$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: 9GWgU5Pq+nAtCZm1D6muryzv4lxFLyZEaOPdCPNi9XU= Subject key identifier: 64:EF:73:4A:F3:69:1F:36:54:88:63:C7:6D:EC:9D:30:5E:86:3D:BC Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1AAA Signing time: Sat 18 Oct 2025 16:39:27 +0000 Manifest this update: Sat 18 Oct 2025 16:39:26 +0000 Manifest next update: Sat 25 Oct 2025 16:39:26 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: qIwixMFn62egAFlt/g7M424ciHAZ4iZY1d154IxlDJs=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: 1daEoei36geA2L+OhDw4+YDumwBLUAs+Z5wiCTxRQ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6838 (0x1ab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Oct 18 16:39:26 2025 GMT Not After : Oct 25 16:39:26 2025 GMT Subject: CN=68f3c2bf-e02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:68:92:38:90:51:34:ef:a1:b9:ac:97:f8:d4: f1:69:7c:4f:b0:df:78:d8:e6:96:5d:4a:97:26:39: fe:7d:15:91:eb:91:20:74:e3:17:80:51:bf:f5:88: a0:a8:0a:3c:ab:87:c5:c4:4d:bb:38:56:31:53:14: 3a:bb:d7:c0:da:c2:c3:68:c3:af:c5:9a:d7:e3:ca: 62:47:13:3f:50:80:6c:9b:70:c2:43:38:5c:e7:cb: 96:c2:16:97:a3:40:fb:ac:ee:3e:b0:c1:71:09:5c: 92:bb:20:73:c9:85:e2:a5:a4:b6:d2:fc:2b:89:a3: 72:ab:be:1d:08:5c:25:21:05:e9:fb:95:6d:f3:4b: e3:21:c8:4b:bd:07:83:1d:47:da:27:d6:48:cb:90: 82:56:2e:4e:b4:91:64:63:0f:93:ae:a9:29:f1:26: 17:9b:46:89:ec:13:a7:c3:0b:3d:6f:e3:ce:77:81: a6:1d:8b:9c:f3:9d:c5:bd:55:df:ef:f4:ba:40:6f: 78:f4:2f:a3:1c:fd:b3:cf:5a:9c:02:ea:8a:02:52: 10:08:32:4a:1f:9e:d8:c1:b1:f5:58:8c:a2:22:02: 0e:8c:da:7f:c5:4e:09:b5:a6:76:41:1a:91:ff:44: 18:f2:48:98:4d:ab:cc:db:5e:f0:09:2a:5e:a4:09: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EF:73:4A:F3:69:1F:36:54:88:63:C7:6D:EC:9D:30:5E:86:3D:BC X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:2e:25:e0:53:2e:86:98:86:a5:9e:3e:93:db:af:54:53:b9: fe:0d:ea:72:4a:c7:e0:3c:29:b2:5c:0e:47:85:28:5e:0a:c2: d4:35:5c:1d:fa:80:52:2e:eb:96:73:da:6d:d9:be:02:30:39: 04:9d:1b:f6:97:4d:68:fc:c1:70:63:44:41:42:67:1d:45:7d: 12:cf:95:f7:79:a7:7b:d5:b5:71:e0:80:12:8a:e9:1d:55:f5: 82:cc:ec:cf:dd:3f:48:65:9f:8b:ea:88:dc:e3:a2:a3:d1:7f: 3a:37:d8:e1:32:eb:ac:9e:95:43:81:de:a1:62:a7:72:41:16: 3b:a3:74:e5:40:9e:f5:1d:89:fd:a3:b1:68:ce:e4:0e:70:b5: f6:e3:b8:09:87:14:e2:30:12:5c:a6:0f:50:5c:77:1c:e5:87: f8:cc:e3:21:b2:89:ef:0a:e5:b5:24:a4:bb:af:0c:ca:c1:06: 09:3e:09:71:ce:91:ce:8c:23:37:b9:0d:63:c6:36:3a:b4:53: b1:da:fc:79:aa:59:24:e3:5d:f2:8b:f0:9a:75:dd:5f:04:1b: fa:32:40:20:fc:0a:83:f6:e5:e7:99:ae:74:da:56:fd:de:b1: 4a:01:92:d8:b1:03:e7:77:31:36:81:d1:eb:10:95:80:6c:8f: bf:32:a2:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUxMDE4MTYzOTI2WhcNMjUxMDI1MTYzOTI2WjAYMRYwFAYD VQQDEw02OGYzYzJiZi1lMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52iSOJBRNO+huayX+NTxaXxPsN942OaWXUqXJjn+fRWR65EgdOMXgFG/9Yig qAo8q4fFxE27OFYxUxQ6u9fA2sLDaMOvxZrX48piRxM/UIBsm3DCQzhc58uWwhaX o0D7rO4+sMFxCVySuyBzyYXipaS20vwriaNyq74dCFwlIQXp+5Vt80vjIchLvQeD HUfaJ9ZIy5CCVi5OtJFkYw+Trqkp8SYXm0aJ7BOnwws9b+POd4GmHYuc853FvVXf 7/S6QG949C+jHP2zz1qcAuqKAlIQCDJKH57YwbH1WIyiIgIOjNp/xU4JtaZ2QRqR /0QY8kiYTavM217wCSpepAlXJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTvc0rz aR82VIhjx23snTBehj28MB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYLiXgUy6GmIalnj6T269UU7n+DepySsfgPCmyXA5HhSheCsLUNVwd +oBSLuuWc9pt2b4CMDkEnRv2l01o/MFwY0RBQmcdRX0Sz5X3ead71bVx4IASiukd VfWCzOzP3T9IZZ+L6ojc46Kj0X86N9jhMuusnpVDgd6hYqdyQRY7o3TlQJ71HYn9 o7FozuQOcLX247gJhxTiMBJcpg9QXHcc5Yf4zOMhsonvCuW1JKS7rwzKwQYJPglx zpHOjCM3uQ1jxjY6tFOx2vx5qlkk413yi/Cadd1fBBv6MkAg/AqD9uXnma502lb9 3rFKAZLYsQPndzE2gdHrEJWAbI+/MqKh -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:49 2025 by rpki-client