$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: YK4Fo2dPtydg5jm4oKq9wdPSIxP3yyCNr0pRa6wtPSI= Subject key identifier: 38:BE:03:DE:98:42:95:A2:F6:E5:DF:CB:D0:A3:46:BB:DB:56:A9:D7 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 055C Signing time: Sun 19 Oct 2025 01:08:15 +0000 Manifest this update: Sun 19 Oct 2025 01:08:14 +0000 Manifest next update: Sun 26 Oct 2025 01:08:14 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: kZaKa2AvqjmxaSMcT4brfDxTU6mat8Df8Dp7IwcasXU=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: oVtoN+E5ZyRj5IanIEy9OruScApwiNCgt2Cj41NAG60=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 0vZEihrEiMOTrqZx3qCnY1CqP36ZOjzC0GFn4Q1L7IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Oct 19 01:08:14 2025 GMT Not After : Oct 26 01:08:14 2025 GMT Subject: CN=68f439fe-10c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e6:af:66:ed:d8:4d:f4:20:7c:f0:64:6a:59: d2:7d:0f:26:fe:49:ff:5d:41:34:ed:76:ee:50:e8: e3:e4:1c:91:a1:cb:89:ad:38:66:be:e5:da:54:8a: 6f:9e:44:98:9c:5b:2c:be:5e:5c:92:12:55:02:ca: 3d:94:e6:a0:af:f7:18:67:89:a1:ab:d4:41:75:18: 7c:c5:e6:51:cd:74:73:42:5a:b6:f3:74:e0:61:03: bb:76:b6:34:6e:94:d0:6a:8c:56:2e:c9:20:0b:f7: 8c:16:21:cd:cd:37:4f:b8:e5:eb:2d:14:07:04:33: 73:b3:16:b8:88:6f:25:70:39:53:f6:f1:4b:cc:8a: 70:62:30:38:a4:9f:63:d3:2e:3f:89:99:7f:79:6e: d2:49:9c:89:25:b3:65:7e:6b:c1:b0:6c:95:8b:74: 3b:43:0a:e6:b5:0c:61:86:65:65:39:76:01:26:de: aa:1c:ff:98:0b:56:da:2d:36:6b:f7:57:21:12:9c: 85:c8:90:1c:2f:bd:6f:b3:3e:6b:0a:b1:d6:f2:b7: 06:62:63:3d:f9:6c:a6:85:63:0b:f8:61:68:ab:f3: 44:8d:07:ca:9e:9e:f1:48:de:02:ee:3a:54:b5:1f: a6:5e:0e:e5:b3:25:bd:b0:54:17:df:8d:78:82:16: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:03:DE:98:42:95:A2:F6:E5:DF:CB:D0:A3:46:BB:DB:56:A9:D7 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:50:c3:24:29:88:09:15:5b:6d:66:3f:22:81:55:c3:6c:2c: d8:b1:d5:2c:20:e1:3e:92:56:ab:76:bb:3e:a5:95:4a:5e:2f: 70:ee:70:7d:2b:e1:90:a3:8c:06:3d:20:da:39:50:c9:91:cc: eb:07:09:b0:03:36:6e:ef:82:91:75:da:e6:b4:f5:47:b8:b3: b4:54:26:41:b4:df:f7:b5:cc:96:0e:35:11:15:1b:fc:35:cb: 58:05:78:63:41:0b:8e:22:43:f1:74:5a:72:01:aa:91:5b:93: 8f:a6:64:70:68:bb:fc:c5:25:35:61:0e:07:25:50:3a:40:5c: 42:41:34:b1:5a:d9:32:cc:11:2d:33:90:90:08:2e:8f:c8:28: 36:3a:6c:a5:44:bf:4c:02:6e:2c:8c:04:53:89:e0:b5:4c:1e: 24:29:82:b3:c0:0d:0d:67:8a:31:89:d6:0d:12:5b:b4:a4:98: 80:ec:cf:26:3e:e1:af:50:2f:4b:52:72:4a:e5:f4:15:3f:b1: 06:63:c2:7c:7a:79:97:d5:72:c2:80:39:30:80:ef:a8:2b:0e: 63:df:4c:ed:40:47:d3:f6:c4:09:fa:24:f6:c1:ee:6d:f9:24: e9:a0:0c:0f:38:89:11:41:ae:b3:fd:72:32:0c:d5:33:ac:81: c1:78:bf:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUxMDE5MDEwODE0WhcNMjUxMDI2MDEwODE0WjAYMRYwFAYD VQQDEw02OGY0MzlmZS0xMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eavZu3YTfQgfPBkalnSfQ8m/kn/XUE07XbuUOjj5ByRocuJrThmvuXaVIpv nkSYnFssvl5ckhJVAso9lOagr/cYZ4mhq9RBdRh8xeZRzXRzQlq283TgYQO7drY0 bpTQaoxWLskgC/eMFiHNzTdPuOXrLRQHBDNzsxa4iG8lcDlT9vFLzIpwYjA4pJ9j 0y4/iZl/eW7SSZyJJbNlfmvBsGyVi3Q7QwrmtQxhhmVlOXYBJt6qHP+YC1baLTZr 91chEpyFyJAcL71vsz5rCrHW8rcGYmM9+WymhWML+GFoq/NEjQfKnp7xSN4C7jpU tR+mXg7lsyW9sFQX3414ghbtgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi+A96Y QpWi9uXfy9CjRrvbVqnXMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUMMkKYgJFVttZj8igVXDbCzYsdUsIOE+klardrs+pZVKXi9w7nB9 K+GQo4wGPSDaOVDJkczrBwmwAzZu74KRddrmtPVHuLO0VCZBtN/3tcyWDjURFRv8 NctYBXhjQQuOIkPxdFpyAaqRW5OPpmRwaLv8xSU1YQ4HJVA6QFxCQTSxWtkyzBEt M5CQCC6PyCg2OmylRL9MAm4sjARTieC1TB4kKYKzwA0NZ4oxidYNElu0pJiA7M8m PuGvUC9LUnJK5fQVP7EGY8J8enmX1XLCgDkwgO+oKw5j30ztQEfT9sQJ+iT2we5t +STpoAwPOIkRQa6z/XIyDNUzrIHBeL/g -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:23 2025 by rpki-client