$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: LhNxdCQKxGuG6NoCrjDOYn2o4n7QFtrKKqdGm1JtaIg= Subject key identifier: C0:83:0C:DB:62:2E:83:65:0F:E1:05:A5:6F:B1:CB:05:E8:D6:22:B6 Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 03 Signing time: Sun 19 Oct 2025 11:42:27 +0000 Manifest this update: Sun 19 Oct 2025 11:42:27 +0000 Manifest next update: Sun 26 Oct 2025 11:42:27 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: h2pnTFoSWz7bVyFXimI7cbp3ftxJ1qswLfIwNetRgq8=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Oct 19 11:42:27 2025 GMT Not After : Oct 26 11:42:27 2025 GMT Subject: CN=68f4cea3-53f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:04:f4:92:d1:70:2b:f0:85:bb:0f:85:77: 33:a8:b2:84:f0:e8:f2:67:85:01:ce:77:7b:a5:af: 94:f1:3b:63:5d:65:7a:3a:c4:1f:c9:96:3b:81:3a: 25:f0:4b:01:0a:72:f6:bf:37:d7:61:2b:a2:95:75: 27:66:38:25:47:ca:fb:59:b4:8f:c2:22:fc:f1:c6: 9f:87:f1:79:2c:f7:1d:ec:23:72:2d:0c:01:e2:1e: 2d:d0:a0:81:2c:2c:fd:c7:2f:14:6f:8d:69:8b:22: bb:10:39:60:c0:ec:f0:1f:1a:d1:52:ec:5a:3b:bf: 51:40:9b:3b:15:a4:55:1f:34:c7:2a:bf:6c:a5:d2: d0:d0:d9:7d:58:f3:4f:19:3d:8d:f4:32:af:61:59: 9a:0a:b7:5d:7c:37:7e:cc:b0:28:fc:02:77:99:7b: 2c:ca:df:77:27:c7:96:2f:c1:a1:10:8d:4b:75:34: ee:b3:fb:44:54:a9:f6:65:86:4e:0c:81:e5:cd:8b: 53:97:04:2e:24:f2:a9:13:15:54:13:d0:f9:31:2b: d2:ec:bb:cf:71:2c:a3:5e:41:bf:23:6e:8a:77:b6: 1f:0e:fb:67:28:f5:cf:42:57:03:36:8a:57:2a:d7: ca:0a:a8:32:f6:d4:10:ee:78:70:52:86:f2:9e:ea: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:0C:DB:62:2E:83:65:0F:E1:05:A5:6F:B1:CB:05:E8:D6:22:B6 X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e1:1c:98:3c:6a:6b:25:cb:0c:68:c5:1c:8f:ac:46:3e:1d: c7:63:64:6d:9e:c9:67:a6:8e:98:b8:14:9a:18:f2:ce:40:5f: b3:3d:04:0a:36:ff:d9:31:b3:0b:17:3b:91:18:de:77:92:8c: 9d:c8:82:71:46:8d:39:e0:91:55:ed:01:47:81:e0:d4:fe:e9: 5b:bc:d7:e2:8d:d8:02:d9:e8:5e:e1:e7:05:78:0b:69:0c:f9: ed:69:5c:ba:72:ab:6b:1b:58:78:42:fd:eb:36:13:d5:36:b4: 9a:df:4b:f8:eb:bb:63:ea:76:f0:8c:8b:6d:a6:9a:95:d2:01: 5f:ae:a1:9c:99:bd:39:29:42:16:46:36:2f:3b:53:9e:d5:c0: c0:80:65:5c:8b:f3:22:d6:24:cc:0a:04:84:4a:6c:8a:e1:d5: 45:fa:4f:b4:68:0e:78:3b:90:0b:4c:e6:86:08:7b:be:5a:57: 27:20:69:9f:33:de:d6:48:b2:86:9a:ae:53:3a:33:cc:f8:aa: d8:f6:00:2a:21:d7:4f:c9:68:c3:f6:fe:55:f7:a7:5d:a7:6e: 72:36:ce:8c:4a:bf:9a:04:c7:5a:ef:f1:6a:b6:70:6d:7f:5d: e4:3c:e5:8a:a8:f7:71:4f:86:0c:46:4f:84:0b:04:df:ce:83: 09:d9:82:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNTEwMTkxMTQyMjdaFw0yNTEwMjYxMTQyMjdaMBgxFjAUBgNV BAMTDTY4ZjRjZWEzLTUzZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoqQT0ktFwK/CFuw+FdzOosoTw6PJnhQHOd3ulr5TxO2NdZXo6xB/JljuBOiXw SwEKcva/N9dhK6KVdSdmOCVHyvtZtI/CIvzxxp+H8Xks9x3sI3ItDAHiHi3QoIEs LP3HLxRvjWmLIrsQOWDA7PAfGtFS7Fo7v1FAmzsVpFUfNMcqv2yl0tDQ2X1Y808Z PY30Mq9hWZoKt118N37MsCj8AneZeyzK33cnx5YvwaEQjUt1NO6z+0RUqfZlhk4M geXNi1OXBC4k8qkTFVQT0PkxK9Lsu89xLKNeQb8jbop3th8O+2co9c9CVwM2ilcq 18oKqDL21BDueHBShvKe6pnJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwIMM22Iu g2UP4QWlb7HLBejWIrYwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALXhHJg8amslywxoxRyPrEY+HcdjZG2eyWemjpi4FJoY8s5AX7M9BAo2 /9kxswsXO5EY3neSjJ3IgnFGjTngkVXtAUeB4NT+6Vu81+KN2ALZ6F7h5wV4C2kM +e1pXLpyq2sbWHhC/es2E9U2tJrfS/jru2PqdvCMi22mmpXSAV+uoZyZvTkpQhZG Ni87U57VwMCAZVyL8yLWJMwKBIRKbIrh1UX6T7RoDng7kAtM5oYIe75aVycgaZ8z 3tZIsoaarlM6M8z4qtj2ACoh10/JaMP2/lX3p12nbnI2zoxKv5oEx1rv8Wq2cG1/ XeQ85Yqo93FPhgxGT4QLBN/OgwnZgpc= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:49 2025 by rpki-client