$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: rHAFqKTrQy40TgNmL7tgnOVCgeUDJ1CUudJthDMEXrM= Subject key identifier: 93:39:0D:6B:F6:B0:77:D2:77:D2:88:FE:6C:98:5E:F4:02:DA:BB:F5 Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 0874 Signing time: Sat 18 Oct 2025 22:04:00 +0000 Manifest this update: Sat 18 Oct 2025 22:03:59 +0000 Manifest next update: Sat 25 Oct 2025 22:03:59 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: SKCDfay84yXFX7YRbqAHEK2Ia02YqdFNROoWlwGBR/Q=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: FSKLxu00ctg24+HmZkC2VPQWpobiDfHHaUN+7Y4NQZA=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: Oct 18 22:03:59 2025 GMT Not After : Oct 25 22:03:59 2025 GMT Subject: CN=68f40ed0-d296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:fb:85:fd:9c:78:83:53:80:7b:d8:d9:1c: 90:2d:d4:c5:af:e6:11:16:bc:5a:26:13:cf:49:1f: 29:69:23:ce:95:9f:8b:d2:34:03:2b:db:07:99:c5: 07:1f:45:2d:3d:96:8b:2a:01:98:40:6f:10:0d:c5: 53:a8:5a:50:f0:39:b4:16:8e:74:89:17:d6:38:3a: c5:b5:8c:0b:51:c9:d1:0b:74:c2:97:82:91:02:39: 80:11:34:09:38:3c:a9:3d:48:fb:9c:01:45:6f:c4: 3b:b1:40:90:e7:bb:6e:76:98:e7:1b:9d:36:73:e2: d5:19:66:99:b9:6e:1a:44:b1:cc:0e:54:4a:5f:2c: 64:4a:07:c8:0e:13:85:b0:57:b2:d0:23:d2:a9:6b: 67:3d:e5:70:ff:c8:d9:e0:fb:73:c0:d6:01:6a:7e: c7:0e:16:08:b3:3d:b7:93:f6:72:27:b1:66:bd:73: 4a:27:b2:42:73:84:e1:3a:87:22:08:e6:89:a0:f1: c8:a0:af:1c:d3:f3:af:90:ff:7c:ed:12:36:7c:9a: 4c:9e:b2:6e:30:ed:b2:7f:cd:27:33:76:72:79:8a: 70:05:71:d1:9b:1b:1d:8d:0d:f0:dc:01:02:d0:35: 5e:5f:18:74:56:42:9a:52:03:d9:eb:76:e7:01:51: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:39:0D:6B:F6:B0:77:D2:77:D2:88:FE:6C:98:5E:F4:02:DA:BB:F5 X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c2:d8:1e:ba:ce:90:fb:3b:61:83:d0:fb:8b:fe:cb:ec:d4: fc:00:f1:ce:e3:4a:24:e3:73:6b:00:67:24:28:f3:91:5c:f3: 94:5f:76:8e:1a:78:75:5f:22:fc:f9:1d:c0:5b:c7:23:15:f0: a0:b6:2b:c3:74:7c:f2:02:28:28:e6:47:36:75:f6:be:0d:ca: 43:4c:bf:a3:c5:e7:76:47:aa:80:e6:d0:19:ec:2b:05:4f:c1: 30:fd:1f:07:a6:e3:b5:f9:ef:86:ad:14:b4:78:de:a9:98:63: 05:ea:66:a0:09:ca:23:9b:3e:ce:82:b6:d2:42:3a:49:ee:fc: 9e:b8:f7:15:a2:22:52:ae:db:2f:6f:99:9a:bc:63:43:af:c4: 4c:59:61:61:7b:74:d6:b1:73:40:e3:d6:eb:e0:7e:a8:cf:15: c0:3a:eb:74:3f:0e:d8:d6:df:d5:8b:47:7f:60:15:a8:f5:5d: 8f:5a:91:86:52:27:7d:2d:96:71:76:2e:9a:0e:5c:9a:60:6a: 02:2b:50:58:2c:c3:2e:90:e8:1b:8d:55:b7:c1:55:0f:1e:d4: c1:92:b9:5d:8f:1f:78:9a:71:35:60:33:8a:b0:86:64:07:04: ca:52:1e:3b:90:1a:44:45:43:76:d4:47:5e:86:94:3c:bd:de: 95:e2:8d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjUxMDE4MjIwMzU5WhcNMjUxMDI1MjIwMzU5WjAYMRYwFAYD VQQDEw02OGY0MGVkMC1kMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2T7hf2ceINTgHvY2RyQLdTFr+YRFrxaJhPPSR8paSPOlZ+L0jQDK9sHmcUH H0UtPZaLKgGYQG8QDcVTqFpQ8Dm0Fo50iRfWODrFtYwLUcnRC3TCl4KRAjmAETQJ ODypPUj7nAFFb8Q7sUCQ57tudpjnG502c+LVGWaZuW4aRLHMDlRKXyxkSgfIDhOF sFey0CPSqWtnPeVw/8jZ4PtzwNYBan7HDhYIsz23k/ZyJ7FmvXNKJ7JCc4ThOoci COaJoPHIoK8c0/OvkP987RI2fJpMnrJuMO2yf80nM3ZyeYpwBXHRmxsdjQ3w3AEC 0DVeXxh0VkKaUgPZ63bnAVH5bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM5DWv2 sHfSd9KI/myYXvQC2rv1MB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAswtgeus6Q+zthg9D7i/7L7NT8APHO40ok43NrAGckKPORXPOUX3aO Gnh1XyL8+R3AW8cjFfCgtivDdHzyAigo5kc2dfa+DcpDTL+jxed2R6qA5tAZ7CsF T8Ew/R8HpuO1+e+GrRS0eN6pmGMF6magCcojmz7OgrbSQjpJ7vyeuPcVoiJSrtsv b5mavGNDr8RMWWFhe3TWsXNA49br4H6ozxXAOut0Pw7Y1t/Vi0d/YBWo9V2PWpGG Uid9LZZxdi6aDlyaYGoCK1BYLMMukOgbjVW3wVUPHtTBkrldjx94mnE1YDOKsIZk BwTKUh47kBpERUN21EdehpQ8vd6V4o2x -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:42 2025 by rpki-client