48:00:9c:eb:21:56:6e:b7:4c:71:08:ae:f2:4e:79: 7c:10:93:7b:a5:67:46:04:25:80:68:a2:96:49:25:d0:e5:35: 06:2f:a2:06:c4:c4:2f:91:d6:ef:73:20:b9:8d:3d:fd:c7:3f: 59:52:a7:7b:12:12:54:0f:b8:b3:93:98:87:52:8c:96:c8:a7: a7:36:2e:d1:2a:6c:31:d1:1f:4a:26:3c:f1:5c:d3:79:06:66: 1e:13:fb:8c:fd:23:7a:6c:af:a5:e6:9b:0e:54:73:1f:3b:35: 7d:c3:b2:b4:a6:49:c9:a1:08:9d:c4:63:9e:28:d0:53:4e:da: f5:1b:8a:26:fa:e8:e6:d0:fb:2d:d5:70:88:50:49:31:e5:4d: 5b:cd:44:01:f5:c6:fe:77:57:ed:b2:5b:4f:d4:b0:fa:12:34: f2:14:23:8b:1c:3c:02:4b:2c:94:cc:61:6c:73:c4:7b:09:59: b9:b5:c7:65:28:fa:3f:11:4d:73:bf:56:4c:9d:83:10:28:bb: ab:bc:27:de:ed:31:14:e0:e3:23:f6:de:d1:fb:59:77:99:49: d6:02:30:8a:7e:e9:d4:57:b2:90:b6:3e:01:eb:46:2e:c6:2f: 37:b2:65:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0 RjZFRDJFNEEwHhcNMjUxMDE5MDUzNjU4WhcNMjUxMDI2MDUzNjU4WjAYMRYwFAYD VQQDEw02OGY0NzhmYS0xMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA035i5Y8qhrpjHpvaMqeVHBo62AD8n9cM+SXh7QNbuWr0/gq/DcQ1ycnvvANv 2zxCyVNNNXBUsyeRHvBWB3+ZMgqSXMg9TaOLAj+FQ9lUkvhxzQLSidHZGs4ZOnr6 cTM0qG1drjx5fLwTj9YfHPiTgDGiKpFRuaot8VLTQWsfXyupT+FQgALPLukpblYQ 0buau+f1JPsb+/GA/nA0hAdfTzkfTOQ6tXDds5s1jkxg+9njdcmL4N2ztnihbdmr 6O6r3NczgINaEbKl1OYygEM87uE7f+zBXefQOlSPyCTiVt0GGNzoK71fv3LsVQC0 t9EvPCSEcwSZ8wEtNZEEhN1eqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEzQpvr 3yzop4BftNM31swZxheTMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f a0hPMUZNbkx2c05QYnRMa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7mfT6mlfLb4itScZS3NcYm5VMrOZIAJzrIVZut0xxCK7yTnl8EJN7 pWdGBCWAaKKWSSXQ5TUGL6IGxMQvkdbvcyC5jT39xz9ZUqd7EhJUD7izk5iHUoyW yKenNi7RKmwx0R9KJjzxXNN5BmYeE/uM/SN6bK+l5psOVHMfOzV9w7K0pknJoQid xGOeKNBTTtr1G4om+ujm0Pst1XCIUEkx5U1bzUQB9cb+d1ftsltP1LD6EjTyFCOL HDwCSyyUzGFsc8R7CVm5tcdlKPo/EU1zv1ZMnYMQKLurvCfe7TEU4OMj9t7R+1l3 mUnWAjCKfunUV7KQtj4B60Yuxi83smXD -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:14 2025 by rpki-client