$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: xLMFyWrL9KtPbLqFXnOXABQ0gXt843RPk37Sb/VI8uA= Subject key identifier: 82:F0:67:36:D5:9B:60:7C:3E:36:A2:BC:BF:5D:B6:34:E8:81:40:A4 Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 0974 Signing time: Sat 18 Oct 2025 21:10:16 +0000 Manifest this update: Sat 18 Oct 2025 21:10:15 +0000 Manifest next update: Sat 25 Oct 2025 21:10:15 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: p2XlM5i5bXmu7F23OYMepexztqumBb49Ec7/fxhpZeo=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: SCNejdxnpcaaKKmMwjhiNM0xWAEADnWJttQDspq42Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Oct 18 21:10:15 2025 GMT Not After : Oct 25 21:10:15 2025 GMT Subject: CN=68f40238-67af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:c4:dc:2f:fc:96:32:b5:ea:09:c1:5f:96: 5c:ff:42:e1:07:5a:73:fa:99:a8:c4:69:ce:89:01: 5a:fe:61:e1:5a:ed:72:ef:b4:63:88:0e:77:f7:5f: ba:ed:c2:4f:16:1e:42:f7:ee:51:b8:da:50:d6:c3: dc:23:83:ed:5b:d4:b0:e0:8d:cf:ff:47:37:72:30: 38:64:20:3f:7c:bb:8a:dd:9a:b6:ba:53:2d:57:17: 11:95:b7:14:36:60:f9:f6:e0:e5:da:a5:2c:11:8f: 78:f0:1b:60:d5:06:f3:7c:2e:59:d3:d5:be:a8:20: c3:83:c0:f3:61:44:80:cf:a4:21:7d:d5:a2:e5:06: e4:4c:23:ae:ec:81:29:24:5a:ac:76:0c:a3:7d:e5: c1:59:a2:94:dc:ff:73:63:fe:39:01:b9:e3:a6:c5: 08:a1:2e:25:20:ad:2e:30:e3:93:29:69:3b:df:70: d9:d1:b8:b2:22:cc:75:2c:33:9c:27:fa:8d:a9:80: 0a:62:20:81:cd:f7:86:84:f8:2a:fb:64:59:b3:29: 4c:05:bc:26:77:a3:0b:78:68:a7:79:75:7b:74:64: 56:0e:7d:97:93:39:a2:d2:3b:41:fd:9f:76:1e:19: f1:03:ae:10:a2:ae:95:1b:a7:4a:4e:26:13:ca:c6: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F0:67:36:D5:9B:60:7C:3E:36:A2:BC:BF:5D:B6:34:E8:81:40:A4 X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:df:26:75:90:ea:d3:f0:e4:1d:a8:53:b3:e9:7f:7e:0b:a5: ca:ee:2d:3d:ff:04:26:5d:1c:5c:71:8a:a2:f7:7e:7d:84:d5: a5:cb:f7:24:c5:90:62:b9:fb:36:d6:95:71:f5:c4:80:44:95: 48:59:b0:27:3d:d7:8d:fc:03:c7:2d:3a:5d:02:92:74:df:7b: d9:2d:00:20:1a:76:25:a0:68:75:cd:24:6c:0c:82:b6:58:06: 12:ea:3b:ca:b8:63:79:cb:31:21:99:45:4f:3f:64:7c:66:b7: 40:dd:b6:05:92:73:28:cc:52:9e:2b:86:60:58:1a:02:49:e7: 81:9d:7b:47:4c:f9:b2:d0:2b:8d:7b:79:76:27:72:93:29:54: f3:d1:e3:b7:c7:f8:9e:ce:29:8b:68:5c:f5:89:79:68:6f:73: 9f:03:2f:10:34:80:3e:c6:6d:c0:b4:37:82:2b:23:59:90:a0: 5a:38:53:c5:de:be:ae:7a:97:0d:fc:35:93:c0:b7:b0:86:bd: 34:9e:6d:05:22:50:cd:c9:33:11:6e:24:4f:79:00:15:b9:e9: 9b:d4:62:44:46:7c:f0:c7:bb:9e:52:01:03:d5:23:43:4d:6d: 63:9e:a5:ee:41:9e:c0:7f:98:df:b0:a0:6d:00:98:a8:15:19: ef:f4:f6:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjUxMDE4MjExMDE1WhcNMjUxMDI1MjExMDE1WjAYMRYwFAYD VQQDEw02OGY0MDIzOC02N2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ/E3C/8ljK16gnBX5Zc/0LhB1pz+pmoxGnOiQFa/mHhWu1y77RjiA5391+6 7cJPFh5C9+5RuNpQ1sPcI4PtW9Sw4I3P/0c3cjA4ZCA/fLuK3Zq2ulMtVxcRlbcU NmD59uDl2qUsEY948Btg1QbzfC5Z09W+qCDDg8DzYUSAz6QhfdWi5QbkTCOu7IEp JFqsdgyjfeXBWaKU3P9zY/45AbnjpsUIoS4lIK0uMOOTKWk733DZ0biyIsx1LDOc J/qNqYAKYiCBzfeGhPgq+2RZsylMBbwmd6MLeGineXV7dGRWDn2Xkzmi0jtB/Z92 HhnxA64Qoq6VG6dKTiYTysaRBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILwZzbV m2B8PjaivL9dtjTogUCkMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC3yZ1kOrT8OQdqFOz6X9+C6XK7i09/wQmXRxccYqi9359hNWly/ck xZBiufs21pVx9cSARJVIWbAnPdeN/APHLTpdApJ033vZLQAgGnYloGh1zSRsDIK2 WAYS6jvKuGN5yzEhmUVPP2R8ZrdA3bYFknMozFKeK4ZgWBoCSeeBnXtHTPmy0CuN e3l2J3KTKVTz0eO3x/iezimLaFz1iXlob3OfAy8QNIA+xm3AtDeCKyNZkKBaOFPF 3r6uepcN/DWTwLewhr00nm0FIlDNyTMRbiRPeQAVuemb1GJERnzwx7ueUgED1SND TW1jnqXuQZ7Af5jfsKBtAJioFRnv9PbL -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:58 2025 by rpki-client