$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: eClhUZ5cTqSB8HyQnwpJmsi6Y5zUTm4JUoRM/c/Lt4k= Subject key identifier: 96:28:E3:28:B6:BB:68:C6:1C:3B:BF:C4:3E:11:61:E1:60:AD:4E:F0 Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 01FD Signing time: Sun 19 Oct 2025 05:06:49 +0000 Manifest this update: Sun 19 Oct 2025 05:06:49 +0000 Manifest next update: Sun 26 Oct 2025 05:06:49 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: 19/tCUXMaEBL9uJqiai6bVJ8XDGZWozG5zJ0rMNXCEc=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: duTYZvXv6lu6t8rEgm3ckGUyqXhrkljrh8aPt8kb7W8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Oct 19 05:06:49 2025 GMT Not After : Oct 26 05:06:49 2025 GMT Subject: CN=68f471e9-aa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:27:16:56:de:53:32:6f:18:16:3f:05:14: 48:12:fc:a3:79:ee:c8:a3:58:47:a5:61:4e:33:c7: 1f:e2:0d:9e:29:ba:4a:78:17:c1:ae:1d:34:37:03: d3:a3:b3:a8:9c:ef:97:a1:9c:26:33:b0:de:88:7f: 91:2d:27:3e:91:04:0f:31:c6:dd:a0:2a:8e:19:9f: 0a:6b:45:f6:dd:fa:85:98:f2:ea:aa:44:ea:d0:8e: b8:fc:23:ba:f1:eb:ab:b2:e3:bb:d1:c3:05:ef:22: 5a:60:2b:eb:5e:cb:1d:f8:7c:7c:ee:d5:0b:30:bf: a4:3b:a3:41:d5:f4:13:1a:b1:d5:fd:13:dc:41:e7: 18:dc:f7:d0:6b:29:8e:1f:a0:92:40:58:56:dc:11: 85:9d:cf:80:fb:79:1e:05:7c:06:b3:bc:25:1f:96: 8b:3e:54:f2:e0:40:43:08:e0:17:c6:7c:f8:8d:de: c8:5f:5d:e4:72:2f:7c:a7:04:4e:ed:e4:cc:a1:6f: 2f:34:e4:51:a8:29:f8:ab:de:51:27:e4:f9:91:4c: 07:2d:08:ba:4c:f0:d7:74:39:eb:a0:41:35:42:3f: 06:3c:9b:d0:53:06:9c:a8:d2:18:ed:01:e5:2c:77: 22:dc:a0:1c:c5:8d:3c:06:05:36:db:77:bd:aa:9c: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:28:E3:28:B6:BB:68:C6:1C:3B:BF:C4:3E:11:61:E1:60:AD:4E:F0 X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0f:4f:17:d2:0e:82:e5:b6:31:2d:c9:9e:ea:06:bb:c4:59: 52:0c:82:38:a0:90:2e:08:4a:23:e7:44:6a:fe:e7:f7:e1:39: 6c:e9:eb:bc:ab:56:7d:eb:60:e9:09:95:32:2e:9e:38:2b:de: 59:69:2c:31:f6:b9:4d:7b:d1:dd:2f:a4:23:f4:29:6f:8c:22: 4f:e7:71:26:b9:ec:67:22:94:ec:5e:f9:53:5e:93:f6:a1:40: ae:fc:2b:26:6c:7b:34:7e:2a:90:45:c5:b5:b7:f9:91:55:c1: ef:1d:ff:29:15:48:7e:83:d0:92:4d:35:10:3b:96:c9:75:8b: 8f:4b:45:b2:69:16:7e:84:24:f1:60:84:f0:6c:b5:ee:07:8b: 44:1c:71:4e:ad:8d:b3:f4:28:ae:38:47:e3:58:ab:66:1b:e0: 1b:de:9a:73:ba:76:e7:f8:22:55:94:5d:eb:9f:5e:76:e5:a7: 88:52:c8:19:f0:c0:82:19:95:29:18:5a:0d:63:b9:0f:d5:47: 15:94:02:b9:32:97:2d:0f:7e:a7:53:06:71:eb:ab:0e:4d:7f: df:be:40:b7:06:ab:c4:e6:61:9a:97:a4:05:d1:67:eb:5a:26: 50:3f:1b:5d:fb:ea:17:e1:02:8e:40:9e:b9:80:5b:9f:7a:ec: f2:93:98:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUxMDE5MDUwNjQ5WhcNMjUxMDI2MDUwNjQ5WjAYMRYwFAYD VQQDEw02OGY0NzFlOS1hYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAYnFlbeUzJvGBY/BRRIEvyjee7Io1hHpWFOM8cf4g2eKbpKeBfBrh00NwPT o7OonO+XoZwmM7DeiH+RLSc+kQQPMcbdoCqOGZ8Ka0X23fqFmPLqqkTq0I64/CO6 8eursuO70cMF7yJaYCvrXssd+Hx87tULML+kO6NB1fQTGrHV/RPcQecY3PfQaymO H6CSQFhW3BGFnc+A+3keBXwGs7wlH5aLPlTy4EBDCOAXxnz4jd7IX13kci98pwRO 7eTMoW8vNORRqCn4q95RJ+T5kUwHLQi6TPDXdDnroEE1Qj8GPJvQUwacqNIY7QHl LHci3KAcxY08BgU223e9qpykwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYo4yi2 u2jGHDu/xD4RYeFgrU7wMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2D08X0g6C5bYxLcme6ga7xFlSDII4oJAuCEoj50Rq/uf34Tls6eu8 q1Z962DpCZUyLp44K95ZaSwx9rlNe9HdL6Qj9ClvjCJP53EmuexnIpTsXvlTXpP2 oUCu/CsmbHs0fiqQRcW1t/mRVcHvHf8pFUh+g9CSTTUQO5bJdYuPS0WyaRZ+hCTx YITwbLXuB4tEHHFOrY2z9CiuOEfjWKtmG+Ab3ppzunbn+CJVlF3rn1525aeIUsgZ 8MCCGZUpGFoNY7kP1UcVlAK5MpctD36nUwZx66sOTX/fvkC3BqvE5mGal6QF0Wfr WiZQPxtd++oX4QKOQJ65gFufeuzyk5hJ -----END CERTIFICATE-----Generated at Mon Oct 20 00:21:55 2025 by rpki-client