$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft File: m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json) Hash identifier: Bu2Feexbj0yybeKa1PgmRxu+YkgEz9KZ/sD4Q8Ah6co= Subject key identifier: DE:E5:F7:11:B7:6E:47:C6:C1:1C:45:57:C1:66:0F:D5:65:75:C7:8F Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft Manifest number: 0A85 Signing time: Sat 18 Oct 2025 21:22:10 +0000 Manifest this update: Sat 18 Oct 2025 21:22:09 +0000 Manifest next update: Sat 25 Oct 2025 21:22:09 +0000 Files and hashes: 1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: Bwrn5cWsNXuS8ESgqCuYoYV53xCPRFZJfXkv/Na/KNY=) 2: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: N4gw2f/bDc4vAICNgZt17fcv5vKiGHjdnsBTX4dpjPM=) 3: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: aZPKGOPG+1Lf391VuMHJv72RD5TC+yEcx6KaYkumZxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Validity Not Before: Oct 18 21:22:09 2025 GMT Not After : Oct 25 21:22:09 2025 GMT Subject: CN=68f40501-36ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:5c:87:a9:7e:24:90:9d:a8:0a:52:6c:5c: 14:d9:69:eb:60:5a:f1:bf:6a:cd:c9:89:f2:c9:fd: aa:a0:bd:9d:34:19:65:ee:95:7c:38:ed:8c:33:e9: 46:56:0c:56:dc:5d:39:62:aa:6f:56:24:65:82:83: be:02:f8:d6:ad:a4:c4:e7:90:ed:b9:77:e2:68:86: 8d:37:28:1b:98:80:14:2b:0e:c6:01:a5:78:48:9a: 08:71:f4:be:2d:78:f6:ec:c2:93:39:d3:c1:29:61: 43:c5:6f:76:d1:6b:2f:76:73:ff:25:d6:b1:b0:54: 67:23:a4:40:96:a8:77:0b:7d:82:ae:17:6d:9e:59: ac:c8:fe:85:d6:e2:4e:e6:c5:30:62:d4:c8:a0:6c: d2:fd:d8:e5:62:fe:f0:d4:dc:35:c3:73:7d:3a:d3: 11:4a:37:c9:ee:e1:26:6b:83:13:34:48:54:ad:e5: c1:d0:6b:d0:fa:cf:8c:a8:61:ce:4f:dc:48:80:f5: a4:ee:db:50:b2:d0:f3:9f:4c:96:cb:91:e3:f7:a5: 17:36:04:8c:d9:e7:3f:3e:c5:22:9f:c1:57:48:15: f2:21:61:ea:d3:59:d1:4e:1e:57:e9:54:fb:d2:71: 46:b0:38:d5:58:81:6c:19:1f:1f:5f:ec:93:b6:bb: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E5:F7:11:B7:6E:47:C6:C1:1C:45:57:C1:66:0F:D5:65:75:C7:8F X509v3 Authority Key Identifier: keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f2:3e:03:48:6e:48:70:24:25:35:e7:25:62:d4:93:ec:e1: 14:2c:49:e1:2e:aa:3f:82:14:e9:cb:b6:e7:ab:b4:3c:d3:98: d8:86:b9:85:3e:f4:30:7d:ec:9f:81:ee:ea:b9:2d:ed:a7:35: c8:76:f7:5f:5f:d5:c8:b5:f6:1c:0a:17:45:bb:cd:17:b5:0c: 95:92:e6:bf:ec:77:ea:91:60:dc:da:b5:4c:92:f6:11:58:b4: cf:23:fe:d6:7f:62:a4:03:9a:46:03:53:17:66:4a:0b:b6:fe: fc:38:70:6e:f9:d7:c2:d3:bd:2c:6b:f5:90:79:83:ef:ba:8b: 23:90:32:dd:de:3d:4a:51:9b:67:00:c5:39:98:a5:cf:41:b7: e5:4b:3e:25:13:0b:85:40:d2:58:bf:26:1f:c5:8a:d2:02:0c: 64:1a:9c:bb:b1:01:f5:25:30:75:a9:d3:3c:00:ad:51:2e:af: 64:b1:8d:24:f3:0a:bd:f9:69:6f:d3:66:51:12:2a:36:0c:96: c5:78:4c:ce:4c:ef:2c:0c:e2:fa:c9:ff:92:59:20:42:df:b2: a6:c4:4b:b9:23:2e:79:10:64:7c:f3:fb:b4:bf:42:9c:00:87: 8d:cb:8f:4a:17:04:26:02:2e:a3:c1:84:ac:b5:45:04:a1:d7: c1:aa:3c:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0I2ODExMC8GA1UEBRMoOUI1QTUzNjVEQTJCMjVGQTY5OEI3MDMwOTNDRkJEQzJB MkMyM0ZDRjAeFw0yNTEwMTgyMTIyMDlaFw0yNTEwMjUyMTIyMDlaMBgxFjAUBgNV BAMTDTY4ZjQwNTAxLTM2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4WFyHqX4kkJ2oClJsXBTZaetgWvG/as3JifLJ/aqgvZ00GWXulXw47Ywz6UZW DFbcXTliqm9WJGWCg74C+NatpMTnkO25d+Joho03KBuYgBQrDsYBpXhImghx9L4t ePbswpM508EpYUPFb3bRay92c/8l1rGwVGcjpECWqHcLfYKuF22eWazI/oXW4k7m xTBi1MigbNL92OVi/vDU3DXDc3060xFKN8nu4SZrgxM0SFSt5cHQa9D6z4yoYc5P 3EiA9aTu21Cy0POfTJbLkeP3pRc2BIzZ5z8+xSKfwVdIFfIhYerTWdFOHlfpVPvS cUawONVYgWwZHx9f7JO2u7Z5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3uX3Ebdu R8bBHEVXwWYP1WV1x48wHwYDVR0jBBgwFoAUm1pTZdorJfppi3Awk8+9wqLCP88w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QjY4LzUzQTdCOTJDQjBB NTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTFwVFpkb3JKZnBwaTNBd2s4LTl3cUxDUDg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 QjY4LzUzQTdCOTJDQjBBNTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZw cGkzQXdrOC05d3FMQ1A4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACbyPgNIbkhwJCU15yVi1JPs4RQsSeEuqj+CFOnLtuertDzTmNiGuYU+ 9DB97J+B7uq5Le2nNch2919f1ci19hwKF0W7zRe1DJWS5r/sd+qRYNzatUyS9hFY tM8j/tZ/YqQDmkYDUxdmSgu2/vw4cG7518LTvSxr9ZB5g++6iyOQMt3ePUpRm2cA xTmYpc9Bt+VLPiUTC4VA0li/Jh/FitICDGQanLuxAfUlMHWp0zwArVEur2SxjSTz Cr35aW/TZlESKjYMlsV4TM5M7ywM4vrJ/5JZIELfsqbES7kjLnkQZHzz+7S/QpwA h43Lj0oXBCYCLqPBhKy1RQSh18GqPKk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:27 2025 by rpki-client