$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: UQrKVMFJwGgIqIMVoTEeUS3tH7AXzTQw5peJZ+Bz6+8= Subject key identifier: FD:4F:9B:26:C1:30:84:1F:B9:1B:05:C2:F6:A4:15:66:D2:42:58:E7 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 09F7 Signing time: Sat 18 Oct 2025 21:37:39 +0000 Manifest this update: Sat 18 Oct 2025 21:37:39 +0000 Manifest next update: Sat 25 Oct 2025 21:37:39 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: 38KaHwtyeC6gGliDOxRt92y1a1oJEnzVHKtfEytb9Vs=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: qD7Tfzoc4wjH2bt1dbbg4OGAjJJrb45scH4IFujWWW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Oct 18 21:37:39 2025 GMT Not After : Oct 25 21:37:39 2025 GMT Subject: CN=68f408a3-5776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:3b:2e:a2:1f:e9:8b:d5:ea:46:e0:22:39: d8:76:18:75:fe:c0:67:52:31:7c:1e:83:37:1a:ce: 6c:68:23:71:e2:ba:d4:b3:b5:77:93:ba:43:53:44: 5e:b9:40:b4:d3:97:4f:88:c5:38:bf:33:94:e2:f9: c1:32:5c:35:0c:62:a7:0f:4b:23:01:c2:f9:41:47: 24:64:2b:3c:c9:52:a5:6e:7b:d6:05:c4:a3:2d:37: cc:49:28:ca:80:9f:95:81:cc:ba:76:d6:94:f8:35: 7d:c2:33:be:31:31:72:5f:ad:2c:16:09:91:0d:ad: 42:8c:31:c7:1b:36:d6:2c:bc:0d:b2:28:9c:d2:c9: 1b:bc:bb:24:73:75:b2:b0:59:02:dd:44:30:1c:1e: f4:d9:30:06:9e:89:d1:ca:6e:0d:9b:fe:9e:e8:46: 21:a9:6b:2d:c1:5a:ad:ef:6b:78:ef:45:de:f9:ce: 0b:79:b9:63:76:fc:d4:02:78:e5:02:d9:d3:cc:ee: 8a:e8:49:43:14:70:32:84:b5:36:7d:4e:04:bb:ad: 05:2e:c7:fb:27:24:dd:4f:5d:c1:c7:1c:57:1a:66: fd:a0:d0:1d:57:8d:48:c9:78:fd:fd:fb:5d:79:d7: 54:ab:dc:5b:75:99:90:6c:a7:d8:06:ac:be:56:65: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4F:9B:26:C1:30:84:1F:B9:1B:05:C2:F6:A4:15:66:D2:42:58:E7 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:02:ba:1c:38:22:39:e1:2a:9c:e2:47:f8:4b:a3:be:3a:e5: 02:59:c5:38:c6:84:fd:13:32:0f:cb:83:bf:6b:f4:e7:14:b3: 56:49:0e:e7:49:0b:b7:b4:2b:d1:ea:6e:bd:bc:d4:77:bf:d8: 2c:b4:3b:05:75:39:37:0e:63:96:73:2a:3f:da:df:9f:9d:04: 53:5b:c8:73:97:e0:11:fb:35:3f:6a:1f:2b:1a:e7:39:e6:2e: 9c:88:87:35:2e:35:f6:3c:a2:7d:03:14:59:7a:a8:10:91:17: ac:94:7d:97:80:87:14:b8:cd:62:8d:52:59:a4:71:89:16:5b: af:ac:33:b4:05:c8:45:30:ed:d6:4d:e8:7d:15:96:d9:e1:72: c0:d2:9a:90:bf:e5:b0:1d:3a:f2:f1:2d:f3:e2:93:8c:90:2c: 20:69:e9:69:29:08:4a:62:83:47:91:f2:58:fd:ba:6d:6b:20: 62:c8:ff:6d:a9:95:2b:3f:3f:3c:38:1a:92:13:fa:b5:0d:4c: 8b:c9:cd:b1:f0:3c:05:be:8d:9c:c5:95:20:9a:e5:5e:f1:7d: 3c:b9:af:b1:4b:dc:48:9c:fa:0d:c5:f9:72:cc:a3:c9:1c:24: d6:5f:ba:97:3e:07:02:f6:9b:61:3f:dd:d7:20:5b:f2:0f:43: e8:c9:37:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUxMDE4MjEzNzM5WhcNMjUxMDI1MjEzNzM5WjAYMRYwFAYD VQQDEw02OGY0MDhhMy01Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEs7LqIf6YvV6kbgIjnYdhh1/sBnUjF8HoM3Gs5saCNx4rrUs7V3k7pDU0Re uUC005dPiMU4vzOU4vnBMlw1DGKnD0sjAcL5QUckZCs8yVKlbnvWBcSjLTfMSSjK gJ+Vgcy6dtaU+DV9wjO+MTFyX60sFgmRDa1CjDHHGzbWLLwNsiic0skbvLskc3Wy sFkC3UQwHB702TAGnonRym4Nm/6e6EYhqWstwVqt72t470Xe+c4LebljdvzUAnjl AtnTzO6K6ElDFHAyhLU2fU4Eu60FLsf7JyTdT13BxxxXGmb9oNAdV41IyXj9/ftd eddUq9xbdZmQbKfYBqy+VmX8MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1PmybB MIQfuRsFwvakFWbSQljnMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNArocOCI54Sqc4kf4S6O+OuUCWcU4xoT9EzIPy4O/a/TnFLNWSQ7n SQu3tCvR6m69vNR3v9gstDsFdTk3DmOWcyo/2t+fnQRTW8hzl+AR+zU/ah8rGuc5 5i6ciIc1LjX2PKJ9AxRZeqgQkReslH2XgIcUuM1ijVJZpHGJFluvrDO0BchFMO3W Teh9FZbZ4XLA0pqQv+WwHTry8S3z4pOMkCwgaelpKQhKYoNHkfJY/bptayBiyP9t qZUrPz88OBqSE/q1DUyLyc2x8DwFvo2cxZUgmuVe8X08ua+xS9xInPoNxflyzKPJ HCTWX7qXPgcC9pthP93XIFvyD0PoyTf0 -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:04 2025 by rpki-client