$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: sKdvW73hBeeFRjUdGa0OP9OJ15kv4J/EP1iTdZ/jJQk= Subject key identifier: 40:8C:0E:96:6F:36:53:86:CD:C9:B5:76:CF:B0:83:D8:CD:70:FE:0E Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 085E Signing time: Sat 18 Oct 2025 21:48:10 +0000 Manifest this update: Sat 18 Oct 2025 21:48:10 +0000 Manifest next update: Sat 25 Oct 2025 21:48:10 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: 4go6c/yCMlHTKekyMufCsc+Sa1FpZJQLEJo65jWslDM=) 2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: 5FNBX5H270TTnOX6V0W/sXkhhqzheyLbOa1sf514DnQ=) 3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: VBveYclvQ2SVsxz7urPOSzVM9trDrjYG3QLCDnYlh4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Oct 18 21:48:10 2025 GMT Not After : Oct 25 21:48:10 2025 GMT Subject: CN=68f40b1a-8019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:27:be:fd:c4:f0:57:a5:b2:4f:aa:56:d7: 56:2b:be:81:08:ca:2c:36:15:78:7a:f2:3f:66:ed: e0:86:bd:e7:d2:9d:14:c5:a6:81:ba:44:46:4d:53: c5:83:41:e0:ef:d6:25:c8:89:67:bb:0b:ce:72:90: 45:d4:1f:8b:8a:59:e8:d0:a8:3a:eb:c2:65:0d:fb: 83:5b:94:76:54:0d:a8:69:09:87:19:ac:4b:08:4d: 56:3e:b7:be:93:25:5c:04:4f:dd:fe:6f:5e:69:b5: 8d:d1:cc:c4:de:66:c9:d8:06:58:4e:ac:c0:f8:6e: 19:68:7f:bd:23:ed:71:55:5f:0c:02:7d:24:38:fa: d6:51:09:97:52:69:be:86:b2:e0:46:b7:66:25:8b: fd:20:d8:05:45:2c:f4:67:69:6e:ad:2a:c3:4a:9f: 62:d3:3b:d0:3d:d4:d3:f3:ee:4b:20:39:d5:05:9d: 30:a0:29:db:cc:72:a1:40:9e:c2:b5:f0:11:30:92: a4:50:03:c0:fe:b2:02:e6:5d:67:d9:ee:e1:78:b9: e6:83:2d:b7:f6:fb:38:b3:1e:db:5a:78:be:12:93: 8b:cd:03:b0:23:ee:b2:d8:7e:97:f6:ad:c2:11:cf: cb:e4:bc:31:5a:ce:19:af:a9:9d:30:e1:f1:d9:03: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8C:0E:96:6F:36:53:86:CD:C9:B5:76:CF:B0:83:D8:CD:70:FE:0E X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5f:86:d8:fe:4e:28:e7:c1:70:9c:23:e2:82:0a:3c:7a:0c: e9:20:36:7d:3b:00:9c:48:52:72:22:67:11:07:11:1f:64:81: 63:3e:21:b3:a7:4a:4f:92:00:74:ca:f1:2d:4c:5e:0d:e7:80: b5:79:48:7a:48:46:61:3b:d0:5c:e0:39:c9:df:41:4b:fb:35: 3c:a4:55:ab:72:2b:56:78:73:29:f4:41:f7:db:6c:7e:29:53: 2b:ee:2e:b4:8f:50:11:2a:a4:43:f1:9f:a1:d9:65:10:23:cb: d4:84:93:02:dc:59:9b:41:2a:82:28:f6:ac:92:8f:12:fd:1e: 54:13:d2:14:f8:b5:3b:70:59:48:79:cb:70:21:71:b1:0f:32: 63:57:86:3b:9b:61:94:54:60:b9:35:9d:01:94:2b:56:87:35: b7:fc:66:ee:a4:03:57:33:2d:e2:85:b4:08:35:d3:52:50:ff: 99:c6:b8:57:90:f3:ab:97:22:d5:34:62:53:d8:80:b3:f8:87: f1:d8:06:c6:ee:71:4e:e6:bb:7b:ee:bc:00:7c:8e:07:c3:20: c2:63:7e:ce:bc:49:52:73:42:26:7f:c0:82:b8:22:ac:56:3c: 51:92:72:3f:8e:c3:56:ab:1f:8b:7c:23:62:d6:ae:4e:7f:61: e0:c3:e9:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjUxMDE4MjE0ODEwWhcNMjUxMDI1MjE0ODEwWjAYMRYwFAYD VQQDEw02OGY0MGIxYS04MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNInvv3E8Felsk+qVtdWK76BCMosNhV4evI/Zu3ghr3n0p0UxaaBukRGTVPF g0Hg79YlyIlnuwvOcpBF1B+Lilno0Kg668JlDfuDW5R2VA2oaQmHGaxLCE1WPre+ kyVcBE/d/m9eabWN0czE3mbJ2AZYTqzA+G4ZaH+9I+1xVV8MAn0kOPrWUQmXUmm+ hrLgRrdmJYv9INgFRSz0Z2lurSrDSp9i0zvQPdTT8+5LIDnVBZ0woCnbzHKhQJ7C tfARMJKkUAPA/rIC5l1n2e7heLnmgy239vs4sx7bWni+EpOLzQOwI+6y2H6X9q3C Ec/L5LwxWs4Zr6mdMOHx2QMg9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECMDpZv NlOGzcm1ds+wg9jNcP4OMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEX4bY/k4o58FwnCPiggo8egzpIDZ9OwCcSFJyImcRBxEfZIFjPiGz p0pPkgB0yvEtTF4N54C1eUh6SEZhO9Bc4DnJ30FL+zU8pFWrcitWeHMp9EH322x+ KVMr7i60j1ARKqRD8Z+h2WUQI8vUhJMC3FmbQSqCKPasko8S/R5UE9IU+LU7cFlI ectwIXGxDzJjV4Y7m2GUVGC5NZ0BlCtWhzW3/GbupANXMy3ihbQINdNSUP+ZxrhX kPOrlyLVNGJT2ICz+Ifx2AbG7nFO5rt77rwAfI4HwyDCY37OvElSc0Imf8CCuCKs VjxRknI/jsNWqx+LfCNi1q5Of2Hgw+no -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:40 2025 by rpki-client