$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json) Hash identifier: OifiBHCa2HnU+5Q7aZIFkfQg/iDQqLTjaybMIqEcATU= Subject key identifier: 64:99:B6:7C:F9:98:22:E3:78:DD:C5:8B:3C:6C:BB:D6:7F:E4:7F:60 Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft Manifest number: 023C Signing time: Sun 19 Oct 2025 04:06:58 +0000 Manifest this update: Sun 19 Oct 2025 04:06:57 +0000 Manifest next update: Sun 26 Oct 2025 04:06:57 +0000 Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: 11ckH0x0g5nZ+huO7j25y9P1djGrBZGObBUs3RYfljo=) 2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Rl7cC9aD2+HUzvALoJy+W3POWuoH4LCYbv/U7VQpjNA=) 3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: 6Nzq1WoXAkjRrieEemeMX09rMtSXxNTIJXhrfWNFeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: Oct 19 04:06:57 2025 GMT Not After : Oct 26 04:06:57 2025 GMT Subject: CN=68f463e1-ca2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:f3:59:fa:2f:3e:a1:99:dc:41:05:92:2e: b6:e9:85:cf:1c:94:27:a5:a7:8e:50:8a:59:53:ec: 3d:f2:06:0f:55:ee:9b:b7:20:bf:27:b5:ac:4c:84: ba:03:e9:ba:9c:5e:cf:5a:e8:8c:aa:d8:98:f6:76: db:64:89:aa:86:3e:13:ff:5b:11:68:27:fd:03:be: 7b:30:49:3e:20:f4:40:db:cd:82:e2:ed:9c:cb:e3: 13:4d:4b:57:9c:5c:60:c7:71:81:85:a7:37:7f:f2: 06:9e:1a:78:9f:b8:13:99:08:2c:f7:2a:e6:22:a0: ee:99:c6:2e:95:36:9f:a5:b2:55:4c:61:37:8c:99: a2:59:ee:fd:b2:ef:9f:77:36:73:fc:56:07:94:35: 90:29:09:a4:bd:3d:df:85:67:c6:b8:f3:4b:e1:cf: 30:06:2e:2c:58:ba:4b:f0:93:4a:d4:23:fe:2d:0d: 5f:f2:47:4d:d2:5c:18:c0:0d:5c:aa:85:e2:3d:d8: 44:36:f0:ab:60:ec:34:4d:f3:eb:ef:ea:f3:00:b3: 65:5d:15:f9:d6:c3:cf:a9:6b:ab:69:bd:fe:c5:82: 0a:5b:0f:d7:ed:db:10:8f:81:3b:7c:b9:56:4b:49: a9:ae:48:51:32:44:f6:85:a8:ad:b7:81:bf:da:49: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:B6:7C:F9:98:22:E3:78:DD:C5:8B:3C:6C:BB:D6:7F:E4:7F:60 X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d9:ad:4d:98:a3:33:35:17:99:7e:99:6d:00:27:3d:53:93: a9:6b:03:de:ed:a7:eb:d4:a3:db:a1:e4:ae:43:4c:22:7b:e7: 72:64:b0:a0:dd:f2:a8:37:40:78:64:e3:68:5e:20:77:9a:05: 2f:83:59:e9:ce:bd:8a:e6:9b:b2:44:83:9f:24:04:18:7a:1b: 7a:a7:77:5a:d7:f6:a7:84:af:02:87:ce:9c:91:ef:e8:da:bc: a0:67:ae:98:60:79:35:b1:93:d9:38:ae:70:3f:ad:85:77:e3: 41:f5:2a:0d:35:fb:0e:35:a4:dc:df:8a:b2:cb:43:d9:04:9e: 00:d4:88:76:c3:d3:18:5f:aa:55:15:11:ad:3a:ad:1f:42:52: 8e:30:a1:53:b1:5c:0c:e5:00:9e:cc:33:3f:47:70:8c:71:bd: 30:d4:8c:db:c9:9f:45:ab:26:09:69:39:ab:e8:3e:bf:9a:6d: 26:cf:62:a9:c4:4b:3e:d8:cb:53:e3:db:96:d7:2c:fd:49:27: 3d:bc:84:c9:d6:77:8a:d9:d6:3b:e9:ac:cc:6c:7d:98:e4:83: 8c:09:32:8e:26:2a:c0:79:72:13:ff:b0:0e:d3:b4:b9:95:8f: 25:72:ca:85:b8:fd:bd:2f:26:24:e3:6b:22:a3:40:30:75:4f: f5:8e:1e:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUxMDE5MDQwNjU3WhcNMjUxMDI2MDQwNjU3WjAYMRYwFAYD VQQDEw02OGY0NjNlMS1jYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHbzWfovPqGZ3EEFki626YXPHJQnpaeOUIpZU+w98gYPVe6btyC/J7WsTIS6 A+m6nF7PWuiMqtiY9nbbZImqhj4T/1sRaCf9A757MEk+IPRA282C4u2cy+MTTUtX nFxgx3GBhac3f/IGnhp4n7gTmQgs9yrmIqDumcYulTafpbJVTGE3jJmiWe79su+f dzZz/FYHlDWQKQmkvT3fhWfGuPNL4c8wBi4sWLpL8JNK1CP+LQ1f8kdN0lwYwA1c qoXiPdhENvCrYOw0TfPr7+rzALNlXRX51sPPqWurab3+xYIKWw/X7dsQj4E7fLlW S0mprkhRMkT2haitt4G/2kkqoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSZtnz5 mCLjeN3Fizxsu9Z/5H9gMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh YnVUd0gteHFtT0N0TDZnUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk2a1NmKMzNReZfpltACc9U5OpawPe7afr1KPboeSuQ0wie+dyZLCg 3fKoN0B4ZONoXiB3mgUvg1npzr2K5puyRIOfJAQYeht6p3da1/anhK8Ch86cke/o 2rygZ66YYHk1sZPZOK5wP62Fd+NB9SoNNfsONaTc34qyy0PZBJ4A1Ih2w9MYX6pV FRGtOq0fQlKOMKFTsVwM5QCezDM/R3CMcb0w1IzbyZ9FqyYJaTmr6D6/mm0mz2Kp xEs+2MtT49uW1yz9SSc9vITJ1neK2dY76azMbH2Y5IOMCTKOJirAeXIT/7AO07S5 lY8lcsqFuP29LyYk42sio0AwdU/1jh7p -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:26 2025 by rpki-client