$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json) Hash identifier: qAG5nhc2s0b4U3PABgl4HChm8qQKUzAqLDyNBdrBegA= Subject key identifier: D0:38:64:62:40:26:71:45:2A:25:46:9A:A2:7E:23:7C:25:87:29:BF Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0DC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft Manifest number: 0DBD Signing time: Sat 18 Oct 2025 18:33:50 +0000 Manifest this update: Sat 18 Oct 2025 18:33:49 +0000 Manifest next update: Sat 25 Oct 2025 18:33:49 +0000 Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: KsmEVH2X+cPz1oRt0Sv/ASlsghbEZ4Xlli6BG35X49c=) 2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: 9Nz/F+iPTsdfTjIzxhDauJBST5Z1hrA/MujlPAQ3LmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3529 (0xdc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: Oct 18 18:33:49 2025 GMT Not After : Oct 25 18:33:49 2025 GMT Subject: CN=68f3dd8d-2e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a1:3c:c2:f7:96:da:53:76:22:b7:35:dd:97: 48:f1:d7:f0:58:8f:b2:c8:57:68:24:df:61:59:dd: a2:b9:3d:1e:dc:b1:7d:08:50:61:d6:e7:57:28:61: 83:8c:db:d2:a2:6d:61:12:24:cc:ff:c4:2d:f9:fd: d2:a1:cc:9b:d6:7d:a0:47:33:b8:69:01:7d:55:e5: 00:ca:72:df:a5:36:6a:3e:e4:e7:11:a0:74:92:29: fc:c7:3b:82:a9:10:38:46:30:bd:87:28:52:f8:f0: ca:eb:9f:59:95:a7:27:f8:33:e0:ad:d8:eb:cd:de: 9b:4d:e5:29:df:b8:0f:b1:d2:ba:9d:9e:fc:76:5f: e4:2e:39:a0:0b:21:3c:55:80:9c:7a:5b:e7:51:d9: c9:01:d4:15:ad:d9:8d:0a:ca:a8:83:86:5a:1d:3c: 18:26:91:11:eb:48:9d:f3:0c:d5:f5:7f:f5:fd:a8: 33:55:0d:e7:8e:dc:81:7c:34:f2:84:6f:2d:c4:c1: 16:af:64:64:c8:eb:86:cb:a6:12:23:f4:c6:fe:fa: b4:45:1c:12:55:f4:af:28:3b:bc:71:be:cf:2b:1f: 2b:5a:9c:fa:9d:f9:f8:f7:51:dd:82:0c:10:06:43: 29:69:c8:72:60:c9:81:7a:dd:9e:f3:b9:74:23:56: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:38:64:62:40:26:71:45:2A:25:46:9A:A2:7E:23:7C:25:87:29:BF X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:db:d2:a4:0a:d4:fb:6a:26:f8:90:d3:64:10:62:af:29:0a: 19:e3:f3:16:af:93:56:7b:e7:b3:ff:57:dd:e7:af:84:41:c5: 23:47:fd:46:a8:8f:69:03:5c:1e:dd:88:24:bf:d6:ad:ff:0d: 0f:d0:33:dc:c0:c9:c6:fe:81:1a:09:cf:4f:32:65:14:65:c9: 8b:3a:65:84:f4:f5:e8:7b:76:12:21:65:2c:b6:4e:58:14:50: 79:ed:cd:82:c6:a2:8a:64:23:4d:4b:7f:a4:d4:d4:f5:97:ac: da:2e:1c:5b:92:9a:86:76:1a:a9:3e:26:e1:88:36:45:17:dd: 83:96:e0:90:24:94:1d:91:ca:64:31:fe:88:ed:f1:f2:13:24: 79:dc:5b:13:88:3e:47:0f:48:d7:88:c0:83:47:4c:53:4a:0c: ac:fa:46:45:08:0b:f5:43:53:fe:a9:5e:52:ac:64:92:90:d8: 9d:5e:01:8e:2a:33:e1:6d:50:8d:90:d5:dc:f2:8f:3d:d2:91: b6:be:4b:5b:1b:90:7c:1b:30:7d:d1:df:1e:7d:38:84:d5:f3: 03:b7:85:49:78:69:97:df:07:08:1c:d9:b4:8c:31:d8:c3:5c: 93:93:1c:d8:13:63:c2:ad:eb:ae:4a:f1:fe:1a:67:7e:e6:d4: 28:ea:42:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjUxMDE4MTgzMzQ5WhcNMjUxMDI1MTgzMzQ5WjAYMRYwFAYD VQQDEw02OGYzZGQ4ZC0yZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+KE8wveW2lN2Irc13ZdI8dfwWI+yyFdoJN9hWd2iuT0e3LF9CFBh1udXKGGD jNvSom1hEiTM/8Qt+f3Socyb1n2gRzO4aQF9VeUAynLfpTZqPuTnEaB0kin8xzuC qRA4RjC9hyhS+PDK659Zlacn+DPgrdjrzd6bTeUp37gPsdK6nZ78dl/kLjmgCyE8 VYCcelvnUdnJAdQVrdmNCsqog4ZaHTwYJpER60id8wzV9X/1/agzVQ3njtyBfDTy hG8txMEWr2RkyOuGy6YSI/TG/vq0RRwSVfSvKDu8cb7PKx8rWpz6nfn491HdggwQ BkMpachyYMmBet2e87l0I1boVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA4ZGJA JnFFKiVGmqJ+I3wlhym/MB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1 ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA529KkCtT7aib4kNNkEGKvKQoZ4/MWr5NWe+ez/1fd56+EQcUjR/1G qI9pA1we3Ygkv9at/w0P0DPcwMnG/oEaCc9PMmUUZcmLOmWE9PXoe3YSIWUstk5Y FFB57c2CxqKKZCNNS3+k1NT1l6zaLhxbkpqGdhqpPibhiDZFF92DluCQJJQdkcpk Mf6I7fHyEyR53FsTiD5HD0jXiMCDR0xTSgys+kZFCAv1Q1P+qV5SrGSSkNidXgGO KjPhbVCNkNXc8o890pG2vktbG5B8GzB90d8efTiE1fMDt4VJeGmX3wcIHNm0jDHY w1yTkxzYE2PCreuuSvH+Gmd+5tQo6kJh -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:51 2025 by rpki-client