$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: vxHYMV0W4UIT7Z3aY871foNUr43lTPNCVOgpSAe7Xz4= Subject key identifier: 21:28:F1:93:DE:E2:56:65:09:6D:E9:AA:AC:44:1B:3B:5F:B5:9B:D0 Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 01FF Signing time: Sun 19 Oct 2025 04:47:50 +0000 Manifest this update: Sun 19 Oct 2025 04:47:49 +0000 Manifest next update: Sun 26 Oct 2025 04:47:49 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: Ed3ToctjD2ijmT5YU5FnWD1aQlCnK5EmLOyAaJRcTf8=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Oct 19 04:47:49 2025 GMT Not After : Oct 26 04:47:49 2025 GMT Subject: CN=68f46d76-2bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:ff:fd:50:e0:3a:c8:f4:e0:1e:be:58:1d: 90:64:1d:24:f7:bd:4b:b4:d1:34:fe:8f:91:6e:6d: a9:8d:ec:55:27:f0:1d:92:76:c5:dd:4e:d5:de:63: 1f:b5:8e:6e:d6:26:87:59:60:3b:8d:4a:c3:56:0a: d2:e7:ca:14:c9:f3:73:5d:b4:7c:83:d2:05:9d:23: 02:c9:95:0f:20:9a:b0:71:ca:23:c4:dd:56:7b:43: a0:ff:7f:0b:8c:68:ab:5f:31:ff:16:8a:52:39:d6: 32:7c:d4:8a:40:95:2c:26:a1:60:ca:34:a5:bb:19: d8:c2:d3:12:9b:08:75:f4:4a:10:18:82:19:88:e2: 87:17:60:e3:49:d9:dc:3d:dc:95:63:4a:46:fe:e2: ea:47:7e:f4:39:e2:f4:b1:69:f4:21:ca:21:ce:96: 4b:54:bb:66:a2:40:cb:a0:ea:60:ec:c3:27:a3:a7: 73:90:0f:d1:32:c7:1e:fb:3b:2d:56:1e:a9:a7:c7: ab:7e:5d:76:0c:c0:1a:4b:5a:94:d9:18:f9:37:86: cb:dd:ab:f4:0c:b2:a6:23:07:0d:af:40:2c:07:80: 98:82:ff:ab:2b:24:d2:d0:69:f7:ea:c0:2a:7b:9d: 2a:1a:11:34:bc:28:b5:a1:97:3a:0e:4d:44:f6:35: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:28:F1:93:DE:E2:56:65:09:6D:E9:AA:AC:44:1B:3B:5F:B5:9B:D0 X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b4:d6:21:b7:03:6b:20:f4:42:51:34:55:ec:48:65:29:75: c6:2d:41:5e:3d:69:f4:25:d9:74:2a:93:ca:db:ea:87:d6:24: be:ff:a7:a0:2b:d1:06:a2:54:0a:40:16:a5:43:9f:7e:e6:77: b9:cb:f1:66:e1:e0:03:22:77:ff:9d:33:ee:40:22:3b:48:34: 95:1f:ac:72:9d:6c:74:4d:06:42:94:4a:b6:3b:0a:03:dc:74: 79:56:d8:44:d5:44:ee:cc:65:61:17:96:e9:12:d9:76:0c:a3: dc:32:37:45:4f:16:5d:04:3d:3d:09:33:7d:b6:cd:d7:4d:10: 8f:43:c6:9a:63:24:a3:eb:d7:2c:74:2d:3b:60:c6:ca:ae:32: c9:3a:a6:96:eb:94:fe:04:11:7f:3a:b3:29:52:85:90:36:82: de:22:70:87:b1:5d:61:b2:23:22:96:16:4a:fd:ee:15:81:aa: 75:44:e9:87:94:fd:61:0f:61:5f:d5:0c:fa:64:af:c2:8b:81: 6c:a9:ea:2d:d2:ac:a7:fa:b9:1a:2c:10:8f:ca:b0:ae:54:03: 09:cc:95:75:6b:88:e7:eb:d1:be:c5:44:91:a2:54:aa:ba:33: 6f:e6:37:21:2e:89:75:fb:2d:2b:61:5f:48:bf:c4:06:a5:93: d5:ae:bb:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUxMDE5MDQ0NzQ5WhcNMjUxMDI2MDQ0NzQ5WjAYMRYwFAYD VQQDEw02OGY0NmQ3Ni0yYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdP//VDgOsj04B6+WB2QZB0k971LtNE0/o+Rbm2pjexVJ/AdknbF3U7V3mMf tY5u1iaHWWA7jUrDVgrS58oUyfNzXbR8g9IFnSMCyZUPIJqwccojxN1We0Og/38L jGirXzH/FopSOdYyfNSKQJUsJqFgyjSluxnYwtMSmwh19EoQGIIZiOKHF2DjSdnc PdyVY0pG/uLqR370OeL0sWn0IcohzpZLVLtmokDLoOpg7MMno6dzkA/RMsce+zst Vh6pp8erfl12DMAaS1qU2Rj5N4bL3av0DLKmIwcNr0AsB4CYgv+rKyTS0Gn36sAq e50qGhE0vCi1oZc6Dk1E9jW1pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEo8ZPe 4lZlCW3pqqxEGztftZvQMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZtNYhtwNrIPRCUTRV7EhlKXXGLUFePWn0Jdl0KpPK2+qH1iS+/6eg K9EGolQKQBalQ59+5ne5y/Fm4eADInf/nTPuQCI7SDSVH6xynWx0TQZClEq2OwoD 3HR5VthE1UTuzGVhF5bpEtl2DKPcMjdFTxZdBD09CTN9ts3XTRCPQ8aaYySj69cs dC07YMbKrjLJOqaW65T+BBF/OrMpUoWQNoLeInCHsV1hsiMilhZK/e4Vgap1ROmH lP1hD2Ff1Qz6ZK/Ci4Fsqeot0qyn+rkaLBCPyrCuVAMJzJV1a4jn69G+xUSRolSq ujNv5jchLol1+y0rYV9Iv8QGpZPVrrvK -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:00 2025 by rpki-client