$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: CW2AXop6bt8STeNCLYHU3Qtg8kZVW+nuQ48KZLdMQHg= Subject key identifier: 5A:99:E7:A5:3F:A4:DD:45:8A:8B:9C:4E:26:EE:67:55:06:B5:8E:8B Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: DD Signing time: Sun 19 Oct 2025 08:41:12 +0000 Manifest this update: Sun 19 Oct 2025 08:41:11 +0000 Manifest next update: Sun 26 Oct 2025 08:41:11 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: EfnN1sMBEc8SdpTtx72HeUmS1Y7YD0FuJtY1z0Y3KqU=) 2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: 2L9u9YUqO00U34mq8XNoVmN+3ZHp6ekSDH71ZMwwS68=) 3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: 8BNbqhDSj5zwZRpetUourvgFN3LcAIxoiLxOQgq3beM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Oct 19 08:41:11 2025 GMT Not After : Oct 26 08:41:11 2025 GMT Subject: CN=68f4a428-36f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:c8:d1:86:f0:24:00:18:99:1e:00:70:22: 8b:18:20:d2:e1:83:a3:6f:e8:b7:f8:5c:05:7a:df: 6f:83:89:f1:53:f1:15:3b:4e:51:48:8a:15:79:24: f4:35:ae:21:f9:5c:73:07:57:55:3b:79:bd:a1:35: f4:c1:81:6b:97:b0:c9:90:31:5b:1d:54:46:e8:9f: 97:5e:4e:4c:91:7a:bf:c0:0e:12:ef:c8:e5:c7:4e: d4:68:3f:57:18:cd:6e:a2:1a:45:7a:98:ae:93:66: 9a:15:45:22:ec:aa:7b:3b:be:7d:4b:46:80:8c:82: 32:1c:d1:26:50:67:ce:73:04:f4:b2:4c:a8:f9:ce: 40:d3:12:8d:46:62:5c:5e:78:2f:75:72:82:35:4a: 46:a7:34:23:1a:a8:a3:40:bd:41:ff:9b:97:a7:ab: 9f:32:b9:45:d7:ba:4b:b8:7c:66:20:b7:e9:9f:df: ec:c8:bf:b4:eb:e3:fd:45:aa:fd:35:ee:fa:37:1b: de:60:a6:38:26:22:7a:67:ff:14:fd:5f:08:6a:a6: 54:33:cc:1a:d5:05:62:bd:ea:66:40:d2:78:fc:6b: b1:4f:f4:de:50:66:a0:b0:70:f9:5a:f3:4f:fa:4c: 04:48:04:46:ce:bc:af:fc:bb:03:07:a8:4f:1d:57: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:E7:A5:3F:A4:DD:45:8A:8B:9C:4E:26:EE:67:55:06:B5:8E:8B X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:85:f3:6b:37:bc:6e:03:0e:ab:19:e9:4b:06:5d:e6:24:f4: 58:52:e3:c1:4d:f2:a3:9e:6b:20:96:e7:93:77:a9:08:13:81: 08:33:fd:9e:c8:6f:65:bc:fd:34:7b:3f:6a:2f:06:c0:4f:d2: 22:25:b8:f6:db:10:63:5c:bd:4f:d9:f7:78:bd:31:9f:c2:5f: 5f:1d:ec:10:02:7c:ac:6a:c6:ce:ce:da:e8:b4:b8:5c:6c:ec: eb:15:cb:5c:c5:9c:a5:85:b7:86:6e:2d:fd:41:f1:3b:76:f9: d1:2e:32:39:b3:62:63:72:d6:98:d7:67:cc:bb:e8:48:69:16: 5a:e1:9e:da:d4:34:18:a0:d4:54:ce:d2:e4:c4:b6:17:7b:75: 90:0b:b0:c9:42:dc:ed:c1:08:52:e2:8f:a3:e1:7d:0c:61:8c: c8:4f:31:66:02:f9:4f:7a:e9:f5:f1:d2:bd:20:c2:00:fc:ef: e6:90:85:52:23:7c:27:31:7e:61:3f:f4:6b:64:db:13:c8:02: 75:1d:a4:08:5f:70:24:43:34:34:ea:8d:43:f8:b6:ea:2f:9f: b1:40:b4:28:aa:c1:de:77:db:9e:c4:b3:bb:c8:26:0b:b5:f4: 8f:1c:46:95:77:d5:2d:b8:1b:03:7c:7f:46:9c:38:6d:c5:2a: db:8f:15:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUxMDE5MDg0MTExWhcNMjUxMDI2MDg0MTExWjAYMRYwFAYD VQQDEw02OGY0YTQyOC0zNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqXI0YbwJAAYmR4AcCKLGCDS4YOjb+i3+FwFet9vg4nxU/EVO05RSIoVeST0 Na4h+VxzB1dVO3m9oTX0wYFrl7DJkDFbHVRG6J+XXk5MkXq/wA4S78jlx07UaD9X GM1uohpFepiuk2aaFUUi7Kp7O759S0aAjIIyHNEmUGfOcwT0skyo+c5A0xKNRmJc XngvdXKCNUpGpzQjGqijQL1B/5uXp6ufMrlF17pLuHxmILfpn9/syL+06+P9Rar9 Ne76NxveYKY4JiJ6Z/8U/V8IaqZUM8wa1QVivepmQNJ4/GuxT/TeUGagsHD5WvNP +kwESARGzryv/LsDB6hPHVfvTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqZ56U/ pN1FioucTibuZ1UGtY6LMB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXhfNrN7xuAw6rGelLBl3mJPRYUuPBTfKjnmsglueTd6kIE4EIM/2e yG9lvP00ez9qLwbAT9IiJbj22xBjXL1P2fd4vTGfwl9fHewQAnysasbOztrotLhc bOzrFctcxZylhbeGbi39QfE7dvnRLjI5s2JjctaY12fMu+hIaRZa4Z7a1DQYoNRU ztLkxLYXe3WQC7DJQtztwQhS4o+j4X0MYYzITzFmAvlPeun18dK9IMIA/O/mkIVS I3wnMX5hP/RrZNsTyAJ1HaQIX3AkQzQ06o1D+LbqL5+xQLQoqsHed9uexLO7yCYL tfSPHEaVd9UtuBsDfH9GnDhtxSrbjxXZ -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:17 2025 by rpki-client