$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: zwfuUogTt2TQ/B9xilaKpXAb6i+bGnKLDZDt3nOuMwo= Subject key identifier: C3:B9:9C:F6:B4:6F:1C:03:B8:6A:FD:A4:55:E1:EF:A2:DD:5C:A5:33 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D59 Signing time: Sat 18 Oct 2025 18:40:42 +0000 Manifest this update: Sat 18 Oct 2025 18:40:41 +0000 Manifest next update: Sat 25 Oct 2025 18:40:41 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: UDuAEAL8PtzgNz8Rlws6ruaKiXJ0t7EjfEgg/PQVxlE=) 2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: g/PqYTlTdyVd5TL7Ya9Fxql1eZOCVQF2uz0biFh+Gw8=) 3: 74C3A30E96C411F0B4D82E35C4F9AE02.roa (hash: cLLIM9TmPo2Raipsw+V9MCaozLJ4/of8Y6sqEBY34/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Oct 18 18:40:41 2025 GMT Not After : Oct 25 18:40:41 2025 GMT Subject: CN=68f3df29-cc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:e4:95:da:44:66:3f:6d:4f:05:88:3a:4d: 2f:5a:47:7d:a0:46:0a:4e:46:96:c1:94:fe:78:65: 50:37:ee:3d:36:f6:a4:03:63:66:7e:85:e5:1a:ce: d3:7e:4a:49:f6:28:5b:57:19:0e:13:6c:ef:f0:1f: b0:bc:86:e9:df:35:8e:fc:69:ef:21:e8:33:f1:27: 80:86:8a:bc:24:b8:76:b6:23:f1:ed:57:76:ad:e6: 77:d0:82:6c:cd:5c:eb:d4:68:0b:33:fe:f9:5d:2b: fd:67:26:b9:8a:55:5e:21:96:91:b2:a6:67:6e:49: 2e:cb:76:ff:69:1b:1f:e1:4b:c9:39:53:b9:19:10: dd:0a:51:54:f6:7f:14:5f:ae:62:3b:24:5f:8f:c3: 50:15:63:7a:2c:95:a9:78:93:3e:18:50:07:4e:ab: 3a:a3:eb:d8:02:ea:6c:6b:08:0f:68:8b:f9:99:fc: 21:d7:c9:8a:90:da:8c:c4:45:90:f3:19:b6:5b:fa: e4:e0:80:d6:52:df:0d:00:38:f1:58:0a:b8:48:28: c2:e0:e7:ba:2f:1e:4b:02:c0:3c:5f:d4:ae:36:2f: e6:53:e4:bd:a9:c4:b7:1c:3e:79:d5:e1:99:ed:cb: 29:a3:8a:1e:48:f0:2c:f7:df:f5:bf:67:0b:1e:c0: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B9:9C:F6:B4:6F:1C:03:B8:6A:FD:A4:55:E1:EF:A2:DD:5C:A5:33 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:13:d3:e0:8f:be:fe:ab:2b:d8:a5:1b:90:06:1f:a9:c4:9d: ce:6f:66:47:13:6b:dd:b3:db:2c:b9:0f:ca:a3:63:08:bf:27: 4d:5d:20:93:33:96:6d:b1:94:c2:d3:27:20:4d:22:94:ce:36: 71:c4:7b:d0:bc:db:0a:af:32:bf:f8:38:68:d5:a0:98:3d:b8: 8c:f5:e1:37:1b:c0:0b:9f:63:98:e4:bb:b2:e6:0f:80:65:34: f2:11:0b:a1:40:fd:23:3a:c4:c2:11:f3:aa:6c:2f:6c:29:70: ba:e1:bd:99:17:d3:87:6e:a1:56:2a:d2:f6:9e:b9:a8:a0:e5: ab:8a:1e:e1:d5:1a:8d:62:33:40:d6:8d:0c:0d:da:15:04:e2: 57:64:40:2a:06:65:02:52:b2:73:86:c8:40:c5:09:c0:9b:38: 5b:4a:03:ab:84:ea:e4:67:b4:36:3a:86:7c:0c:5e:25:ad:20: a0:9f:81:a5:bb:91:17:0b:c0:6a:1b:51:41:0f:02:c3:e5:4c: 07:7a:cf:84:6a:1d:36:bd:c6:c6:ba:e8:ee:3c:76:97:60:e7: c4:d0:27:c2:7c:3a:56:22:4e:7c:17:be:7f:29:15:76:66:b4: 07:3a:f5:fd:2e:2c:f8:dd:b8:3b:e7:e0:84:a0:d3:f6:dc:e5: 93:58:e2:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUxMDE4MTg0MDQxWhcNMjUxMDI1MTg0MDQxWjAYMRYwFAYD VQQDEw02OGYzZGYyOS1jYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+bkldpEZj9tTwWIOk0vWkd9oEYKTkaWwZT+eGVQN+49NvakA2NmfoXlGs7T fkpJ9ihbVxkOE2zv8B+wvIbp3zWO/GnvIegz8SeAhoq8JLh2tiPx7Vd2reZ30IJs zVzr1GgLM/75XSv9Zya5ilVeIZaRsqZnbkkuy3b/aRsf4UvJOVO5GRDdClFU9n8U X65iOyRfj8NQFWN6LJWpeJM+GFAHTqs6o+vYAupsawgPaIv5mfwh18mKkNqMxEWQ 8xm2W/rk4IDWUt8NADjxWAq4SCjC4Oe6Lx5LAsA8X9SuNi/mU+S9qcS3HD551eGZ 7cspo4oeSPAs99/1v2cLHsAmpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO5nPa0 bxwDuGr9pFXh76LdXKUzMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtE9Pgj77+qyvYpRuQBh+pxJ3Ob2ZHE2vds9ssuQ/Ko2MIvydNXSCT M5ZtsZTC0ycgTSKUzjZxxHvQvNsKrzK/+Dho1aCYPbiM9eE3G8ALn2OY5Luy5g+A ZTTyEQuhQP0jOsTCEfOqbC9sKXC64b2ZF9OHbqFWKtL2nrmooOWrih7h1RqNYjNA 1o0MDdoVBOJXZEAqBmUCUrJzhshAxQnAmzhbSgOrhOrkZ7Q2OoZ8DF4lrSCgn4Gl u5EXC8BqG1FBDwLD5UwHes+Eah02vcbGuujuPHaXYOfE0CfCfDpWIk58F75/KRV2 ZrQHOvX9Liz43bg75+CEoNP23OWTWOI9 -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:22 2025 by rpki-client