$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: SA8O4YeV8AXjv+rOa5H5MfbMbX5NYjvNy9pstVNHjzk= Subject key identifier: 81:F3:01:B7:3B:C1:1E:4B:29:47:2C:76:FF:38:86:44:66:DE:A4:A1 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: BB Signing time: Sun 19 Oct 2025 09:08:35 +0000 Manifest this update: Sun 19 Oct 2025 09:08:34 +0000 Manifest next update: Sun 26 Oct 2025 09:08:34 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: U8zWfSnawVq1rJiC2YSZwdEqO7mOiEnUpYKOdyeHOsM=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: QPPTXA+ALXUhXbBS6N6EbcLL1inNfd3655N4UckWgIw=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: qSH5h5rhfF2GxCdM6cfWpd9BiagkUdZKPfSn4h0sbnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Oct 19 09:08:34 2025 GMT Not After : Oct 26 09:08:34 2025 GMT Subject: CN=68f4aa92-4a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:f5:c7:dc:df:c6:b7:19:1d:71:ff:2b:8f: 33:0b:cf:d0:f9:39:2e:80:37:3f:30:65:43:13:a0: da:7d:8c:53:0e:67:28:89:a8:d5:cc:e2:b8:2b:95: 30:b9:4d:ec:50:e6:e0:58:01:d5:a6:78:eb:08:01: da:59:d3:51:ff:71:66:aa:90:9a:f9:e4:cf:44:02: 1b:73:f5:f7:74:15:97:9a:33:40:51:cd:da:78:45: e6:21:85:06:11:2b:fa:79:52:2d:9b:45:0c:cb:55: 54:a9:0d:21:33:ce:04:81:12:46:f4:7b:bd:e6:3f: d7:d6:04:5f:b1:79:93:83:3a:59:52:00:a7:26:8d: c1:f1:3e:82:32:e8:ee:97:5b:1f:ed:fe:74:dd:58: d3:a1:b5:5c:59:64:8e:00:41:f6:e6:5c:1b:01:f9: 97:06:c8:44:e8:57:31:5e:d1:97:7a:ba:23:eb:99: 67:e0:8d:3c:38:30:d8:8e:af:5e:62:2f:19:6f:f2: 98:c1:31:31:f6:0d:0a:b0:39:2b:21:f3:57:98:fe: a1:89:43:cb:05:2e:a1:02:52:99:5b:d8:0f:3e:0a: c7:6e:23:ce:c3:98:f5:62:a0:d4:0c:ca:69:53:79: 94:1d:15:63:be:ae:57:5f:02:ab:58:c7:d1:24:b3: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F3:01:B7:3B:C1:1E:4B:29:47:2C:76:FF:38:86:44:66:DE:A4:A1 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:dc:b8:a1:d1:52:fc:cc:fb:e5:5a:4a:d8:6c:89:06:59: 8f:b6:00:ce:03:28:6f:20:d6:99:4f:5c:68:19:9b:ae:5d:30: 49:c0:d9:d7:d8:1c:01:55:b3:14:e6:ef:de:ed:76:10:6d:71: 05:bc:02:17:ca:0a:6e:fb:91:de:3f:c2:06:9d:77:71:d8:5b: df:2b:1a:67:33:65:15:41:70:43:45:9a:4e:ff:ff:12:ad:2a: 53:64:d5:a2:da:88:be:d8:f6:35:8d:7f:95:93:91:60:a1:3a: 31:0e:b7:35:01:15:95:88:cd:cb:22:fb:0d:86:70:5c:fd:9e: 9e:d0:5b:35:fa:fc:de:6f:ca:25:c4:98:fb:27:54:56:5c:e8: 73:80:54:9d:a3:80:65:17:8b:5b:86:b4:47:f8:0f:48:fd:21: b5:ae:a4:12:9c:a5:bc:4e:d2:e9:12:23:be:44:0a:06:40:c4: ea:df:71:27:3f:d0:02:f2:89:8b:e2:a4:c4:8d:e6:81:94:fa: e0:d5:79:d2:15:17:90:aa:40:3b:57:00:8e:ef:3b:af:c0:51: f8:07:36:82:da:c3:99:cf:b7:d2:a5:90:6a:aa:db:37:f1:d8: 1b:16:77:4c:36:fc:1c:4a:d5:8a:9c:d6:81:51:08:9e:1b:c5: 4c:62:5e:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjUxMDE5MDkwODM0WhcNMjUxMDI2MDkwODM0WjAYMRYwFAYD VQQDEw02OGY0YWE5Mi00YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3T1x9zfxrcZHXH/K48zC8/Q+TkugDc/MGVDE6DafYxTDmcoiajVzOK4K5Uw uU3sUObgWAHVpnjrCAHaWdNR/3FmqpCa+eTPRAIbc/X3dBWXmjNAUc3aeEXmIYUG ESv6eVItm0UMy1VUqQ0hM84EgRJG9Hu95j/X1gRfsXmTgzpZUgCnJo3B8T6CMuju l1sf7f503VjTobVcWWSOAEH25lwbAfmXBshE6FcxXtGXeroj65ln4I08ODDYjq9e Yi8Zb/KYwTEx9g0KsDkrIfNXmP6hiUPLBS6hAlKZW9gPPgrHbiPOw5j1YqDUDMpp U3mUHRVjvq5XXwKrWMfRJLMuZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHzAbc7 wR5LKUcsdv84hkRm3qShMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Nty4odFS/Mz75VpK2GyJBlmPtgDOAyhvINaZT1xoGZuuXTBJwNnX 2BwBVbMU5u/e7XYQbXEFvAIXygpu+5HeP8IGnXdx2FvfKxpnM2UVQXBDRZpO//8S rSpTZNWi2oi+2PY1jX+Vk5FgoToxDrc1ARWViM3LIvsNhnBc/Z6e0Fs1+vzeb8ol xJj7J1RWXOhzgFSdo4BlF4tbhrRH+A9I/SG1rqQSnKW8TtLpEiO+RAoGQMTq33En P9AC8omL4qTEjeaBlPrg1XnSFReQqkA7VwCO7zuvwFH4BzaC2sOZz7fSpZBqqts3 8dgbFndMNvwcStWKnNaBUQieG8VMYl6l -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:33 2025 by rpki-client