$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: FdoGY6I6nEH6HDYp+bLzriqryud4jnIvhcWwoIe4yrQ= Subject key identifier: 9A:72:70:81:26:A3:C8:18:C6:C0:E0:1A:60:96:2B:C4:A0:E5:40:7E Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0DF7 Signing time: Sat 18 Oct 2025 18:31:00 +0000 Manifest this update: Sat 18 Oct 2025 18:30:59 +0000 Manifest next update: Sat 25 Oct 2025 18:30:59 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: 6Ogm1aGBYurr/eEx1mEBO+WWSD+Mos4UTtYiEhB7alU=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Oct 18 18:30:59 2025 GMT Not After : Oct 25 18:30:59 2025 GMT Subject: CN=68f3dce4-30e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:e1:b2:29:a5:75:8d:20:7e:05:13:50:ad: 4b:bd:15:f9:69:a5:dd:b7:62:0f:2f:ca:d8:dc:44: 67:14:21:fb:75:ec:1c:87:5c:4b:88:92:6f:c0:6b: c5:8d:e0:99:d5:84:bf:98:10:14:f9:83:91:18:e9: 5b:ea:59:e0:4c:8a:4b:b4:ce:8e:16:9a:de:f2:41: 7e:c0:3d:49:0a:c3:14:68:36:67:e6:09:6a:4f:11: 13:79:2e:ac:f3:c6:93:d7:69:12:fe:f6:a8:54:40: 19:57:28:c2:04:be:d5:1a:89:3a:d9:3c:a5:99:2f: 87:e6:32:ec:ca:b6:18:fd:f7:80:d8:d0:e3:44:9f: 14:db:9f:b2:45:73:f7:38:72:33:75:0a:bc:84:a0: 49:4a:9d:29:62:b2:7d:ec:24:77:64:0a:ee:c7:d2: 9d:10:c4:0e:d2:d3:80:2e:6c:6d:cf:6c:57:15:c8: 0c:5d:12:4b:68:11:97:f4:39:d9:b9:2f:7c:31:4e: 3f:e8:16:fd:21:e1:95:c8:75:6a:87:d6:49:69:29: be:ba:25:4d:f2:22:b9:d0:48:ed:d0:e2:9d:a5:b6: eb:62:f8:0f:7c:8d:75:9b:8f:10:89:6f:bf:d3:e0: 57:7e:fb:dc:88:32:74:15:5b:93:93:40:ca:7a:1f: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:72:70:81:26:A3:C8:18:C6:C0:E0:1A:60:96:2B:C4:A0:E5:40:7E X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:de:96:3a:17:b8:9e:dd:97:b2:95:98:f0:a9:6d:d8:9f:4a: 07:db:ef:b4:30:58:b2:e9:a4:3d:b6:60:23:55:45:bb:e4:8b: 60:ef:74:53:71:42:81:6e:cc:a8:8b:82:ef:58:ba:b8:df:02: 6d:1c:3b:c3:3e:66:6a:d1:2e:72:67:62:62:a3:3f:4b:56:5e: e9:3f:b7:d0:e6:8c:a4:d3:73:6f:0d:d7:00:32:b5:e4:a9:ac: 97:0e:aa:70:5e:d6:de:7e:e5:b7:74:d2:93:ef:4e:bc:31:1b: 05:c4:f7:e2:11:0d:ea:ac:7d:ce:d7:bb:74:64:87:e8:d7:25: ca:b9:7a:0f:70:b5:48:6b:d7:6c:49:eb:7b:bc:92:cf:21:d0: ad:f5:2b:16:ca:30:85:6c:b3:f5:d8:94:4b:89:3e:93:37:c2: e4:a0:87:c4:49:25:23:8d:01:79:d9:4f:2d:22:a3:87:ef:95: b7:23:13:ca:de:24:52:de:29:95:64:b1:ec:23:e4:1f:20:17: 5d:88:b0:4b:76:6e:b0:10:e4:f3:ec:74:00:c7:c0:e4:d8:57: b3:30:4c:75:f0:23:97:b2:40:24:55:75:65:6c:34:b0:40:0e: 3a:40:28:5a:e1:93:a9:6a:89:37:60:e5:4b:1c:f4:b5:4e:11: a1:27:50:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUxMDE4MTgzMDU5WhcNMjUxMDI1MTgzMDU5WjAYMRYwFAYD VQQDEw02OGYzZGNlNC0zMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuujhsimldY0gfgUTUK1LvRX5aaXdt2IPL8rY3ERnFCH7dewch1xLiJJvwGvF jeCZ1YS/mBAU+YORGOlb6lngTIpLtM6OFpre8kF+wD1JCsMUaDZn5glqTxETeS6s 88aT12kS/vaoVEAZVyjCBL7VGok62TylmS+H5jLsyrYY/feA2NDjRJ8U25+yRXP3 OHIzdQq8hKBJSp0pYrJ97CR3ZArux9KdEMQO0tOALmxtz2xXFcgMXRJLaBGX9DnZ uS98MU4/6Bb9IeGVyHVqh9ZJaSm+uiVN8iK50Ejt0OKdpbbrYvgPfI11m48QiW+/ 0+BXfvvciDJ0FVuTk0DKeh+lwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpycIEm o8gYxsDgGmCWK8Sg5UB+MB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv3pY6F7ie3ZeylZjwqW3Yn0oH2++0MFiy6aQ9tmAjVUW75Itg73RT cUKBbsyoi4LvWLq43wJtHDvDPmZq0S5yZ2Jioz9LVl7pP7fQ5oyk03NvDdcAMrXk qayXDqpwXtbefuW3dNKT7068MRsFxPfiEQ3qrH3O17t0ZIfo1yXKuXoPcLVIa9ds Set7vJLPIdCt9SsWyjCFbLP12JRLiT6TN8LkoIfESSUjjQF52U8tIqOH75W3IxPK 3iRS3imVZLHsI+QfIBddiLBLdm6wEOTz7HQAx8Dk2FezMEx18COXskAkVXVlbDSw QA46QCha4ZOpaok3YOVLHPS1ThGhJ1BJ -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:50 2025 by rpki-client