$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json) Hash identifier: tZIqvjkl4rdpmJuOJ9QgJniZUXDd19ggDnURSJBz408= Subject key identifier: CA:A6:51:E8:CB:AC:2E:2B:2F:90:EA:12:88:CB:60:74:8A:28:1F:1F Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft Manifest number: EC Signing time: Sun 19 Oct 2025 08:19:19 +0000 Manifest this update: Sun 19 Oct 2025 08:19:19 +0000 Manifest next update: Sun 26 Oct 2025 08:19:19 +0000 Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: lf6jKM5ImW0Gy+KObnPcUYPVzyLC9BkKTi98oGIwY7Y=) 2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Oct 19 08:19:19 2025 GMT Not After : Oct 26 08:19:19 2025 GMT Subject: CN=68f49f07-a107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ce:0e:0c:ca:5a:4c:0c:3e:8d:73:4b:a2:70: 66:f8:e8:f4:62:19:a6:41:9b:38:46:e5:24:fa:50: fd:50:8e:15:e6:9d:32:7c:b4:2a:9e:3c:49:15:3e: b7:58:b0:67:da:a2:0b:b2:74:4f:40:d3:2f:48:3d: f8:cd:b2:91:0e:fd:fa:fe:a9:86:19:fa:2f:45:44: 01:34:30:d6:1e:fe:b3:c9:01:a7:8c:07:83:2d:75: 19:2c:d2:b8:a4:36:b2:c1:74:85:38:db:e1:71:a8: 2d:a5:10:e5:52:cd:78:72:e7:80:a7:18:2b:98:85: 3d:92:4e:c5:93:13:c6:0d:c4:f0:ec:c2:aa:1a:9f: 6e:4e:9d:ea:16:b4:3e:44:d7:ad:94:a1:bf:ea:a3: 71:11:26:69:9d:47:65:de:bf:0c:84:a1:cf:a2:69: 8e:89:de:86:fc:8d:2e:59:44:da:bf:16:0c:62:04: 67:c6:8b:24:1d:cb:07:4b:f2:5f:f7:b7:fb:b6:f1: f1:98:b0:fb:f1:07:f4:8e:85:ea:bc:f5:7c:81:11: a3:5b:b5:0d:d3:96:af:19:f1:7c:ac:7e:6c:33:8b: ae:45:a2:0e:38:93:f0:51:ae:8a:68:81:15:d0:d5: 4e:b0:21:60:60:92:e3:81:3b:0a:f4:b2:35:80:92: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:51:E8:CB:AC:2E:2B:2F:90:EA:12:88:CB:60:74:8A:28:1F:1F X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:45:f0:92:fc:11:8c:07:fb:b9:19:5f:e1:05:e1:6d:23:c0: e2:64:29:a3:57:99:fa:4e:60:43:71:3e:0e:dd:9b:18:4d:86: f7:85:89:33:3f:4e:8a:f6:33:b2:6b:02:89:25:36:51:c6:0a: 49:9d:5c:49:74:08:41:67:c2:00:4f:92:2c:bd:05:39:a9:58: 2d:a2:62:ed:fd:24:d3:2c:eb:9d:f7:4c:65:ea:9d:4a:19:6e: 73:17:73:ea:50:5c:22:f3:2a:5c:dd:53:59:d1:96:30:cf:81: 89:08:97:a6:15:fb:96:c4:6a:33:c3:9d:d7:b6:f7:93:a2:b7: f8:59:16:15:84:ab:80:5b:a0:b3:e0:21:48:c6:12:4a:24:bd: 21:89:ed:88:3b:82:68:04:1f:12:1e:61:5a:d7:9f:66:23:99: d6:6c:71:cd:80:b7:0d:b4:1e:b7:87:bf:6a:60:46:3f:8f:83: 07:ab:59:78:7c:25:e9:db:bf:03:82:3c:e6:ba:ed:bd:57:ab: f6:16:8d:03:37:d4:b7:fc:f4:01:09:0e:de:da:4b:e8:38:82: 28:da:a6:ea:2a:15:34:b1:0b:8f:9c:df:58:0c:11:08:3d:82: 1a:72:d4:43:59:a8:7c:6e:97:f9:92:72:dc:dd:f7:62:7b:26: 21:49:40:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjUxMDE5MDgxOTE5WhcNMjUxMDI2MDgxOTE5WjAYMRYwFAYD VQQDEw02OGY0OWYwNy1hMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6M4ODMpaTAw+jXNLonBm+Oj0YhmmQZs4RuUk+lD9UI4V5p0yfLQqnjxJFT63 WLBn2qILsnRPQNMvSD34zbKRDv36/qmGGfovRUQBNDDWHv6zyQGnjAeDLXUZLNK4 pDaywXSFONvhcagtpRDlUs14cueApxgrmIU9kk7FkxPGDcTw7MKqGp9uTp3qFrQ+ RNetlKG/6qNxESZpnUdl3r8MhKHPommOid6G/I0uWUTavxYMYgRnxoskHcsHS/Jf 97f7tvHxmLD78Qf0joXqvPV8gRGjW7UN05avGfF8rH5sM4uuRaIOOJPwUa6KaIEV 0NVOsCFgYJLjgTsK9LI1gJKOIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqmUejL rC4rL5DqEojLYHSKKB8fMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1 T0FkSEVjUWtqVW41MVEyQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsRfCS/BGMB/u5GV/hBeFtI8DiZCmjV5n6TmBDcT4O3ZsYTYb3hYkz P06K9jOyawKJJTZRxgpJnVxJdAhBZ8IAT5IsvQU5qVgtomLt/STTLOud90xl6p1K GW5zF3PqUFwi8ypc3VNZ0ZYwz4GJCJemFfuWxGozw53XtveTorf4WRYVhKuAW6Cz 4CFIxhJKJL0hie2IO4JoBB8SHmFa159mI5nWbHHNgLcNtB63h79qYEY/j4MHq1l4 fCXp278Dgjzmuu29V6v2Fo0DN9S3/PQBCQ7e2kvoOIIo2qbqKhU0sQuPnN9YDBEI PYIactRDWah8bpf5knLc3fdieyYhSUB0 -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:13 2025 by rpki-client