$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft File: FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json) Hash identifier: Qa23jJeZyd6JjN44YVtIWtkM9aRjPiIiYoiRaReuyk0= Subject key identifier: 96:0A:EA:1F:B4:72:F4:73:38:53:D0:0A:65:1B:60:2F:A0:6D:9B:84 Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B Certificate issuer: /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft Manifest number: 05B4 Signing time: Sun 19 Oct 2025 00:49:24 +0000 Manifest this update: Sun 19 Oct 2025 00:49:24 +0000 Manifest next update: Sun 26 Oct 2025 00:49:24 +0000 Files and hashes: 1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: ychvYYUqBRG5OAbSgiBiyso/UJxwo9G8CpnOfjV+G10=) 2: 2A52AB54138811F0BA2C056DC4F9AE02.roa (hash: 0AvanG6lwhnjCogGu+WtHXRuTCMKYEBdG6vznbvbdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B Validity Not Before: Oct 19 00:49:24 2025 GMT Not After : Oct 26 00:49:24 2025 GMT Subject: CN=68f43594-df3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:86:c4:3f:10:8a:e2:4b:36:6d:cc:ff:0a: 1c:5e:d1:b7:a3:98:4d:7e:e4:99:d8:2b:fc:20:a2: 75:27:19:59:28:1b:f3:04:33:ee:6e:5c:f5:06:bf: 8d:85:b0:fe:c4:8b:50:7f:a2:62:90:34:78:ca:ca: 22:30:15:8c:ba:3f:e9:32:4d:0d:cd:95:49:c3:b3: 1b:ce:c8:35:5c:b1:1e:d7:d6:0f:28:a8:03:04:3d: c2:b0:fe:3f:bf:28:67:e5:04:6a:8c:cc:24:ce:45: 87:1e:c4:c9:89:f9:c4:29:e9:97:2b:36:55:2d:50: 46:30:29:a4:b9:2c:1e:ba:47:da:1b:06:09:f6:e2: 48:8f:1f:28:08:fb:53:e6:ca:30:1b:81:8c:99:a4: 69:73:11:2f:2d:12:6a:33:88:7b:05:df:ba:e2:15: 5c:0a:d0:de:40:9f:4d:9a:dc:c2:cb:aa:1a:12:73: 9f:c9:e7:73:5f:23:ef:5f:b7:b9:3e:6c:81:9d:e3: 9d:45:a0:28:29:b8:af:67:c8:f9:30:f9:3e:36:72: 7e:ba:e1:2d:06:06:c1:d4:d0:31:55:04:b0:84:e6: 16:24:58:9c:24:0b:a6:a6:e4:b2:fc:06:bc:ba:4c: 23:ec:f7:ac:b4:47:36:be:a9:97:55:dc:fa:7b:3c: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:EA:1F:B4:72:F4:73:38:53:D0:0A:65:1B:60:2F:A0:6D:9B:84 X509v3 Authority Key Identifier: keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:11:7f:00:0d:37:8f:fa:48:05:19:63:ce:51:e2:b8:7a:9c: 58:6f:ec:18:86:98:93:18:01:4a:b5:a9:33:88:91:41:79:82: 5b:8c:0d:81:cc:19:8f:a7:01:d0:f2:47:92:4f:2b:98:4a:8b: db:6c:46:cb:81:77:0b:12:32:89:db:26:e8:74:6e:dc:80:d7: eb:57:33:59:c9:d5:3b:ac:2e:ac:b0:12:09:7a:5e:68:4c:ed: ef:75:1f:2b:19:b8:c1:a9:57:3a:58:53:f0:76:a6:f5:5e:70: 7a:a5:7e:dd:06:81:f2:8c:43:53:47:21:a5:04:b2:f0:58:09: 64:c2:35:de:cb:28:93:9b:61:29:2f:5b:9c:97:27:c0:1e:2c: 05:bf:4d:df:0e:b1:54:4d:ab:fb:a6:e8:01:a6:5c:9f:d7:f1: 0a:d5:26:cb:6b:36:cc:b1:52:21:be:f9:82:65:3c:94:6a:2f: 8f:32:02:26:46:cb:0d:3b:9f:20:b9:dd:73:60:15:fa:b3:21: 99:4f:4a:05:58:58:80:19:dc:71:b3:3b:e5:fc:d6:de:f1:87: 9e:ea:d4:c8:5e:19:fd:06:12:1d:61:8c:cb:14:5b:7d:ef:91: cb:e2:3e:6b:43:2d:ab:59:25:77:6e:4f:f5:7e:23:03:2e:47: 8e:d4:e2:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMjMxMTAvBgNVBAUTKDE0Mzc4OEQyMzVGRDY5REIyRjI1Qjc3NzIyNUY3QUI3 NjlEQTM1MEIwHhcNMjUxMDE5MDA0OTI0WhcNMjUxMDI2MDA0OTI0WjAYMRYwFAYD VQQDEw02OGY0MzU5NC1kZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wSGxD8QiuJLNm3M/wocXtG3o5hNfuSZ2Cv8IKJ1JxlZKBvzBDPublz1Br+N hbD+xItQf6JikDR4ysoiMBWMuj/pMk0NzZVJw7Mbzsg1XLEe19YPKKgDBD3CsP4/ vyhn5QRqjMwkzkWHHsTJifnEKemXKzZVLVBGMCmkuSweukfaGwYJ9uJIjx8oCPtT 5sowG4GMmaRpcxEvLRJqM4h7Bd+64hVcCtDeQJ9NmtzCy6oaEnOfyedzXyPvX7e5 PmyBneOdRaAoKbivZ8j5MPk+NnJ+uuEtBgbB1NAxVQSwhOYWJFicJAumpuSy/Aa8 ukwj7PestEc2vqmXVdz6ezzwfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYK6h+0 cvRzOFPQCmUbYC+gbZuEMB8GA1UdIwQYMBaAFBQ3iNI1/WnbLyW3dyJferdp2jUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMyMy9ERjY2REUyNEU1 NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFkc3ZKYmQzSWw5NnQybmFO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEZUkwalg5YWRzdkpiZDNJbDk2dDJuYU5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMyMy9ERjY2REUyNEU1NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFk c3ZKYmQzSWw5NnQybmFOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQEX8ADTeP+kgFGWPOUeK4epxYb+wYhpiTGAFKtakziJFBeYJbjA2B zBmPpwHQ8keSTyuYSovbbEbLgXcLEjKJ2ybodG7cgNfrVzNZydU7rC6ssBIJel5o TO3vdR8rGbjBqVc6WFPwdqb1XnB6pX7dBoHyjENTRyGlBLLwWAlkwjXeyyiTm2Ep L1uclyfAHiwFv03fDrFUTav7pugBplyf1/EK1SbLazbMsVIhvvmCZTyUai+PMgIm RssNO58gud1zYBX6syGZT0oFWFiAGdxxszvl/Nbe8Yee6tTIXhn9BhIdYYzLFFt9 75HL4j5rQy2rWSV3bk/1fiMDLkeO1OJW -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:22 2025 by rpki-client