$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json) Hash identifier: YUtFzTiekdCFrHFVnPplONdZeSrTVD8gDqWR30M+I4k= Subject key identifier: 5C:BA:69:18:17:05:41:3E:72:D7:64:85:A5:BC:8C:75:4B:32:99:20 Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft Manifest number: 0254 Signing time: Sun 19 Oct 2025 03:58:32 +0000 Manifest this update: Sun 19 Oct 2025 03:58:31 +0000 Manifest next update: Sun 26 Oct 2025 03:58:31 +0000 Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: usyVRHpDDra/i1O2DlH2FJbWasO0aFCX8TZCxv7bOLo=) 2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: XDsE6Ddixa5A+mdde/4fTJzczS6XmbdyS2Na1+31tR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Validity Not Before: Oct 19 03:58:31 2025 GMT Not After : Oct 26 03:58:31 2025 GMT Subject: CN=68f461e7-edae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:b3:21:4f:f0:6f:c3:54:1f:7f:09:5d:22: 2c:db:99:fd:68:f0:6c:ae:ed:18:12:34:c2:1f:5d: 08:38:e3:b8:d7:bb:5b:5d:22:65:83:3f:40:03:72: d9:fb:e7:55:5e:24:b5:b2:8d:b6:e5:72:5f:9b:d0: c5:cc:ff:a9:d3:35:89:77:d2:ef:9f:27:5e:15:84: fd:ff:cd:58:ab:30:ca:e3:88:59:f4:49:e2:13:61: 4b:8b:cc:aa:2b:c6:95:56:54:b2:97:93:41:e0:ca: fb:fc:83:e2:d0:a9:ad:13:b8:89:1a:64:ac:22:f1: 49:53:0d:ee:13:ef:51:ab:f2:b8:3d:6e:be:4a:31: b3:6c:c6:f4:f2:b9:01:00:b4:d0:7b:4f:0e:59:4f: c6:24:a5:06:7f:30:3b:e1:0a:4f:9a:32:9b:a4:29: 5f:14:ce:40:8c:36:52:c2:76:76:c3:f7:db:7e:e6: ce:8d:82:9a:28:eb:8c:7a:84:48:c2:2c:35:99:9e: ca:7a:dc:c9:73:52:41:e0:50:ee:4e:ed:3d:22:14: eb:67:d5:c5:07:ce:4a:48:f5:5a:d1:c8:fe:67:71: 76:eb:d9:65:dc:d7:a6:41:91:28:70:9c:de:4a:96: db:b5:39:f5:42:07:0f:15:be:3b:44:5f:d4:1e:d5: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BA:69:18:17:05:41:3E:72:D7:64:85:A5:BC:8C:75:4B:32:99:20 X509v3 Authority Key Identifier: keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f2:11:b6:48:e0:7f:c6:b2:69:56:c6:bc:a1:fb:3f:6a:6d: a6:22:a8:0a:68:04:4c:e4:c6:53:ea:1b:2b:5e:01:22:a2:a4: 2f:96:8a:87:7a:be:d1:af:49:7e:90:5c:1b:47:98:17:cc:02: ac:96:5e:85:d6:72:12:59:24:e0:bf:d7:12:7d:26:83:d5:67: 5e:76:88:e5:35:e5:92:5e:39:96:26:2f:56:2e:e1:5b:ce:de: 25:92:2d:1d:b3:85:5c:81:f0:33:14:0b:4c:3e:db:c6:a3:03: 00:63:73:d5:b6:e0:12:b6:1b:69:d8:20:0b:1d:65:60:af:46: 8e:76:02:75:3b:ee:8c:ea:84:fa:ee:ee:3b:d6:6b:4b:11:e1: 8d:08:34:76:54:b8:1d:e2:d3:86:a9:e9:aa:14:39:73:ac:c5: b1:f4:d5:c7:8e:52:eb:c3:9d:89:bf:9b:73:72:ca:08:92:74: 60:f3:89:33:89:4b:2f:6e:b1:94:f4:78:56:96:97:a6:ba:a0: ba:03:62:e3:4f:39:0a:bf:e8:a8:05:5d:d0:5d:78:f4:bf:cc: 9b:89:b7:82:f1:eb:9a:4b:6b:7b:68:da:51:60:af:e5:52:46: 25:bd:b2:ee:5d:b7:57:5d:d5:d1:8f:81:67:98:4a:7e:2c:eb: 14:3f:d7:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2 QkQ3NTVGOTYwHhcNMjUxMDE5MDM1ODMxWhcNMjUxMDI2MDM1ODMxWjAYMRYwFAYD VQQDEw02OGY0NjFlNy1lZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs66zIU/wb8NUH38JXSIs25n9aPBsru0YEjTCH10IOOO417tbXSJlgz9AA3LZ ++dVXiS1so225XJfm9DFzP+p0zWJd9LvnydeFYT9/81YqzDK44hZ9EniE2FLi8yq K8aVVlSyl5NB4Mr7/IPi0KmtE7iJGmSsIvFJUw3uE+9Rq/K4PW6+SjGzbMb08rkB ALTQe08OWU/GJKUGfzA74QpPmjKbpClfFM5AjDZSwnZ2w/fbfubOjYKaKOuMeoRI wiw1mZ7KetzJc1JB4FDuTu09IhTrZ9XFB85KSPVa0cj+Z3F269ll3NemQZEocJze SpbbtTn1QgcPFb47RF/UHtUO0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy6aRgX BUE+ctdkhaW8jHVLMpkgMB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3 RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2 TWZKY29BaGt2RHByMTFYNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI8hG2SOB/xrJpVsa8ofs/am2mIqgKaARM5MZT6hsrXgEioqQvloqH er7Rr0l+kFwbR5gXzAKsll6F1nISWSTgv9cSfSaD1WdedojlNeWSXjmWJi9WLuFb zt4lki0ds4VcgfAzFAtMPtvGowMAY3PVtuASthtp2CALHWVgr0aOdgJ1O+6M6oT6 7u471mtLEeGNCDR2VLgd4tOGqemqFDlzrMWx9NXHjlLrw52Jv5tzcsoIknRg84kz iUsvbrGU9HhWlpemuqC6A2LjTzkKv+ioBV3QXXj0v8ybibeC8euaS2t7aNpRYK/l UkYlvbLuXbdXXdXRj4FnmEp+LOsUP9dX -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:46 2025 by rpki-client