$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: 3wirGqR248DUROJUaAiunSHzTkcsx0IZVzQ4UQFv9VQ= Subject key identifier: 64:E8:4F:76:06:1A:AB:E8:D7:9D:EF:60:76:F1:96:74:93:B8:E3:3A Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 03F0 Signing time: Sun 19 Oct 2025 02:29:18 +0000 Manifest this update: Sun 19 Oct 2025 02:29:17 +0000 Manifest next update: Sun 26 Oct 2025 02:29:17 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: XX/zbpDxUmfjtbqAVNGx4gh3FjDb4UGuRUOHwqpFyik=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Oct 19 02:29:17 2025 GMT Not After : Oct 26 02:29:17 2025 GMT Subject: CN=68f44cfd-016f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9c:ab:20:2c:db:cc:f4:68:44:b2:52:4e:ec: f6:db:15:29:77:46:9a:62:83:84:61:47:2a:d7:7b: 12:4f:b7:8f:eb:13:a1:d5:74:63:29:bd:ac:0e:9b: b2:4c:cf:d3:07:0a:32:0d:1f:e1:03:32:31:ad:c4: a9:3a:82:33:cc:62:e3:3f:ae:24:c5:2a:79:83:11: 29:5c:c0:9d:b3:d9:f5:6b:62:95:11:f2:4f:38:b9: f0:fa:3e:fa:a5:6a:f6:d5:f5:cd:2a:a9:aa:c1:3e: 6c:1b:6a:d5:3c:27:de:0f:75:c4:2f:77:ec:b0:1d: 7f:cf:a2:ba:a2:3b:ed:77:01:a1:33:e7:10:d8:88: 0f:09:fa:e8:5e:39:4b:8e:7f:7e:62:2b:6a:b9:4f: 32:df:5a:7a:99:d1:c7:f7:5c:59:0a:6e:f8:88:24: d0:3b:8c:0d:a4:b2:99:f9:52:84:cc:ef:6a:22:86: b8:34:e3:a7:b7:44:20:00:73:d5:25:69:82:f5:7d: 8d:96:cb:76:79:51:5b:03:b1:8f:1f:97:75:95:bb: 96:af:e7:82:e0:4d:69:7a:c5:7f:a5:bc:92:de:d9: b8:c5:92:5d:da:19:28:4d:4a:29:2b:92:94:e9:c2: 48:59:89:3c:11:ef:4f:da:2c:c3:74:ab:46:30:b0: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E8:4F:76:06:1A:AB:E8:D7:9D:EF:60:76:F1:96:74:93:B8:E3:3A X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f8:27:5b:47:9b:16:e0:cf:b8:34:4f:bc:0f:67:2c:cb:0f: d6:6b:60:8f:43:c9:4c:c6:3a:97:75:72:4c:cf:13:a6:e0:ec: d6:90:ca:20:2a:aa:23:46:97:c9:e4:b2:d3:7e:96:84:d2:5b: e0:82:14:71:b8:57:d3:79:65:eb:6f:21:fb:c3:15:cb:57:d5: fa:cc:6a:df:11:7b:78:cd:c7:07:cd:ec:90:00:10:d6:43:38: ee:ad:35:74:b9:ad:6f:70:6a:fe:2f:1a:bd:59:75:f1:cd:02: c8:c2:b6:77:51:32:4e:96:3c:48:c8:e5:7c:60:a8:b0:fc:07: 35:1f:4d:88:ad:3c:8b:8b:92:08:de:a0:1b:3f:89:b5:fe:36: f1:ed:3d:36:5d:5e:a2:fb:f0:a4:f4:04:20:11:94:f4:77:57: 85:6e:54:86:78:c3:56:68:41:64:2b:8a:ea:e7:79:8a:0f:7a: c0:6a:0e:ca:19:63:0a:56:6b:36:d7:75:8c:85:56:eb:46:72: 17:24:c4:b6:76:f1:cd:f6:1d:a6:70:1c:2d:0d:48:bc:cd:ee: 03:4d:65:af:77:fe:ce:77:73:1c:89:54:28:df:14:12:a4:b7: 53:26:0f:94:f0:5d:b6:8e:ef:e3:b7:d6:ec:7e:f4:08:c2:f5: bc:0e:dd:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUxMDE5MDIyOTE3WhcNMjUxMDI2MDIyOTE3WjAYMRYwFAYD VQQDEw02OGY0NGNmZC0wMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pyrICzbzPRoRLJSTuz22xUpd0aaYoOEYUcq13sST7eP6xOh1XRjKb2sDpuy TM/TBwoyDR/hAzIxrcSpOoIzzGLjP64kxSp5gxEpXMCds9n1a2KVEfJPOLnw+j76 pWr21fXNKqmqwT5sG2rVPCfeD3XEL3fssB1/z6K6ojvtdwGhM+cQ2IgPCfroXjlL jn9+YitquU8y31p6mdHH91xZCm74iCTQO4wNpLKZ+VKEzO9qIoa4NOOnt0QgAHPV JWmC9X2Nlst2eVFbA7GPH5d1lbuWr+eC4E1pesV/pbyS3tm4xZJd2hkoTUopK5KU 6cJIWYk8Ee9P2izDdKtGMLA86QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGToT3YG Gqvo153vYHbxlnSTuOM6MB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/+CdbR5sW4M+4NE+8D2csyw/Wa2CPQ8lMxjqXdXJMzxOm4OzWkMog KqojRpfJ5LLTfpaE0lvgghRxuFfTeWXrbyH7wxXLV9X6zGrfEXt4zccHzeyQABDW QzjurTV0ua1vcGr+Lxq9WXXxzQLIwrZ3UTJOljxIyOV8YKiw/Ac1H02IrTyLi5II 3qAbP4m1/jbx7T02XV6i+/Ck9AQgEZT0d1eFblSGeMNWaEFkK4rq53mKD3rAag7K GWMKVms213WMhVbrRnIXJMS2dvHN9h2mcBwtDUi8ze4DTWWvd/7Od3MciVQo3xQS pLdTJg+U8F22ju/jt9bsfvQIwvW8Dt1D -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:44 2025 by rpki-client