$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: psk9smX+/sSHJlWOyTKdQLWpwv+mOFc8pk7Ml8AEbKg= Subject key identifier: A6:3F:21:90:50:9F:68:D2:E5:8E:68:3C:D8:8F:6F:27:F0:4E:6E:70 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0C84 Signing time: Sat 18 Oct 2025 19:10:18 +0000 Manifest this update: Sat 18 Oct 2025 19:10:17 +0000 Manifest next update: Sat 25 Oct 2025 19:10:17 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: JAoyIYQYuSIXLVU4hnj+SAHcRbj6rAfAKjKgBJcYjsc=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: Oct 18 19:10:17 2025 GMT Not After : Oct 25 19:10:17 2025 GMT Subject: CN=68f3e619-1cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:82:21:4c:ac:d6:8d:e9:20:97:09:f9:25: 68:23:1f:06:1a:a4:fa:68:0e:65:c0:5d:8e:55:38: fd:a7:7c:de:8e:11:29:04:7d:7e:e9:a1:0b:55:bd: 2a:f5:8a:2e:d0:3c:7b:24:3b:b1:03:8c:b6:ff:b4: ba:85:92:50:3f:80:bb:a2:e4:03:25:29:f0:81:99: 15:d4:51:a9:7c:51:05:59:16:d8:3b:8b:3c:de:76: 6e:ab:c4:1a:44:c9:90:46:ce:bb:02:7d:40:9f:b1: 85:c1:04:c2:48:1d:2b:0d:68:e4:5f:54:07:4a:51: ed:2d:e1:b9:a7:94:8a:5c:6a:a3:aa:ab:5e:f0:ea: 6c:82:27:a0:67:e8:08:97:2b:59:77:10:8c:70:4a: 7c:5c:50:a7:b6:56:9c:56:3a:7a:bd:1e:b6:42:47: 6a:b6:d7:d1:2e:56:1c:69:6b:1c:f4:76:7f:4b:67: 9e:d7:ae:be:46:35:d4:b5:73:25:76:a5:3b:b5:e0: 22:b9:96:69:45:b8:54:69:b6:e3:dc:5c:4f:5a:34: 3c:1b:f7:8c:9a:ad:b4:cf:80:7c:a9:8f:48:e6:9f: 57:7f:b4:07:e9:76:dd:0c:6f:08:0e:83:fa:64:5c: d2:c5:fd:ac:a1:ea:58:9e:df:e8:10:f0:d1:49:fc: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3F:21:90:50:9F:68:D2:E5:8E:68:3C:D8:8F:6F:27:F0:4E:6E:70 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:95:64:2c:7d:cd:3a:34:20:44:94:39:c0:03:25:4f:f0:30: 18:27:42:16:7f:90:23:4a:5b:aa:1b:3d:79:96:14:95:72:1f: cf:46:a9:43:91:ab:4e:80:a6:89:a0:54:b5:5a:2a:b9:98:f0: bf:81:71:79:e0:4e:c2:1a:5c:5b:a5:91:9d:bf:9c:0d:5f:a9: 2b:e3:3c:b1:fa:75:bb:10:8f:0c:6c:a4:04:6c:c0:37:c3:d9: 3a:5d:41:fe:ea:97:f0:88:bf:0d:b4:51:73:19:a6:04:f0:6b: c5:57:4b:92:24:3a:f6:e9:66:e2:84:d3:6d:3a:4f:67:61:d5: de:b8:e6:1b:d2:6c:96:44:b0:14:f8:28:f4:54:8c:13:bc:4e: 33:c6:13:5d:93:54:2e:2c:c8:e8:c4:08:44:a4:b1:33:f0:56: 0b:ea:e0:07:57:c1:40:6e:8e:cf:bc:24:13:be:9b:29:85:15: 55:62:53:da:5b:27:df:8f:d9:c7:63:65:7a:d6:1e:ad:02:05: 56:f3:e3:65:6c:4d:08:40:f5:ef:9c:b2:0a:72:de:82:30:66: 2a:50:57:e2:43:f0:8e:28:52:c4:49:43:c1:49:86:82:cf:5e: 99:48:b7:64:23:60:b0:24:35:6e:b0:4a:69:82:cb:2e:08:12: 82:a0:b7:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjUxMDE4MTkxMDE3WhcNMjUxMDI1MTkxMDE3WjAYMRYwFAYD VQQDEw02OGYzZTYxOS0xY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdiCIUys1o3pIJcJ+SVoIx8GGqT6aA5lwF2OVTj9p3zejhEpBH1+6aELVb0q 9You0Dx7JDuxA4y2/7S6hZJQP4C7ouQDJSnwgZkV1FGpfFEFWRbYO4s83nZuq8Qa RMmQRs67An1An7GFwQTCSB0rDWjkX1QHSlHtLeG5p5SKXGqjqqte8OpsgiegZ+gI lytZdxCMcEp8XFCntlacVjp6vR62QkdqttfRLlYcaWsc9HZ/S2ee166+RjXUtXMl dqU7teAiuZZpRbhUabbj3FxPWjQ8G/eMmq20z4B8qY9I5p9Xf7QH6XbdDG8IDoP6 ZFzSxf2soepYnt/oEPDRSfy83QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY/IZBQ n2jS5Y5oPNiPbyfwTm5wMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAilWQsfc06NCBElDnAAyVP8DAYJ0IWf5AjSluqGz15lhSVch/PRqlD katOgKaJoFS1Wiq5mPC/gXF54E7CGlxbpZGdv5wNX6kr4zyx+nW7EI8MbKQEbMA3 w9k6XUH+6pfwiL8NtFFzGaYE8GvFV0uSJDr26WbihNNtOk9nYdXeuOYb0myWRLAU +Cj0VIwTvE4zxhNdk1QuLMjoxAhEpLEz8FYL6uAHV8FAbo7PvCQTvpsphRVVYlPa Wyffj9nHY2V61h6tAgVW8+NlbE0IQPXvnLIKct6CMGYqUFfiQ/COKFLESUPBSYaC z16ZSLdkI2CwJDVusEppgssuCBKCoLf8 -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:27 2025 by rpki-client