$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: ceF5ZWSAW4gKnAOboK+PYf1wHQrAnK1uaPJzvs6Vrvc= Subject key identifier: FF:DE:87:D4:1B:15:59:F9:56:8F:CA:C7:AF:2B:EB:11:3C:F9:45:1A Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 191F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 18FF Signing time: Mon 20 Oct 2025 16:47:14 +0000 Manifest this update: Mon 20 Oct 2025 16:47:13 +0000 Manifest next update: Mon 27 Oct 2025 16:47:13 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: 8TT1bcrd2HZyTx10jQDnygQFI6JwAsmOLkY7NWgN670=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: oLOhMPQKsGkv3U/SksV/65t4ewatETecgN0Im/W6WBo=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: KhZ44smvv0XMa3hY/4cdC4BTlTI2qU0P4EUvi2XPNs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6431 (0x191f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Oct 20 16:47:13 2025 GMT Not After : Oct 27 16:47:13 2025 GMT Subject: CN=68f66792-b402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:32:73:29:fd:12:4a:00:9b:4b:dd:f2:83: 06:e2:97:a0:96:81:70:6b:3a:8e:b1:15:b8:5c:9b: a1:dc:a4:84:22:eb:0f:b9:d8:5b:0c:48:2b:fc:3d: b7:c3:6c:9b:38:39:8d:c8:74:fa:9e:5b:a6:34:7e: 82:3c:d4:17:45:e1:ec:d4:77:dc:ca:1c:96:f2:cf: 64:77:85:3d:df:33:e2:42:22:b3:3d:26:1d:d4:d6: 9e:f7:74:d1:e7:aa:19:27:13:65:93:10:1f:9b:72: ed:1b:d0:e9:7f:94:86:ca:8a:72:b3:f6:85:f2:6a: 12:61:9e:60:2a:d7:fe:41:23:3d:0e:3d:2e:c9:0d: 0a:0f:1d:1d:b6:53:d6:b2:26:34:d6:2a:08:db:37: 03:e7:43:f9:e0:6f:d5:67:97:2a:e4:75:c8:5e:ac: ee:97:a0:c2:cd:89:da:e8:de:43:49:d0:cb:6e:d1: e3:0f:54:e8:66:dc:09:f9:49:62:81:2c:bb:e1:0f: 84:03:8d:0b:b7:26:17:a0:89:a7:c7:56:2c:51:8d: b1:1c:e7:85:75:b5:7d:f7:a7:8b:c2:b0:b9:d5:3d: f7:bd:55:28:58:f4:78:e7:c5:2d:37:27:d8:a7:85: 06:0a:ba:7e:91:1a:20:95:c4:02:10:47:64:e5:5e: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DE:87:D4:1B:15:59:F9:56:8F:CA:C7:AF:2B:EB:11:3C:F9:45:1A X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:89:78:9a:70:c9:fb:c4:5d:43:bd:8c:24:0b:7d:0d:70:9d: 81:75:81:a0:a9:2a:6f:b3:4d:6b:fa:30:62:45:c2:a3:0d:71: 0a:46:aa:ae:32:3d:9d:7a:e1:0b:0f:14:2a:46:d5:a6:1c:a9: 49:91:bb:9e:b2:d8:31:7b:85:ca:8e:ad:af:f8:27:85:db:c7: ef:e1:56:76:fe:ba:ea:54:b3:82:c8:25:f8:a5:18:ab:48:5e: 2d:b0:58:cb:fe:8b:72:78:ab:68:be:98:f9:62:d2:c8:83:3d: 09:8a:a8:77:d5:1c:b8:56:5e:8d:86:33:fd:d6:a3:1f:49:0c: 1c:38:a3:86:62:31:df:84:7b:aa:76:c1:84:46:99:be:1f:0b: aa:5a:b0:85:50:39:fe:0c:96:63:e3:9f:3d:46:2a:e0:df:74: 48:00:2c:1e:c3:8f:8a:e1:8a:5d:75:8f:07:cf:c3:e7:35:55: 3c:92:39:d8:17:5a:bd:e0:ca:76:18:fe:ac:39:ff:14:f6:6f: 5e:c5:2e:67:3b:18:62:93:e9:8c:a4:17:e2:93:1e:38:9c:30: 47:a0:51:4b:29:7e:a9:85:73:3b:04:6b:06:cc:e9:21:81:05: 86:2f:99:cd:d7:48:6c:2d:8f:f6:79:c2:93:0a:5a:1e:8c:37: 84:ba:f9:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjUxMDIwMTY0NzEzWhcNMjUxMDI3MTY0NzEzWjAYMRYwFAYD VQQDEw02OGY2Njc5Mi1iNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKMycyn9EkoAm0vd8oMG4pegloFwazqOsRW4XJuh3KSEIusPudhbDEgr/D23 w2ybODmNyHT6nlumNH6CPNQXReHs1HfcyhyW8s9kd4U93zPiQiKzPSYd1Nae93TR 56oZJxNlkxAfm3LtG9Dpf5SGyopys/aF8moSYZ5gKtf+QSM9Dj0uyQ0KDx0dtlPW siY01ioI2zcD50P54G/VZ5cq5HXIXqzul6DCzYna6N5DSdDLbtHjD1ToZtwJ+Uli gSy74Q+EA40LtyYXoImnx1YsUY2xHOeFdbV996eLwrC51T33vVUoWPR458UtNyfY p4UGCrp+kRoglcQCEEdk5V4qtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/eh9Qb FVn5Vo/Kx68r6xE8+UUaMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsiXiacMn7xF1DvYwkC30NcJ2BdYGgqSpvs01r+jBiRcKjDXEKRqqu Mj2deuELDxQqRtWmHKlJkbuestgxe4XKjq2v+CeF28fv4VZ2/rrqVLOCyCX4pRir SF4tsFjL/otyeKtovpj5YtLIgz0Jiqh31Ry4Vl6NhjP91qMfSQwcOKOGYjHfhHuq dsGERpm+HwuqWrCFUDn+DJZj4589Rirg33RIACwew4+K4YpddY8Hz8PnNVU8kjnY F1q94Mp2GP6sOf8U9m9exS5nOxhik+mMpBfikx44nDBHoFFLKX6phXM7BGsGzOkh gQWGL5nN10hsLY/2ecKTCloejDeEuvl2 -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:45 2025 by rpki-client