$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: B7uZPDiq64NJei1hoiR2J1nJPr9UoDajjEXDBorJ3lI= Subject key identifier: 63:95:23:68:33:EF:9D:13:6D:F9:79:08:B2:E8:E2:69:F5:D6:BD:2C Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 34D5 Signing time: Sat 18 Oct 2025 14:35:37 +0000 Manifest this update: Sat 18 Oct 2025 14:35:36 +0000 Manifest next update: Sat 25 Oct 2025 14:35:36 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: wtOa3vPQhOV34m/5NRVEcy0ojiMU8//CSS+5QVnaGlQ=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Oct 18 14:35:36 2025 GMT Not After : Oct 25 14:35:36 2025 GMT Subject: CN=68f3a5b8-a903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:bd:54:c7:02:57:58:a2:e3:2e:76:7c:5d: 72:0f:53:63:65:ee:35:72:76:1a:16:e8:28:da:2b: ae:e0:12:61:88:92:c9:45:ec:5c:bc:5c:1f:ac:e3: cc:e2:3f:f2:c8:95:b3:4a:a3:a2:8c:6c:38:22:b9: b4:9f:ac:57:7b:69:3f:53:98:85:dc:4f:05:a1:ec: 44:4e:b9:6d:25:5b:91:ed:e3:49:f2:38:87:a8:04: ca:c7:67:c8:0a:6d:d0:93:3f:f3:0c:3a:43:7c:b7: 5b:7f:a1:ce:17:36:76:c1:9c:f8:53:a7:3e:8a:bc: 0b:d1:d2:35:dc:4f:a0:84:b3:eb:63:3c:95:01:35: 10:16:3d:7c:e4:e8:43:00:94:3b:8d:47:a8:25:13: 22:3e:ff:c4:17:00:26:28:81:8d:d7:e9:74:33:b2: 7d:fa:ef:8d:86:35:31:f8:1b:98:1e:8f:98:cb:67: be:db:8e:7e:7b:af:cb:5e:10:9e:a1:ea:e8:93:50: be:0a:b5:65:d8:da:f7:1f:2a:9b:c3:54:f8:66:1b: c8:a5:c2:7e:25:83:b7:02:e0:6d:b4:ce:8b:c3:e6: 6e:1e:08:26:fd:fb:20:14:cf:6f:f7:69:e3:a2:5e: 43:10:6b:9f:51:46:69:ee:13:0d:5a:42:7c:01:32: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:95:23:68:33:EF:9D:13:6D:F9:79:08:B2:E8:E2:69:F5:D6:BD:2C X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:01:40:7c:75:c4:64:f4:28:0a:1c:c5:9d:22:ba:06:85:34: b6:86:80:1e:88:cf:6b:40:41:a6:bb:4c:d9:d4:96:a1:32:b8: 08:13:3a:ed:dc:8f:6a:8b:21:bf:9e:f1:fe:62:e2:e9:28:f5: b0:4c:72:f1:72:51:d9:b3:3d:0c:39:b3:b1:64:e4:13:90:7c: 2f:d3:4d:75:92:74:ac:76:ca:3c:de:8a:79:f0:08:8a:04:c3: 88:a9:f9:d2:be:bd:92:08:98:ff:34:15:8e:a7:40:06:3e:1e: b5:15:a4:60:3e:9f:52:3f:72:fc:db:f7:23:d3:ee:f4:0c:6b: 7a:48:96:7a:f9:51:4e:88:96:63:1d:4e:ab:ec:fc:13:b2:78: 51:2c:3d:10:82:85:9c:75:e6:3d:2c:9f:77:65:42:07:7a:75: 58:45:ac:cc:ed:37:14:bf:55:1e:a4:a2:a1:21:05:43:5a:51: aa:c7:2e:2e:15:f8:1f:e8:f9:8e:bc:8d:44:06:68:48:44:94: 39:fa:82:e5:9b:ea:b9:58:ab:16:b9:e7:46:38:42:01:6c:b9: c0:90:a7:0d:09:c8:98:50:1c:01:b6:fe:f3:4a:60:e1:fe:c7: b9:93:d8:ad:e2:82:3b:cb:e2:0a:e7:cb:0e:3b:a1:88:de:a7: d0:9d:60:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUxMDE4MTQzNTM2WhcNMjUxMDI1MTQzNTM2WjAYMRYwFAYD VQQDEw02OGYzYTViOC1hOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQi9VMcCV1ii4y52fF1yD1NjZe41cnYaFugo2iuu4BJhiJLJRexcvFwfrOPM 4j/yyJWzSqOijGw4Irm0n6xXe2k/U5iF3E8FoexETrltJVuR7eNJ8jiHqATKx2fI Cm3Qkz/zDDpDfLdbf6HOFzZ2wZz4U6c+irwL0dI13E+ghLPrYzyVATUQFj185OhD AJQ7jUeoJRMiPv/EFwAmKIGN1+l0M7J9+u+NhjUx+BuYHo+Yy2e+245+e6/LXhCe oerok1C+CrVl2Nr3Hyqbw1T4ZhvIpcJ+JYO3AuBttM6Lw+ZuHggm/fsgFM9v92nj ol5DEGufUUZp7hMNWkJ8ATL7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOVI2gz 750Tbfl5CLLo4mn11r0sMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQAUB8dcRk9CgKHMWdIroGhTS2hoAeiM9rQEGmu0zZ1JahMrgIEzrt 3I9qiyG/nvH+YuLpKPWwTHLxclHZsz0MObOxZOQTkHwv0011knSsdso83op58AiK BMOIqfnSvr2SCJj/NBWOp0AGPh61FaRgPp9SP3L82/cj0+70DGt6SJZ6+VFOiJZj HU6r7PwTsnhRLD0QgoWcdeY9LJ93ZUIHenVYRazM7TcUv1UepKKhIQVDWlGqxy4u Ffgf6PmOvI1EBmhIRJQ5+oLlm+q5WKsWuedGOEIBbLnAkKcNCciYUBwBtv7zSmDh /se5k9it4oI7y+IK58sOO6GI3qfQnWBW -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:05 2025 by rpki-client