$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft File: rRUq9u8CmWIL-fd_1gzYsxQEF68.mft (raw, json) Hash identifier: HiljYydIBFfLkiODR/6xvbGvY4/aSY6Lad5re9nOdwk= Subject key identifier: DC:1A:60:61:D0:F5:1A:2F:69:61:B3:97:E5:D6:B4:D3:F3:7A:34:40 Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF Certificate issuer: /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft Manifest number: 1B Signing time: Sun 19 Oct 2025 11:23:22 +0000 Manifest this update: Sun 19 Oct 2025 11:23:21 +0000 Manifest next update: Sun 26 Oct 2025 11:23:21 +0000 Files and hashes: 1: rRUq9u8CmWIL-fd_1gzYsxQEF68.crl (hash: l7wYQMdY32lKv/N+eTom/X1p/MZKEWUTTXGQTflYSPA=) 2: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (hash: SWZOIIyqYqeKGjNImIfW9J7E02rh/5URfQeoSZwvbmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Validity Not Before: Oct 19 11:23:21 2025 GMT Not After : Oct 26 11:23:21 2025 GMT Subject: CN=68f4ca2a-e4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:59:27:db:21:03:c7:6e:37:6f:c6:96:ce: 68:ba:ba:88:4f:f2:b8:3e:a9:0e:19:cb:13:7d:56: 51:be:36:03:15:7d:29:15:9e:08:de:75:3b:43:2b: 4a:b6:75:ed:72:c4:73:17:c5:cf:31:dd:c4:2b:20: 46:49:1a:22:c0:b8:10:4c:e9:05:2f:c7:14:d8:3f: ec:f0:6a:e5:a1:ec:2a:20:eb:a3:6e:d8:48:fc:41: d6:ff:85:d4:1a:c5:9e:86:11:d4:02:f4:4e:1d:66: 4c:83:38:2b:db:1b:14:31:ba:a5:09:2a:cb:e7:8d: d6:a0:82:08:ad:ab:e9:42:2d:ee:15:c2:72:26:23: 18:72:2b:59:7d:3c:8f:c2:38:35:51:79:77:f3:b2: 34:3e:8a:e2:ef:30:05:ea:ac:9d:d6:e2:d3:a1:5f: 3e:b5:cf:5a:6f:01:70:45:0b:bb:e2:75:ef:19:88: db:2c:29:d9:e0:bc:41:23:1d:b6:71:e0:b4:52:96: 65:5c:f6:ca:aa:1e:9b:b7:9b:6c:5e:ec:f7:55:7a: 86:a4:f0:d7:eb:e0:1e:a5:c8:96:af:e0:67:a6:37: e4:ed:32:6b:5b:d4:b0:19:98:04:c6:fa:74:c8:14: 1d:04:3a:69:a6:96:f3:c9:86:a3:c4:d6:b8:f7:ab: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1A:60:61:D0:F5:1A:2F:69:61:B3:97:E5:D6:B4:D3:F3:7A:34:40 X509v3 Authority Key Identifier: keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:46:8c:fe:5f:4e:29:8f:8d:21:8d:16:ca:3a:94:00:b1:0f: ca:78:b3:22:a1:96:0c:20:c5:1e:2d:96:90:8d:52:1c:0a:b0: 92:5f:ca:1b:15:21:26:49:b7:5c:16:3d:c3:69:6b:72:54:20: 40:f0:c3:4a:d1:8a:89:12:8d:29:ae:a5:c8:31:61:e8:03:da: 7a:ef:6d:1f:2c:c0:2d:e2:c7:fa:aa:d3:54:c9:a2:b3:47:62: 63:5f:18:3f:e9:2c:56:94:f3:fc:25:f8:b9:69:2a:7f:6c:1c: 4d:44:57:04:1b:ed:a5:c4:d8:fb:1e:e6:ec:0e:77:cc:44:56: 38:d2:3f:cc:4b:60:1c:f8:a6:8f:75:e2:c1:11:4d:30:e3:c0: 5e:d4:03:1b:e3:31:12:5c:03:01:14:32:b6:2c:a7:07:0d:f2: a3:63:fd:cf:d0:f2:15:0d:ab:93:d1:61:46:7f:43:9d:24:bf: 0c:ec:09:35:04:75:0a:f7:16:09:2b:df:c4:ac:f5:44:6b:66: 67:3f:c9:aa:05:03:46:b0:f8:6d:70:77:a9:df:20:e9:93:f7: 98:a2:9a:d9:d7:69:fb:61:0b:14:9a:61:d7:7c:70:b6:0d:f2: 97:54:00:f4:6b:61:a1:3d:64:f0:7f:ff:04:fd:fd:77:24:9a: 37:04:47:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjkyQTExMC8GA1UEBRMoQUQxNTJBRjZFRjAyOTk2MjBCRjlGNzdGRDYwQ0Q4QjMx NDA0MTdBRjAeFw0yNTEwMTkxMTIzMjFaFw0yNTEwMjYxMTIzMjFaMBgxFjAUBgNV BAMTDTY4ZjRjYTJhLWU0YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmbFkn2yEDx243b8aWzmi6uohP8rg+qQ4ZyxN9VlG+NgMVfSkVngjedTtDK0q2 de1yxHMXxc8x3cQrIEZJGiLAuBBM6QUvxxTYP+zwauWh7Cog66Nu2Ej8Qdb/hdQa xZ6GEdQC9E4dZkyDOCvbGxQxuqUJKsvnjdagggitq+lCLe4VwnImIxhyK1l9PI/C ODVReXfzsjQ+iuLvMAXqrJ3W4tOhXz61z1pvAXBFC7vide8ZiNssKdngvEEjHbZx 4LRSlmVc9sqqHpu3m2xe7PdVeoak8Nfr4B6lyJav4GemN+TtMmtb1LAZmATG+nTI FB0EOmmmlvPJhqPE1rj3qzTVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3BpgYdD1 Gi9pYbOX5da00/N6NEAwHwYDVR0jBBgwFoAUrRUq9u8CmWIL+fd/1gzYsxQEF68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCOTJBL0ZDMTJFMzEwODRB RTExRjA5NkMwOUQyOUM0RjlBRTAyL3JSVXE5dThDbVdJTC1mZF8xZ3pZc3hRRUY2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclJVcTl1OENtV0lMLWZkXzFnellzeFFFRjY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC OTJBL0ZDMTJFMzEwODRBRTExRjA5NkMwOUQyOUM0RjlBRTAyL3JSVXE5dThDbVdJ TC1mZF8xZ3pZc3hRRUY2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFlGjP5fTimPjSGNFso6lACxD8p4syKhlgwgxR4tlpCNUhwKsJJfyhsV ISZJt1wWPcNpa3JUIEDww0rRiokSjSmupcgxYegD2nrvbR8swC3ix/qq01TJorNH YmNfGD/pLFaU8/wl+LlpKn9sHE1EVwQb7aXE2Pse5uwOd8xEVjjSP8xLYBz4po91 4sERTTDjwF7UAxvjMRJcAwEUMrYspwcN8qNj/c/Q8hUNq5PRYUZ/Q50kvwzsCTUE dQr3Fgkr38Ss9URrZmc/yaoFA0aw+G1wd6nfIOmT95iimtnXafthCxSaYdd8cLYN 8pdUAPRrYaE9ZPB//wT9/XckmjcER64= -----END CERTIFICATE-----Generated at Sun Oct 19 22:56:51 2025 by rpki-client