$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: 6vbee7i1cL1CeW7lIADTrSL/zunsPq/vFzxyLx8E8YY= Subject key identifier: 3C:A3:55:86:A9:47:5F:9A:89:17:72:46:19:5D:1F:19:BE:D4:1F:CC Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 01BB Signing time: Sun 19 Oct 2025 05:35:32 +0000 Manifest this update: Sun 19 Oct 2025 05:35:32 +0000 Manifest next update: Sun 26 Oct 2025 05:35:32 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: dYlVghFhbeSs0aQLSjqBnaOuDTNPghSXgneHGTl6ItY=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: wznc2xIu+Db8dBh8TB4MLEtEwoDgpd9YS1hyNvKSiTQ=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: iplB9XZjSOwQ5O2H5iEJJvDG/Nz+QwUOR0kvaV5InLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Oct 19 05:35:32 2025 GMT Not After : Oct 26 05:35:32 2025 GMT Subject: CN=68f478a4-df5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:c2:ca:c7:7c:9e:40:fc:2e:b9:a8:f4:2f: f7:e8:2c:6f:8d:ea:0e:de:e9:28:5e:ea:f0:7a:c9: 33:63:82:f2:93:8a:26:bd:1c:52:83:86:74:0f:fe: 6d:12:93:77:46:64:5e:c3:ef:2b:d5:19:22:19:0e: be:17:fe:4e:19:b5:8f:f7:f7:3b:ca:49:51:25:a1: 39:15:9b:36:31:64:f7:33:b8:7d:1c:a7:e1:21:c4: 6e:1c:9a:51:75:38:82:7a:ce:d8:98:10:47:72:01: fe:90:a9:2b:46:1a:2a:e5:43:3c:33:dd:af:67:db: 6f:d3:d1:e3:80:ab:9d:53:9a:e4:1c:8c:1c:ed:18: 98:ad:25:66:94:bd:87:fd:4e:54:b4:86:06:55:bd: 33:5c:c3:94:e6:b7:17:8d:1a:2c:2e:e4:a1:9d:99: 46:9f:2c:53:09:8f:7e:6b:a1:23:3b:0f:82:87:44: ea:c8:ab:cc:86:8c:70:6c:42:7d:97:ca:50:e7:2b: 3d:cf:47:64:dd:ab:7a:60:82:fc:09:75:c8:3e:47: 1e:52:a1:ee:95:bb:3f:f4:6e:03:3f:c7:60:df:c0: d6:e0:1d:dc:67:b1:44:8d:b6:54:52:a5:1c:cd:bb: ec:4d:56:2c:65:70:a2:e1:94:05:e7:5b:96:c9:bb: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:55:86:A9:47:5F:9A:89:17:72:46:19:5D:1F:19:BE:D4:1F:CC X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8d:94:c6:d9:67:1a:9d:3f:20:b7:4c:92:e2:5e:63:6e:68: 0a:7b:8e:f9:b2:e9:fc:f3:ae:51:09:ec:5e:63:ea:42:53:67: 76:05:c7:33:5a:16:a5:ba:24:ca:91:fe:88:fe:a6:82:da:18: 2e:5d:e6:28:62:63:3f:4d:40:74:27:db:94:8b:b7:b3:ef:78: 5f:4f:5c:ef:10:46:2e:6d:e6:27:11:48:9a:73:38:75:80:75: 33:33:91:05:31:e4:ff:6e:51:ac:8a:08:99:98:57:8f:76:c7: fd:27:e0:04:aa:94:b2:a8:88:52:b8:f0:c7:d0:5e:fe:79:08: bc:72:82:85:65:c0:8f:21:d1:37:36:18:14:5d:b6:50:4f:9b: 75:d2:4c:f3:e2:63:8b:e8:e7:72:1a:b3:89:63:1f:eb:db:7a: c8:ae:c5:81:b5:81:c4:db:51:34:f1:40:1d:e1:72:e4:64:35: ce:6d:be:e3:11:4a:e8:f8:54:a7:7c:f5:8e:02:39:b9:63:a5: 3c:7e:29:84:ab:fd:dc:39:c0:ba:2a:76:0c:1a:b1:71:82:f8: 2a:d2:5e:be:e3:38:be:00:e0:c9:ba:f1:a0:4f:b4:96:46:c2: 18:aa:d9:dc:b5:89:bd:87:88:15:8d:43:df:a4:76:d1:92:99: 1e:fd:d6:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUxMDE5MDUzNTMyWhcNMjUxMDI2MDUzNTMyWjAYMRYwFAYD VQQDEw02OGY0NzhhNC1kZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumnCysd8nkD8Lrmo9C/36CxvjeoO3ukoXurweskzY4Lyk4omvRxSg4Z0D/5t EpN3RmRew+8r1RkiGQ6+F/5OGbWP9/c7yklRJaE5FZs2MWT3M7h9HKfhIcRuHJpR dTiCes7YmBBHcgH+kKkrRhoq5UM8M92vZ9tv09HjgKudU5rkHIwc7RiYrSVmlL2H /U5UtIYGVb0zXMOU5rcXjRosLuShnZlGnyxTCY9+a6EjOw+Ch0TqyKvMhoxwbEJ9 l8pQ5ys9z0dk3at6YIL8CXXIPkceUqHulbs/9G4DP8dg38DW4B3cZ7FEjbZUUqUc zbvsTVYsZXCi4ZQF51uWybtGwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyjVYap R1+aiRdyRhldHxm+1B/MMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRjZTG2WcanT8gt0yS4l5jbmgKe475sun8865RCexeY+pCU2d2Bccz WhaluiTKkf6I/qaC2hguXeYoYmM/TUB0J9uUi7ez73hfT1zvEEYubeYnEUiaczh1 gHUzM5EFMeT/blGsigiZmFePdsf9J+AEqpSyqIhSuPDH0F7+eQi8coKFZcCPIdE3 NhgUXbZQT5t10kzz4mOL6OdyGrOJYx/r23rIrsWBtYHE21E08UAd4XLkZDXObb7j EUro+FSnfPWOAjm5Y6U8fimEq/3cOcC6KnYMGrFxgvgq0l6+4zi+AODJuvGgT7SW RsIYqtnctYm9h4gVjUPfpHbRkpke/dai -----END CERTIFICATE-----Generated at Mon Oct 20 04:17:44 2025 by rpki-client