$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: KI5Ldz9yer6G4fhK9PWyiib4yBp+B8H5ECtY+wZqIDQ= Subject key identifier: 6D:0C:04:0D:C4:F9:A0:AD:5D:EA:58:8F:64:78:41:9F:CC:D3:7A:C6 Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: AA Signing time: Sun 19 Oct 2025 09:24:54 +0000 Manifest this update: Sun 19 Oct 2025 09:24:53 +0000 Manifest next update: Sun 26 Oct 2025 09:24:53 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: mI1Aax/tWVkqU5lQfoWJG+cKo15mHKedRxiSzaoRiOM=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: f2L7OBQuOuTd2LqrR7JU6rutnUdXM8FYIeFEOoAz1u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Oct 19 09:24:53 2025 GMT Not After : Oct 26 09:24:53 2025 GMT Subject: CN=68f4ae65-56dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:45:e9:01:8d:77:6a:75:2f:96:d3:d3:cd: e5:01:d5:eb:c4:88:71:12:0e:05:5e:07:32:e5:87: d8:04:10:d3:78:62:86:92:4a:bd:cd:e3:f2:af:7e: fa:47:6d:63:bb:7e:d0:fa:0e:fe:9b:fb:5e:82:3f: 26:e5:92:d6:08:80:86:bd:56:75:3b:66:9c:5e:94: de:c5:09:21:b2:16:6f:28:cc:6e:27:ad:5a:ad:e9: 13:27:61:91:ca:78:4b:fe:fe:5e:a0:12:12:26:a3: 84:a6:4b:46:4d:06:f6:e8:b7:3f:b0:34:d5:d7:1a: 0d:89:7f:dd:81:92:7f:e7:6c:ea:71:63:e5:95:1e: 3f:40:49:c1:80:c6:a3:d3:a0:79:a6:0e:7a:1e:3d: e9:7b:33:eb:b8:25:97:f3:6a:f7:f8:c9:ac:f6:87: 70:26:8b:32:ff:ff:2b:22:e2:91:3b:f3:5f:11:45: 89:57:6f:39:04:5e:2b:b0:bc:01:2c:ff:77:e6:15: 28:97:bd:c0:d5:5c:d0:1b:66:94:e6:2e:dd:b2:c4: ce:28:2d:62:03:65:2c:52:c3:b7:6b:d0:89:76:64: 05:1e:4f:08:ea:5e:d0:b9:2f:e9:8c:1d:5d:aa:1d: d9:83:de:52:bd:c0:c8:d2:06:8b:40:7b:91:87:75: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0C:04:0D:C4:F9:A0:AD:5D:EA:58:8F:64:78:41:9F:CC:D3:7A:C6 X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f5:e9:17:06:be:11:b6:8a:f0:22:f6:fe:1e:a7:99:ec:45: 8a:50:aa:cb:e3:7c:d3:b6:9e:7b:d7:45:36:b0:8a:15:15:4e: ff:97:ff:40:cd:5c:4e:5d:4b:93:6a:df:11:37:d5:94:ac:b1: e1:b8:07:37:6c:0e:26:99:fd:cd:58:c3:43:7d:79:34:53:72: 19:ea:1a:8f:7a:c8:76:a2:d3:e9:01:95:83:6a:75:f5:51:71: 8f:93:d6:2a:4c:2f:22:c8:7e:1c:a4:6a:67:0a:c2:8a:7f:69: d3:60:4e:32:de:13:56:53:39:76:2f:2d:50:eb:c2:90:5e:29: df:70:78:ee:84:a7:30:b0:97:5a:e6:89:24:6d:4d:ae:08:7e: 36:aa:61:06:82:a1:e5:c6:e0:30:6d:62:8d:2e:7d:68:bb:b9: 69:28:22:3b:84:d1:b0:6c:11:45:c3:06:08:fb:dd:8d:7c:2c: ff:eb:11:74:c6:0e:61:4e:17:ec:4e:37:85:3d:21:fa:a1:8a: f1:1b:65:15:d2:f5:16:45:9f:12:23:87:34:fc:da:58:8a:ce: 6d:d8:00:d2:a4:4f:0a:ae:93:86:33:63:d2:af:75:f8:00:8b: 8b:05:2e:13:b4:ef:68:6c:90:9d:cf:92:d2:8b:7b:a0:fb:db: be:6c:7b:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKDhGNzRDMTc1NUYxODg3MDhDQ0UzQTY3REVDMjg1OTkz NjQ4REYxODMwHhcNMjUxMDE5MDkyNDUzWhcNMjUxMDI2MDkyNDUzWjAYMRYwFAYD VQQDEw02OGY0YWU2NS01NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dZF6QGNd2p1L5bT083lAdXrxIhxEg4FXgcy5YfYBBDTeGKGkkq9zePyr376 R21ju37Q+g7+m/tegj8m5ZLWCICGvVZ1O2acXpTexQkhshZvKMxuJ61arekTJ2GR ynhL/v5eoBISJqOEpktGTQb26Lc/sDTV1xoNiX/dgZJ/52zqcWPllR4/QEnBgMaj 06B5pg56Hj3pezPruCWX82r3+Mms9odwJosy//8rIuKRO/NfEUWJV285BF4rsLwB LP935hUol73A1VzQG2aU5i7dssTOKC1iA2UsUsO3a9CJdmQFHk8I6l7QuS/pjB1d qh3Zg95SvcDI0gaLQHuRh3UjFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0MBA3E +aCtXepYj2R4QZ/M03rGMB8GA1UdIwQYMBaAFI90wXVfGIcIzOOmfewoWZNkjfGD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My9GQzdENjA4NkFD ODMxMUVGODIxNDk3MkJDNEY5QUUwMi9qM1RCZFY4WWh3ak00Nlo5N0NoWmsyU044 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My9GQzdENjA4NkFDODMxMUVGODIxNDk3MkJDNEY5QUUwMi9qM1RCZFY4WWh3 ak00Nlo5N0NoWmsyU044WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ9ekXBr4RtorwIvb+HqeZ7EWKUKrL43zTtp5710U2sIoVFU7/l/9A zVxOXUuTat8RN9WUrLHhuAc3bA4mmf3NWMNDfXk0U3IZ6hqPesh2otPpAZWDanX1 UXGPk9YqTC8iyH4cpGpnCsKKf2nTYE4y3hNWUzl2Ly1Q68KQXinfcHjuhKcwsJda 5okkbU2uCH42qmEGgqHlxuAwbWKNLn1ou7lpKCI7hNGwbBFFwwYI+92NfCz/6xF0 xg5hThfsTjeFPSH6oYrxG2UV0vUWRZ8SI4c0/NpYis5t2ADSpE8KrpOGM2PSr3X4 AIuLBS4TtO9obJCdz5LSi3ug+9u+bHvi -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:48 2025 by rpki-client