$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: kWAfpAaojo2L4fyXQQCQEdV2f+kRKD2or9STJaa2qGw= Subject key identifier: D0:5A:8D:48:58:AC:CE:0D:90:FA:D2:53:36:44:94:25:98:6D:03:EE Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34E9 Signing time: Sat 18 Oct 2025 15:01:38 +0000 Manifest this update: Sat 18 Oct 2025 15:01:37 +0000 Manifest next update: Sat 25 Oct 2025 15:01:37 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: uCW/90Wkqvf24dw4M6zVIm7FM+m5Xm3YLTuVDQ5+mDU=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Oct 18 15:01:37 2025 GMT Not After : Oct 25 15:01:37 2025 GMT Subject: CN=68f3abd1-0c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:05:05:ed:8a:3d:95:c3:65:3a:ed:5d:e6: cf:12:a0:8c:f5:79:4c:ba:ed:3e:15:7a:8f:85:29: 11:c6:0d:c2:50:92:39:71:4b:fd:61:79:ef:f9:03: 58:90:be:5c:12:45:cc:5e:e4:7e:95:c0:bc:1e:fa: 7e:73:b2:26:9c:c2:c9:50:99:b5:fb:1e:48:7c:07: 5c:a2:25:21:4d:6b:ac:32:25:b4:84:c3:cb:df:24: 7c:47:44:cc:39:46:f9:fc:49:6f:00:52:8b:0e:47: 70:b2:42:d5:50:26:f1:f9:62:86:b4:26:ac:37:79: ba:98:cb:4d:d4:1a:84:14:a8:53:98:13:c2:9a:02: a0:97:85:65:50:4d:57:85:20:e9:63:0e:82:85:e1: 76:dc:8f:46:91:bf:90:09:d7:22:f6:92:5b:9a:32: a3:fc:87:79:57:c7:c0:48:ff:20:c4:aa:77:50:0e: 15:f4:2d:ac:26:9c:a2:f7:b1:8b:64:47:2b:64:bd: 18:74:21:ae:a1:62:96:cd:ee:4a:b5:bf:7a:17:ed: 46:27:04:bf:d6:2b:f8:88:ca:7f:a9:1f:ab:aa:49: b4:20:de:bb:cd:7e:58:ad:20:60:c1:41:a7:11:4d: 9f:6f:44:e7:b9:0f:7e:97:52:21:be:79:38:3c:74: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:8D:48:58:AC:CE:0D:90:FA:D2:53:36:44:94:25:98:6D:03:EE X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5b:4d:ae:37:37:5e:7a:f6:e7:23:f1:da:09:57:b6:0b:d8: 68:6d:19:3d:dd:6d:d5:57:15:e6:f5:13:fa:f7:40:ca:65:a1: 1b:49:02:c0:66:fc:34:c9:b7:6c:72:77:73:10:6e:e3:7d:ef: 21:98:55:3d:40:29:58:df:6c:a9:ee:ab:83:9f:64:1d:9f:91: af:10:59:9d:4c:c7:de:c6:35:95:73:b7:27:13:47:d5:81:7f: 69:1f:07:58:58:aa:d7:ed:97:ed:8d:fe:03:05:67:6e:84:da: e0:d9:25:be:7f:01:58:87:da:d4:df:17:73:91:cf:4f:ba:9c: ba:e5:39:80:28:fe:f2:58:e6:b2:2e:78:32:3d:30:39:ff:78: fe:63:3c:c7:8b:af:46:a4:31:09:9a:f0:89:eb:7c:9a:ef:3f: b6:92:81:0e:82:c1:c5:ef:d0:71:70:8e:b2:c4:29:0c:71:0e: f5:9d:4a:2e:57:4c:5e:54:20:c0:dd:ca:78:42:f5:5a:c4:3f: 74:b8:4e:ff:02:9a:9b:39:b5:c8:97:17:ee:a1:ef:b6:fa:d6: d7:ea:ef:a4:95:87:91:97:de:be:50:81:1e:60:77:c5:5c:b1: d2:a0:92:f2:96:bb:37:05:89:0c:bd:66:eb:c2:79:4d:0e:a5: 8f:ee:ea:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUxMDE4MTUwMTM3WhcNMjUxMDI1MTUwMTM3WjAYMRYwFAYD VQQDEw02OGYzYWJkMS0wYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17oFBe2KPZXDZTrtXebPEqCM9XlMuu0+FXqPhSkRxg3CUJI5cUv9YXnv+QNY kL5cEkXMXuR+lcC8Hvp+c7ImnMLJUJm1+x5IfAdcoiUhTWusMiW0hMPL3yR8R0TM OUb5/ElvAFKLDkdwskLVUCbx+WKGtCasN3m6mMtN1BqEFKhTmBPCmgKgl4VlUE1X hSDpYw6CheF23I9Gkb+QCdci9pJbmjKj/Id5V8fASP8gxKp3UA4V9C2sJpyi97GL ZEcrZL0YdCGuoWKWze5Ktb96F+1GJwS/1iv4iMp/qR+rqkm0IN67zX5YrSBgwUGn EU2fb0TnuQ9+l1Ihvnk4PHQgpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBajUhY rM4NkPrSUzZElCWYbQPuMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANW02uNzdeevbnI/HaCVe2C9hobRk93W3VVxXm9RP690DKZaEbSQLA Zvw0ybdscndzEG7jfe8hmFU9QClY32yp7quDn2Qdn5GvEFmdTMfexjWVc7cnE0fV gX9pHwdYWKrX7Zftjf4DBWduhNrg2SW+fwFYh9rU3xdzkc9Pupy65TmAKP7yWOay LngyPTA5/3j+YzzHi69GpDEJmvCJ63ya7z+2koEOgsHF79BxcI6yxCkMcQ71nUou V0xeVCDA3cp4QvVaxD90uE7/ApqbObXIlxfuoe+2+tbX6u+klYeRl96+UIEeYHfF XLHSoJLylrs3BYkMvWbrwnlNDqWP7upQ -----END CERTIFICATE-----Generated at Mon Oct 20 15:56:23 2025 by rpki-client