$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: uAfE5LlWnR1uPSzJsYMBUwPftO3uvWFJUB9RQeZF2v4= Subject key identifier: 9E:83:0C:EB:91:EF:7D:74:06:8B:63:A7:61:EE:F5:DE:AD:DD:51:70 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0960 Signing time: Sat 18 Oct 2025 21:12:27 +0000 Manifest this update: Sat 18 Oct 2025 21:12:26 +0000 Manifest next update: Sat 25 Oct 2025 21:12:26 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: GZ9uYayreX80lopbhT49h3zPc81FikTpWdJMXcAgv7A=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Oct 18 21:12:26 2025 GMT Not After : Oct 25 21:12:26 2025 GMT Subject: CN=68f402ba-c372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:f9:62:d9:6c:00:b7:bb:12:95:c5:9a:e6: 76:f6:2b:c4:c6:e5:d1:ac:d4:60:8b:69:2c:e6:32: b0:b7:85:e1:df:bf:5b:c9:df:1f:2d:e7:3d:66:eb: 4e:ee:3e:62:16:11:50:7b:f9:a9:2d:a8:3c:01:a7: 2e:6d:e5:d8:da:95:30:39:93:13:0f:86:26:3b:88: c0:5e:d5:52:0c:a7:ee:7c:4e:c3:9c:4f:8e:f0:fd: fa:b4:e9:5b:33:b9:a7:06:6e:54:00:46:09:c5:e9: ec:0e:79:50:83:7b:b0:9a:54:5e:ac:6c:67:11:0c: 0d:a7:02:f5:46:18:d7:5b:cd:fc:5c:f8:05:d5:13: af:b0:63:30:5b:8b:54:99:2b:44:2e:f7:2a:09:3e: eb:a6:a4:13:9b:53:5d:9a:db:6f:38:39:ca:30:47: f3:9c:00:42:54:cd:1c:56:64:8c:89:89:52:b9:4f: e8:84:38:92:8e:1e:42:e0:39:77:07:95:10:99:77: 3d:55:e9:7c:9d:c6:ff:ac:44:08:c8:36:7b:f8:55: dc:7e:ab:86:85:7b:b8:fd:03:3b:03:b5:17:6c:df: 9a:f5:00:7f:7f:f1:37:29:e6:97:be:c2:2f:2b:4c: fe:24:9f:be:24:8d:1a:49:6c:fc:9f:ee:9c:f3:a7: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:83:0C:EB:91:EF:7D:74:06:8B:63:A7:61:EE:F5:DE:AD:DD:51:70 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ee:d2:8c:f7:2f:b6:e1:04:aa:f6:38:58:73:ae:62:71:5f: 69:69:9f:39:da:1d:30:06:e3:2e:8e:d9:85:b2:b3:f7:08:0a: 04:c2:fa:34:24:c6:9c:e1:be:e4:a5:1e:67:49:15:b3:f3:0c: db:19:07:67:54:29:1f:55:ef:0b:11:fc:f0:0d:12:85:44:e1: 1c:4b:84:78:30:2e:d7:dd:f0:a2:43:26:1c:c8:98:e7:20:65: 11:44:54:ca:4e:8a:a6:e7:50:85:30:3e:7a:54:1c:fa:8b:86: 79:c0:36:85:66:cb:36:1e:f3:a0:60:91:de:51:e4:c0:a1:83: 71:53:5f:af:33:2d:b0:31:2f:05:b8:64:c3:74:04:5d:ba:39: b2:8a:62:ae:3d:9f:ba:72:3f:ee:75:25:d4:c8:2f:b0:e7:fb: 03:36:06:6f:8c:f9:8f:17:d4:61:41:a4:3a:79:54:75:97:ad: 8f:27:7a:be:34:f4:3b:f6:7d:b0:59:af:94:f1:fb:da:5c:09: bf:6e:f6:2e:a0:86:1c:83:ac:79:df:cb:02:6e:e7:36:0c:28: 9e:ce:f3:7a:6f:62:d3:d6:81:85:f2:02:2d:c8:7a:80:25:12: 3d:fc:47:4a:f0:03:89:9e:b4:59:f1:6e:fe:bf:51:f1:a5:f7: ab:80:1d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUxMDE4MjExMjI2WhcNMjUxMDI1MjExMjI2WjAYMRYwFAYD VQQDEw02OGY0MDJiYS1jMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uD5YtlsALe7EpXFmuZ29ivExuXRrNRgi2ks5jKwt4Xh379byd8fLec9ZutO 7j5iFhFQe/mpLag8AacubeXY2pUwOZMTD4YmO4jAXtVSDKfufE7DnE+O8P36tOlb M7mnBm5UAEYJxensDnlQg3uwmlRerGxnEQwNpwL1RhjXW838XPgF1ROvsGMwW4tU mStELvcqCT7rpqQTm1NdmttvODnKMEfznABCVM0cVmSMiYlSuU/ohDiSjh5C4Dl3 B5UQmXc9Vel8ncb/rEQIyDZ7+FXcfquGhXu4/QM7A7UXbN+a9QB/f/E3KeaXvsIv K0z+JJ++JI0aSWz8n+6c86dfbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6DDOuR 7310Botjp2Hu9d6t3VFwMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe7tKM9y+24QSq9jhYc65icV9paZ852h0wBuMujtmFsrP3CAoEwvo0 JMac4b7kpR5nSRWz8wzbGQdnVCkfVe8LEfzwDRKFROEcS4R4MC7X3fCiQyYcyJjn IGURRFTKToqm51CFMD56VBz6i4Z5wDaFZss2HvOgYJHeUeTAoYNxU1+vMy2wMS8F uGTDdARdujmyimKuPZ+6cj/udSXUyC+w5/sDNgZvjPmPF9RhQaQ6eVR1l62PJ3q+ NPQ79n2wWa+U8fvaXAm/bvYuoIYcg6x538sCbuc2DCiezvN6b2LT1oGF8gItyHqA JRI9/EdK8AOJnrRZ8W7+v1HxpfergB0l -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:32 2025 by rpki-client