$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json) Hash identifier: O4skRsQm8l3ojxQmfJ83O/Ox19ZS7MY49QD+/rZY/uA= Subject key identifier: DF:E5:C4:1D:B5:BB:4D:A4:BF:DA:DA:51:42:9C:3F:B3:6B:F3:59:FA Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft Manifest number: 066B Signing time: Sun 19 Oct 2025 00:05:15 +0000 Manifest this update: Sun 19 Oct 2025 00:05:14 +0000 Manifest next update: Sun 26 Oct 2025 00:05:14 +0000 Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: u4MfijudX+eqTHK15dEGFdbZoGD2ConmnekCp6YfHbA=) 2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: u94MQjoE9DI5ldBDPfqmoxt1XvvR3zVSKElHRq9GZVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Validity Not Before: Oct 19 00:05:14 2025 GMT Not After : Oct 26 00:05:14 2025 GMT Subject: CN=68f42b3a-7f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:12:d0:23:33:09:cd:84:66:aa:2b:87:1c: 95:77:e6:8a:d5:a2:bc:53:82:9b:de:82:1b:6f:3d: fa:f5:a2:4e:02:09:b7:8f:49:ad:69:55:89:49:75: 9b:0f:e7:5a:9d:24:6c:08:c9:3b:ef:76:20:f1:f1: af:e5:51:a5:c7:97:93:df:ec:bb:41:01:9e:ce:5a: 4d:94:a9:f1:c1:da:c1:0e:5e:0e:e9:02:2a:d3:26: f1:de:44:a5:9b:4b:ac:c9:c4:76:09:5f:16:bd:3a: ad:92:34:27:57:db:90:1e:ce:8c:86:02:bc:af:17: 85:1e:de:6a:6d:68:1e:f4:f0:3b:14:a6:76:a8:5f: c5:f0:a4:ec:03:75:c3:7b:27:9b:c6:90:9c:fc:b7: 30:66:64:ea:fc:9a:89:35:5f:8a:71:63:d2:93:fe: 3e:84:19:49:5f:6d:12:ab:df:62:e5:c1:33:ea:c0: f9:af:f4:ba:a0:73:6d:7b:c5:b0:9f:9c:cc:3d:76: 78:76:42:22:17:52:a4:32:30:72:c2:8c:65:38:30: 83:6f:7d:3a:1b:fd:25:cc:d1:b2:68:ab:dd:2e:87: 04:4f:40:a7:0a:53:28:27:19:bc:81:18:52:6d:16: 16:d2:b0:71:b3:d6:2a:3d:f1:6f:ea:9a:a7:fb:09: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E5:C4:1D:B5:BB:4D:A4:BF:DA:DA:51:42:9C:3F:B3:6B:F3:59:FA X509v3 Authority Key Identifier: keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:44:1a:57:c9:ee:e7:bc:c3:ed:39:71:49:c9:8d:2f:6a: 82:76:e2:f7:c0:84:67:8b:0e:d3:03:78:14:5d:99:48:d3:aa: 4b:5f:d0:9e:e0:2c:f9:c5:51:50:93:73:f2:e1:65:52:c8:bf: fd:a9:d9:8b:27:02:ac:d5:b2:fb:11:0c:5a:67:88:53:7d:29: 5b:b0:32:53:2d:aa:5f:07:21:1f:83:8c:b7:29:66:be:fb:2f: fd:e5:7a:4a:7f:ff:d6:e3:de:34:24:6e:75:53:aa:9b:a2:f1: 92:7d:8b:a4:1c:ea:5f:aa:e3:c9:7f:d4:d7:b4:6a:c1:78:53: 77:d3:25:4a:76:e0:a2:d1:72:1d:51:b9:65:f1:ba:cb:66:8c: a9:be:1d:96:cf:fc:9f:e1:35:78:91:82:3f:5f:c7:57:20:dc: 55:33:b1:78:ae:8c:82:f4:86:f4:e3:a9:dd:32:fb:ac:e4:d4: f8:cb:0a:75:17:f6:d6:2d:0e:51:0a:b2:8c:01:2a:0a:3d:47: 19:3b:c6:f6:a7:92:23:05:e9:66:0f:21:7d:d3:32:72:9c:ea: b2:6c:86:e8:d7:7b:43:6b:08:cc:07:83:3d:ea:e2:d8:ec:31: d5:ae:06:e9:07:57:3a:7e:2c:de:26:f3:64:a8:f5:f0:a4:98: 48:ad:e1:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5MkQ0OEZEQjc2 OTU3QTgwQkMwHhcNMjUxMDE5MDAwNTE0WhcNMjUxMDI2MDAwNTE0WjAYMRYwFAYD VQQDEw02OGY0MmIzYS03ZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWcS0CMzCc2EZqorhxyVd+aK1aK8U4Kb3oIbbz369aJOAgm3j0mtaVWJSXWb D+danSRsCMk773Yg8fGv5VGlx5eT3+y7QQGezlpNlKnxwdrBDl4O6QIq0ybx3kSl m0usycR2CV8WvTqtkjQnV9uQHs6MhgK8rxeFHt5qbWge9PA7FKZ2qF/F8KTsA3XD eyebxpCc/LcwZmTq/JqJNV+KcWPSk/4+hBlJX20Sq99i5cEz6sD5r/S6oHNte8Ww n5zMPXZ4dkIiF1KkMjBywoxlODCDb306G/0lzNGyaKvdLocET0CnClMoJxm8gRhS bRYW0rBxs9YqPfFv6pqn+wmEbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/lxB21 u02kv9raUUKcP7Nr81n6MB8GA1UdIwQYMBaAFPq6U/Q9oA4hp+r3ktSP23aVeoC8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjVFNS9FQ0JGMDBFODlC NEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0RpR242dmVTMUlfYmRwVjZn THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ycFQ5RDJnRGlHbjZ2ZVMxSV9iZHBWNmdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0Rp R242dmVTMUlfYmRwVjZnTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQIkQaV8nu57zD7TlxScmNL2qCduL3wIRniw7TA3gUXZlI06pLX9Ce 4Cz5xVFQk3Py4WVSyL/9qdmLJwKs1bL7EQxaZ4hTfSlbsDJTLapfByEfg4y3KWa+ +y/95XpKf//W4940JG51U6qbovGSfYukHOpfquPJf9TXtGrBeFN30yVKduCi0XId Ubll8brLZoypvh2Wz/yf4TV4kYI/X8dXINxVM7F4royC9Ib046ndMvus5NT4ywp1 F/bWLQ5RCrKMASoKPUcZO8b2p5IjBelmDyF90zJynOqybIbo13tDawjMB4M96uLY 7DHVrgbpB1c6fizeJvNkqPXwpJhIreGo -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:29 2025 by rpki-client