$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: ozRxzj7Af8AgRCLiYuUadoyVjMiuOzvd6cxs9Ljh3b8= Subject key identifier: 95:B3:68:6A:70:E0:46:43:53:B2:49:42:8E:05:A3:03:90:DA:CB:3B Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 32 Signing time: Sun 19 Oct 2025 11:08:51 +0000 Manifest this update: Sun 19 Oct 2025 11:08:51 +0000 Manifest next update: Sun 26 Oct 2025 11:08:51 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: WQsVLV0pFbPInpxYIAXWZWzFsSeX4Ctrit3V13rzLhc=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Oct 19 11:08:51 2025 GMT Not After : Oct 26 11:08:51 2025 GMT Subject: CN=68f4c6c3-7812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cf:f0:56:b2:92:e8:35:8b:33:0a:a8:0a:c0: c4:91:b7:23:94:df:9b:ef:9a:1f:f0:c2:14:57:fd: 85:99:b5:71:17:fb:19:0d:b6:e9:6b:05:95:56:2b: e2:26:9f:8c:95:8a:78:ea:5e:74:34:99:c9:8f:ec: 84:44:dc:cd:1c:fb:5d:1b:71:5f:5f:a7:b2:75:43: e2:11:66:99:4b:ec:00:1a:26:15:f1:90:28:4a:4e: dd:30:8b:01:a9:71:64:04:e7:95:fb:61:0d:36:99: 9f:17:b7:9b:56:0b:37:ed:f4:e8:28:2c:d0:cf:4e: d5:5a:d5:a5:f0:4a:b9:c0:b8:28:0c:56:97:65:82: 8a:f5:e0:72:dc:bd:7d:24:c4:d9:e4:eb:af:4b:89: f8:a6:b5:09:d1:d3:c8:60:3c:6b:6d:57:3a:6c:e6: 78:6e:b6:20:9e:b2:aa:9e:cd:4f:c1:45:d5:e2:ff: 43:0b:b7:9b:44:72:5b:5a:cb:9f:00:5c:3d:2d:10: 91:8c:c6:de:e6:8a:ec:3a:83:13:13:f5:ec:59:46: 35:47:60:c6:8d:07:77:56:1c:ac:1c:04:e7:67:70: 56:f9:2e:a6:27:22:e6:dc:d9:3a:8d:49:0d:c0:db: 0b:dd:7a:16:2e:58:31:65:b7:8d:55:3c:21:3f:92: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B3:68:6A:70:E0:46:43:53:B2:49:42:8E:05:A3:03:90:DA:CB:3B X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c5:41:aa:cf:05:52:48:87:3b:51:d1:e5:02:dd:42:93:64: 35:ad:64:b0:ca:da:66:cb:85:d9:c2:5c:43:93:4d:d7:0a:6b: da:79:c6:9e:d8:4f:74:d1:d5:2c:33:8f:cc:fb:e7:53:bc:d4: 0a:65:82:de:31:c0:2e:25:99:d5:48:71:12:7f:09:57:12:67: 5d:7e:24:60:5f:36:5d:21:5b:95:e8:e3:8d:31:cf:f2:2f:6c: 38:b0:e8:73:af:de:03:1a:7e:dc:2d:56:db:fc:d2:40:6e:37: df:30:c8:c5:72:69:84:49:f0:05:42:42:4c:96:69:93:be:4c: e0:7b:38:ce:6c:b0:b0:52:a6:88:f6:0b:14:ea:11:99:5b:58: 3f:1c:b4:bb:86:b5:54:f5:72:0f:3e:8a:f4:6d:b3:5e:11:f0: 55:50:52:8f:97:4d:37:e8:d8:c7:b0:0a:c3:7d:37:94:6a:7f: 0c:12:e7:9d:0f:e3:50:72:5b:c4:28:74:3a:57:9d:2a:62:57: f2:3d:03:16:00:32:43:d4:58:3e:6c:a0:c5:68:66:dc:ab:af: 3d:72:1c:60:29:07:d6:7f:c7:b7:69:35:9d:8e:f1:1c:9e:44: c4:39:ba:1a:f3:b5:21:fa:b7:1a:0c:88:3b:06:ea:bd:6c:d9: 09:44:a0:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTEwMTkxMTA4NTFaFw0yNTEwMjYxMTA4NTFaMBgxFjAUBgNV BAMTDTY4ZjRjNmMzLTc4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuz/BWspLoNYszCqgKwMSRtyOU35vvmh/wwhRX/YWZtXEX+xkNtulrBZVWK+Im n4yVinjqXnQ0mcmP7IRE3M0c+10bcV9fp7J1Q+IRZplL7AAaJhXxkChKTt0wiwGp cWQE55X7YQ02mZ8Xt5tWCzft9OgoLNDPTtVa1aXwSrnAuCgMVpdlgor14HLcvX0k xNnk669LifimtQnR08hgPGttVzps5nhutiCesqqezU/BRdXi/0MLt5tEcltay58A XD0tEJGMxt7miuw6gxMT9exZRjVHYMaNB3dWHKwcBOdncFb5LqYnIubc2TqNSQ3A 2wvdehYuWDFlt41VPCE/kugdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlbNoanDg RkNTsklCjgWjA5DayzswHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALfFQarPBVJIhztR0eUC3UKTZDWtZLDK2mbLhdnCXEOTTdcKa9p5xp7Y T3TR1Swzj8z751O81Aplgt4xwC4lmdVIcRJ/CVcSZ11+JGBfNl0hW5Xo440xz/Iv bDiw6HOv3gMaftwtVtv80kBuN98wyMVyaYRJ8AVCQkyWaZO+TOB7OM5ssLBSpoj2 CxTqEZlbWD8ctLuGtVT1cg8+ivRts14R8FVQUo+XTTfo2MewCsN9N5RqfwwS550P 41ByW8QodDpXnSpiV/I9AxYAMkPUWD5soMVoZtyrrz1yHGApB9Z/x7dpNZ2O8Rye RMQ5uhrztSH6txoMiDsG6r1s2QlEoK4= -----END CERTIFICATE-----Generated at Tue Oct 21 12:47:35 2025 by rpki-client