$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: 73sODcBii4YJUT2Z9hnauujvjEfpGSVFCVGPYrTDymU= Subject key identifier: 34:CE:73:67:09:AB:74:EB:DF:A7:49:BC:A7:96:33:9A:D6:C1:33:37 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 04D4 Signing time: Sun 19 Oct 2025 01:37:17 +0000 Manifest this update: Sun 19 Oct 2025 01:37:16 +0000 Manifest next update: Sun 26 Oct 2025 01:37:16 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: s6VL2NaA3G9AN+vKIC2+hEjsxxkudv7OGmP2T4APwMo=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: jYyif5XzvidlG1gkLHEZCka6sLKHMVLL3uaZPQUQSWU=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: aIqnIQInPJrCMj5K0+1zGOgCOM0xLmrh4KbjkSzgqVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Oct 19 01:37:16 2025 GMT Not After : Oct 26 01:37:16 2025 GMT Subject: CN=68f440cc-bb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:3a:71:17:39:ab:69:a5:f8:45:d1:4c:8b: b8:b3:36:a9:b8:e5:93:24:43:04:c8:b2:36:27:e6: 76:29:4d:18:74:ac:6c:d6:31:70:d4:0f:bd:70:ce: 51:9e:28:c1:05:e6:ad:4c:8b:e7:f2:91:49:27:3a: 4d:c5:4e:9c:9c:a2:90:fb:3d:ff:2b:fd:fe:70:30: fb:ae:a2:04:c3:df:35:5c:8d:4b:e0:84:40:0f:e4: 56:33:74:db:a5:86:b1:52:93:94:73:fe:14:ff:26: ef:d0:9a:79:75:8f:aa:02:08:22:a7:f4:d1:5f:99: cd:66:9d:93:91:d6:b5:e7:5d:48:06:73:a6:b6:64: 83:3c:55:bc:61:b4:a3:a2:ee:a8:dc:e0:91:cf:a2: 7a:72:95:92:11:61:39:d7:50:77:01:08:69:df:0b: ab:9c:47:6f:55:c0:64:cb:51:e1:29:4a:6d:66:64: b3:0d:5e:be:85:c3:d7:81:4c:dd:77:af:71:1c:e8: 93:31:02:20:26:94:a9:bb:d8:90:d1:b8:1a:83:8e: 45:0d:3e:cb:51:3b:be:ca:af:5e:81:a5:43:83:14: 72:a4:fb:70:3b:d4:68:ac:86:46:6d:b3:63:fa:89: 5d:9a:56:b4:8a:b3:95:e6:91:41:bb:f6:e4:58:56: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CE:73:67:09:AB:74:EB:DF:A7:49:BC:A7:96:33:9A:D6:C1:33:37 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8f:ed:a1:cd:ad:7f:e7:45:e1:f5:be:ce:2b:06:be:61:e0: e2:06:ec:9e:77:39:03:a3:42:bb:80:b5:db:9d:68:48:2a:5b: 20:4e:18:de:be:19:53:2a:95:d6:65:d0:09:0c:35:f2:9b:f2: 75:a6:97:b6:60:03:20:5f:f9:e6:38:c0:4c:87:ec:53:4a:ef: c2:9f:9e:29:b6:c8:15:e8:b5:aa:61:d6:24:ea:7a:11:d5:a3: 67:e1:8b:6a:4d:c7:53:cd:12:f8:39:2e:53:6f:2d:06:55:f9: 29:04:ce:44:e0:de:12:17:5c:b7:74:44:ee:d4:3b:fb:a2:f1: b2:23:ac:cd:b3:23:90:af:af:7e:12:66:74:80:85:0e:8a:67: 2a:4b:f8:8d:c4:65:0e:49:be:ab:f4:80:3d:0e:0f:7f:b9:fe: 4e:c9:3e:02:52:24:37:f5:cc:1a:b1:62:37:89:e4:93:92:40: 38:6a:8b:bf:b6:36:95:c0:1a:0d:c3:ac:0a:da:09:be:16:dd: 3c:b1:aa:92:33:4b:a5:32:c6:a1:58:48:60:c3:cd:f7:61:db: 77:88:76:6c:b6:82:07:df:96:42:cf:a8:c6:66:7b:38:2b:2f: 2e:d2:68:59:c5:73:f0:51:d4:cd:4b:89:fd:7d:7a:ed:37:fd: bd:bb:69:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUxMDE5MDEzNzE2WhcNMjUxMDI2MDEzNzE2WjAYMRYwFAYD VQQDEw02OGY0NDBjYy1iYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC46cRc5q2ml+EXRTIu4szapuOWTJEMEyLI2J+Z2KU0YdKxs1jFw1A+9cM5R nijBBeatTIvn8pFJJzpNxU6cnKKQ+z3/K/3+cDD7rqIEw981XI1L4IRAD+RWM3Tb pYaxUpOUc/4U/ybv0Jp5dY+qAggip/TRX5nNZp2Tkda1511IBnOmtmSDPFW8YbSj ou6o3OCRz6J6cpWSEWE511B3AQhp3wurnEdvVcBky1HhKUptZmSzDV6+hcPXgUzd d69xHOiTMQIgJpSpu9iQ0bgag45FDT7LUTu+yq9egaVDgxRypPtwO9RorIZGbbNj +oldmla0irOV5pFBu/bkWFZtkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTOc2cJ q3Tr36dJvKeWM5rWwTM3MB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfj+2hza1/50Xh9b7OKwa+YeDiBuyedzkDo0K7gLXbnWhIKlsgThje vhlTKpXWZdAJDDXym/J1ppe2YAMgX/nmOMBMh+xTSu/Cn54ptsgV6LWqYdYk6noR 1aNn4YtqTcdTzRL4OS5Tby0GVfkpBM5E4N4SF1y3dETu1Dv7ovGyI6zNsyOQr69+ EmZ0gIUOimcqS/iNxGUOSb6r9IA9Dg9/uf5OyT4CUiQ39cwasWI3ieSTkkA4aou/ tjaVwBoNw6wK2gm+Ft08saqSM0ulMsahWEhgw833Ydt3iHZstoIH35ZCz6jGZns4 Ky8u0mhZxXPwUdTNS4n9fXrtN/29u2nO -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:47 2025 by rpki-client