$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: FO0KN2I6ePwu5KqWKuScwklydJNeAdG80LlrXWObv5g= Subject key identifier: D2:22:8C:01:E1:A0:7F:73:9F:82:FD:A8:48:79:68:B1:68:B4:71:C1 Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0CE1 Signing time: Sat 18 Oct 2025 18:51:10 +0000 Manifest this update: Sat 18 Oct 2025 18:51:10 +0000 Manifest next update: Sat 25 Oct 2025 18:51:10 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: gjDb1gmAkYHJRvNU50nOUGhoxAgAYXt1eocr8r0o17E=) 2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: Q8R6RdYUX7rY4VWbBZw5PBzAwbilsPbivqpkW+dr/Ec=) 3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: rkTwGBJDEcILt7naFyYrumMd/+qJZboX4q6K9aobNao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Oct 18 18:51:10 2025 GMT Not After : Oct 25 18:51:10 2025 GMT Subject: CN=68f3e19e-66da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f4:94:94:7e:f8:61:4d:aa:97:8e:82:b7:2e: 49:c8:e6:39:68:fc:e5:71:05:c1:97:65:fc:98:80: 47:3e:bf:24:2d:36:92:70:5a:af:67:5d:6c:a9:7e: 39:e8:0c:9d:9d:e0:fa:18:78:58:81:e1:6f:ba:3c: 0b:a2:03:07:56:d4:e7:0f:33:de:1d:95:22:8d:61: 89:15:f2:8c:6c:4f:a8:3d:df:60:53:84:55:db:09: 00:c3:ea:6d:da:bf:c4:d0:d9:56:84:97:c1:3e:fb: a6:45:9c:44:8c:db:a3:cf:f2:79:6e:8d:e4:1d:bd: a5:e1:2c:e0:1c:db:cc:82:6c:b5:4c:e7:f6:23:3d: 3b:c6:88:d4:b0:d6:ee:e4:17:e4:e2:52:c6:a1:60: 11:40:fa:79:11:cb:1b:9a:dc:62:d8:19:c8:66:bf: f5:8c:06:cb:f4:a6:f8:5a:73:68:c2:12:0b:d9:23: a6:cf:34:95:1b:19:e7:a3:c7:0f:64:c2:ff:1e:3e: 5a:4f:81:b8:7e:dd:c2:51:c5:69:85:f2:ff:c9:51: 08:fa:45:2c:69:90:e2:6c:65:cf:d5:1e:66:e4:12: 89:fe:67:55:4c:61:f9:f2:38:af:a7:d1:44:26:e2: 8a:72:7f:84:b8:19:78:0e:91:35:6e:b5:32:c4:e5: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:8C:01:E1:A0:7F:73:9F:82:FD:A8:48:79:68:B1:68:B4:71:C1 X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8b:c6:d0:cf:92:fc:84:65:71:47:00:69:a0:20:85:41:be: 8d:d3:ef:23:42:79:7e:1e:d4:e2:c8:e7:ed:70:0b:07:05:ee: 3f:3a:a3:30:7b:a2:50:0e:68:55:bb:9d:6d:46:17:87:47:77: 2b:dd:88:4a:1c:d0:3b:f4:b5:92:01:4f:99:2f:1d:5a:5f:97: 4a:21:a8:fa:93:8b:05:14:62:1a:2b:51:c4:10:5e:e7:92:36: 2b:45:2c:9b:07:6a:b2:39:fd:0f:16:c5:9d:f3:d1:45:40:cb: a3:04:97:88:9b:21:44:c0:11:ea:94:a5:19:5f:e5:dd:77:56: f2:f0:3e:ae:89:49:f4:54:6a:fe:22:5d:15:7e:74:c0:4a:cf: d8:d2:af:55:65:66:13:0a:aa:32:e9:7e:6d:a1:12:eb:ae:2c: 14:83:e0:a3:75:1e:ef:22:94:3e:09:2a:79:a1:e3:ab:fa:b7: 3b:c6:40:7c:b1:88:11:18:0c:12:a6:4f:a9:d2:26:4a:f0:fa: 6f:79:a8:a8:55:d0:60:77:6c:72:b9:fb:0c:a2:b6:be:98:f3: fd:b0:35:42:1c:7a:63:13:2d:b0:97:1e:52:f3:a1:55:a2:74: f3:97:62:55:3d:b2:d5:62:a9:78:38:4c:c7:31:10:39:a2:ff: 9d:13:2e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjUxMDE4MTg1MTEwWhcNMjUxMDI1MTg1MTEwWjAYMRYwFAYD VQQDEw02OGYzZTE5ZS02NmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vSUlH74YU2ql46Cty5JyOY5aPzlcQXBl2X8mIBHPr8kLTaScFqvZ11sqX45 6AydneD6GHhYgeFvujwLogMHVtTnDzPeHZUijWGJFfKMbE+oPd9gU4RV2wkAw+pt 2r/E0NlWhJfBPvumRZxEjNujz/J5bo3kHb2l4SzgHNvMgmy1TOf2Iz07xojUsNbu 5Bfk4lLGoWARQPp5Ecsbmtxi2BnIZr/1jAbL9Kb4WnNowhIL2SOmzzSVGxnno8cP ZML/Hj5aT4G4ft3CUcVphfL/yVEI+kUsaZDibGXP1R5m5BKJ/mdVTGH58jivp9FE JuKKcn+EuBl4DpE1brUyxOWXwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIijAHh oH9zn4L9qEh5aLFotHHBMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBri8bQz5L8hGVxRwBpoCCFQb6N0+8jQnl+HtTiyOftcAsHBe4/OqMw e6JQDmhVu51tRheHR3cr3YhKHNA79LWSAU+ZLx1aX5dKIaj6k4sFFGIaK1HEEF7n kjYrRSybB2qyOf0PFsWd89FFQMujBJeImyFEwBHqlKUZX+Xdd1by8D6uiUn0VGr+ Il0VfnTASs/Y0q9VZWYTCqoy6X5toRLrriwUg+CjdR7vIpQ+CSp5oeOr+rc7xkB8 sYgRGAwSpk+p0iZK8PpveaioVdBgd2xyufsMora+mPP9sDVCHHpjEy2wlx5S86FV onTzl2JVPbLVYql4OEzHMRA5ov+dEy7q -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:50 2025 by rpki-client