$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: U0yEp7L3xVaWz07RQVJS6up4BU4jZSjQhJXqjaakThc= Subject key identifier: B1:C4:5A:9A:77:7A:FF:3D:F3:F7:76:BB:20:95:2F:B2:10:25:29:B0 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: 0139 Signing time: Sun 19 Oct 2025 07:17:29 +0000 Manifest this update: Sun 19 Oct 2025 07:17:29 +0000 Manifest next update: Sun 26 Oct 2025 07:17:29 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: rZ+tUiaBqY2ljSJJrlf5vbiwBEVGRJ48wYNUbRICJBk=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: Oct 19 07:17:29 2025 GMT Not After : Oct 26 07:17:29 2025 GMT Subject: CN=68f49089-c100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:61:54:3b:24:c5:63:39:69:71:00:b0:22: a3:c6:b0:c5:56:e5:92:9d:e7:ce:36:20:d9:9b:88: 84:39:2e:5d:b1:e0:50:16:a4:c1:a4:77:f3:fc:6e: b2:c4:8a:af:53:69:fd:9b:4c:5c:7e:74:13:e7:d3: ce:ad:c7:3f:cb:0a:9a:8d:40:85:58:ac:47:f8:60: bb:77:65:3a:90:e5:e1:25:07:8d:30:dc:df:0a:ce: f2:10:de:19:13:3f:a1:0c:78:33:53:fa:ee:d7:4a: b2:61:2c:5a:e7:bd:88:de:3e:55:88:a4:3d:96:03: e6:91:14:d2:82:de:35:61:4a:df:61:c7:02:72:57: eb:7a:0d:3f:7f:4e:2e:87:2d:b7:b0:31:27:ad:ec: 41:e0:fa:17:a4:7f:70:52:c2:7f:c7:4c:b9:88:3b: ac:7a:f9:85:ec:46:aa:42:a1:49:03:f8:fd:4b:8f: e2:17:da:6e:bb:f2:d5:c7:94:3c:cd:d0:96:68:e7: e2:74:20:a4:58:e1:02:38:bd:d2:04:ac:6a:58:43: 28:4b:6c:8b:37:d9:52:c4:bc:8b:20:90:cb:bb:76: 90:94:08:9c:3f:25:6f:23:5b:9d:3c:3d:30:10:4b: 01:5b:27:1d:a7:a1:50:9a:4d:4c:96:f5:46:8a:03: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C4:5A:9A:77:7A:FF:3D:F3:F7:76:BB:20:95:2F:B2:10:25:29:B0 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:32:0a:94:df:d5:c5:98:75:0b:e7:50:27:28:1a:ce:c4:d8: 3e:d3:36:66:db:28:e9:14:12:6e:02:09:f3:25:d8:c3:03:a8: 2e:88:62:c5:f4:69:20:68:06:70:8c:d8:e8:e6:02:ad:3a:7f: d0:32:d4:a1:55:eb:4f:e4:26:33:a6:c8:39:f7:05:b7:31:87: 95:5a:57:cc:65:6a:5a:e2:79:81:34:ae:c9:4b:fa:43:ef:ad: 06:93:5c:47:9c:97:44:bd:11:bd:b9:92:c8:8f:bb:b6:c7:b5: e4:f3:d1:f5:f9:c8:90:dd:03:42:ee:7b:4d:4f:c2:5d:5e:55: 19:63:9f:5e:6a:d7:f5:3b:43:37:ac:8d:73:00:b7:6f:01:cf: a2:f9:e8:2c:ae:48:63:05:60:6d:c8:2c:9a:72:70:60:20:5c: 89:5f:57:1f:e0:16:ac:d1:b7:15:f2:71:2f:63:cb:14:63:16: 49:2f:7a:dd:aa:dc:ba:eb:25:5a:c0:0d:29:79:b0:c9:90:b8: 2e:0a:aa:70:37:be:fc:56:d0:00:21:a0:2d:31:17:6c:ca:37: c0:fb:f0:4c:19:05:a2:75:17:9f:61:83:b4:7c:93:ec:91:c6: d5:9a:07:42:a1:bb:5d:53:be:a8:38:04:17:66:43:5f:14:fb: 1f:6d:36:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUxMDE5MDcxNzI5WhcNMjUxMDI2MDcxNzI5WjAYMRYwFAYD VQQDEw02OGY0OTA4OS1jMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMRhVDskxWM5aXEAsCKjxrDFVuWSnefONiDZm4iEOS5dseBQFqTBpHfz/G6y xIqvU2n9m0xcfnQT59POrcc/ywqajUCFWKxH+GC7d2U6kOXhJQeNMNzfCs7yEN4Z Ez+hDHgzU/ru10qyYSxa572I3j5ViKQ9lgPmkRTSgt41YUrfYccCclfreg0/f04u hy23sDEnrexB4PoXpH9wUsJ/x0y5iDusevmF7EaqQqFJA/j9S4/iF9puu/LVx5Q8 zdCWaOfidCCkWOECOL3SBKxqWEMoS2yLN9lSxLyLIJDLu3aQlAicPyVvI1udPD0w EEsBWycdp6FQmk1MlvVGigONcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHEWpp3 ev898/d2uyCVL7IQJSmwMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHMgqU39XFmHUL51AnKBrOxNg+0zZm2yjpFBJuAgnzJdjDA6guiGLF 9GkgaAZwjNjo5gKtOn/QMtShVetP5CYzpsg59wW3MYeVWlfMZWpa4nmBNK7JS/pD 760Gk1xHnJdEvRG9uZLIj7u2x7Xk89H1+ciQ3QNC7ntNT8JdXlUZY59eatf1O0M3 rI1zALdvAc+i+egsrkhjBWBtyCyacnBgIFyJX1cf4Bas0bcV8nEvY8sUYxZJL3rd qty66yVawA0pebDJkLguCqpwN778VtAAIaAtMRdsyjfA+/BMGQWidRefYYO0fJPs kcbVmgdCobtdU76oOAQXZkNfFPsfbTak -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:52 2025 by rpki-client