$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: GgqU1AU5cgstMJGpHuaowkF3GgSGC7a+2sVf6aZTuwk= Subject key identifier: 32:ED:0E:68:B2:1B:B8:26:ED:1F:F0:26:B7:84:B4:C7:2C:61:EF:D0 Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 022A Signing time: Sun 19 Oct 2025 04:15:44 +0000 Manifest this update: Sun 19 Oct 2025 04:15:43 +0000 Manifest next update: Sun 26 Oct 2025 04:15:43 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: i5hK5/J3YfCezMQy4thEdmHcezeKczljIIPmmICoDwE=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: N+dN6EXW9kLpuaXIDcRP+SypH2TkoWeKEFt5XA9cnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Oct 19 04:15:43 2025 GMT Not After : Oct 26 04:15:43 2025 GMT Subject: CN=68f465ef-7d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:16:52:7e:12:c9:8c:ab:a0:4d:60:32:a7: ff:d1:e3:89:d4:95:e2:3c:a4:00:40:f6:1a:74:ca: be:f0:66:63:53:88:43:97:8e:82:0f:4d:7a:7b:93: c7:d4:3c:7a:28:63:e3:80:85:0d:0d:77:59:7d:6a: 52:7e:bb:13:27:3a:55:3f:f9:ea:61:31:42:64:5f: b9:54:9c:75:fe:ab:db:02:f2:dc:08:f7:84:ac:12: fd:3d:92:6f:ec:c6:b0:71:bc:c6:22:37:71:e0:8b: a6:76:3d:ca:6c:5e:4e:cc:a5:3c:dd:98:7e:26:bb: b9:ca:44:13:fe:dd:70:f6:39:74:6a:7f:b6:c4:f3: fc:e0:9b:f1:57:ae:26:56:ca:a5:eb:b0:e5:a3:1f: a2:0b:a9:19:87:91:a9:76:0a:58:78:09:54:63:c9: 99:32:ec:a4:ed:01:d5:60:b9:95:0d:db:71:b5:4f: d1:a9:d0:c8:80:a3:4c:93:b8:bc:b4:13:fe:c3:31: d4:ab:ac:72:d1:ae:8a:f4:01:44:fd:c6:2d:a8:be: c5:29:bc:17:e0:29:be:36:b5:3b:fd:0a:58:1a:d5: 2b:70:07:69:c9:cc:79:87:49:bb:f7:d7:cb:c7:27: 5b:49:25:f3:36:71:21:27:72:e0:9d:22:e7:ac:19: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:ED:0E:68:B2:1B:B8:26:ED:1F:F0:26:B7:84:B4:C7:2C:61:EF:D0 X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9b:24:bc:e9:fb:ef:d1:f1:83:58:64:37:76:02:3c:86:62: b2:75:17:e8:8e:0d:ae:9d:6f:36:08:64:fa:07:f6:19:06:94: cd:cb:de:0c:82:6f:a1:8b:e7:0b:dc:28:6f:b8:f4:dc:a8:a5: 12:9e:52:c6:3d:96:1c:e5:12:72:5d:ab:88:f7:f6:18:12:a9: ed:2b:9b:8d:f4:ec:a5:95:d4:6f:ae:92:64:13:94:33:e8:a6: 16:c0:69:fd:49:23:ee:77:38:bf:9f:93:9c:56:7b:c3:ce:12: 2e:de:32:34:21:9f:97:82:c4:f9:79:15:3e:d2:f6:c3:25:d9: fe:24:eb:af:23:71:9e:83:e5:d4:b7:ef:07:fa:2f:e1:1a:aa: 35:77:c3:d1:da:cc:ec:2f:db:43:42:0c:ee:f9:a5:2c:d3:c4: d1:43:74:57:9d:6f:fa:f4:77:db:a5:0c:11:78:20:41:b7:c9: 43:43:99:09:36:86:3a:82:5c:49:05:b9:c6:ea:59:bd:19:b9: 7b:1c:a0:d0:77:88:ff:87:40:91:c3:ac:9c:7a:47:69:ae:b5: d5:70:f3:0e:cf:d7:02:82:1f:79:2e:b8:e5:5d:9e:53:43:16: fb:19:03:30:4c:33:f2:fc:11:3a:d3:46:2d:6f:22:4a:41:b9: 31:51:ef:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjUxMDE5MDQxNTQzWhcNMjUxMDI2MDQxNTQzWjAYMRYwFAYD VQQDEw02OGY0NjVlZi03ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgQWUn4SyYyroE1gMqf/0eOJ1JXiPKQAQPYadMq+8GZjU4hDl46CD016e5PH 1Dx6KGPjgIUNDXdZfWpSfrsTJzpVP/nqYTFCZF+5VJx1/qvbAvLcCPeErBL9PZJv 7MawcbzGIjdx4Iumdj3KbF5OzKU83Zh+Jru5ykQT/t1w9jl0an+2xPP84JvxV64m Vsql67Dlox+iC6kZh5GpdgpYeAlUY8mZMuyk7QHVYLmVDdtxtU/RqdDIgKNMk7i8 tBP+wzHUq6xy0a6K9AFE/cYtqL7FKbwX4Cm+NrU7/QpYGtUrcAdpycx5h0m799fL xydbSSXzNnEhJ3LgnSLnrBk0DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLtDmiy G7gm7R/wJreEtMcsYe/QMB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7myS86fvv0fGDWGQ3dgI8hmKydRfojg2unW82CGT6B/YZBpTNy94M gm+hi+cL3ChvuPTcqKUSnlLGPZYc5RJyXauI9/YYEqntK5uN9OylldRvrpJkE5Qz 6KYWwGn9SSPudzi/n5OcVnvDzhIu3jI0IZ+XgsT5eRU+0vbDJdn+JOuvI3Geg+XU t+8H+i/hGqo1d8PR2szsL9tDQgzu+aUs08TRQ3RXnW/69HfbpQwReCBBt8lDQ5kJ NoY6glxJBbnG6lm9Gbl7HKDQd4j/h0CRw6ycekdprrXVcPMOz9cCgh95LrjlXZ5T Qxb7GQMwTDPy/BE600YtbyJKQbkxUe8d -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:36 2025 by rpki-client