$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: dq5l0nb7HwM/lYO7DjlZI/MR9miFQhfDfC1Dbg2f8ww= Subject key identifier: 3C:C7:07:6F:A9:E0:0C:F6:EE:35:A0:48:97:31:F9:7C:68:A1:D7:9F Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 020D Signing time: Sun 19 Oct 2025 04:41:51 +0000 Manifest this update: Sun 19 Oct 2025 04:41:50 +0000 Manifest next update: Sun 26 Oct 2025 04:41:50 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: B1i+W3kKROzHyNJb9r2P2jwVnlJ4NsYmWgn1ahtlSs0=) 2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: mfifBvvuBOWR51qu4TAHtYf7r268zx0oLY0Ybp1m38c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Oct 19 04:41:50 2025 GMT Not After : Oct 26 04:41:50 2025 GMT Subject: CN=68f46c0f-a459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:24:63:0a:c9:d0:2f:bd:19:21:ec:e7:92: 4a:0d:6b:84:90:c7:c2:9f:af:2a:7d:89:66:1d:5a: 10:74:53:90:2d:4c:8f:d3:2c:69:16:51:45:9b:93: 99:01:cf:2b:4b:9d:f8:84:c4:57:96:a1:b6:ef:92: 8f:a2:22:d3:f1:2e:e7:bd:c1:e6:ff:4b:77:de:1e: 5e:fd:85:d5:94:24:d5:0c:fe:41:b6:02:ec:8c:d2: a5:af:74:90:de:98:2b:4c:c8:bf:b0:03:01:65:93: bd:1c:a8:76:e4:e9:be:c4:3a:6d:c1:d5:28:98:f6: 44:cc:8a:4c:e6:d8:d5:65:27:78:5e:51:01:71:5c: 3b:d7:9b:a5:e8:8c:4e:24:7c:64:81:9a:74:3e:fc: 2c:5d:23:61:04:87:f1:7d:31:e6:51:db:c6:fb:20: 31:65:60:7d:86:33:9a:0a:0b:4a:e7:82:f4:b7:4e: 2b:4f:be:58:fc:d5:24:2f:67:e7:d3:18:2c:95:17: 75:db:0c:f4:c4:a0:54:da:8a:0b:9a:37:c7:27:c4: 25:db:68:4e:82:c3:16:44:79:4a:fe:17:82:95:58: 2c:4b:67:da:b0:89:5d:15:7b:37:04:42:8a:f5:6a: 17:5f:15:2e:2d:15:76:00:1e:e8:d7:6e:07:41:c9: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C7:07:6F:A9:E0:0C:F6:EE:35:A0:48:97:31:F9:7C:68:A1:D7:9F X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e6:1b:23:a8:37:43:d9:4f:72:eb:67:9b:3a:2c:14:3c:5b: ef:f0:de:ab:07:2b:3c:b7:95:ef:d0:37:a7:50:4c:76:6d:60: 7d:58:b4:75:ec:b6:bd:f4:fe:be:fc:1f:ee:27:96:7b:00:1e: ab:9d:4a:e2:d4:8e:18:4e:6d:00:4c:7d:1c:5a:84:6f:60:ef: f0:f8:5a:b8:cd:e2:64:2f:87:d5:78:e6:4c:74:93:89:a5:67: 8e:cd:54:92:6b:df:e5:1a:c0:d3:29:bd:bd:73:83:e1:9c:07: 13:22:e2:79:8e:a0:99:5c:83:20:2f:00:41:86:1b:ce:0a:2c: 9c:76:a4:7b:0d:cf:9d:8c:63:7f:d2:30:58:e9:c1:0a:6b:89: f2:2a:f0:9b:16:41:39:1b:11:48:22:2c:e4:e9:c6:98:81:c3: 1c:6c:13:fc:18:b8:b8:f6:92:43:57:e5:25:4b:d8:db:13:0b: 9e:87:9a:53:79:62:6c:fe:5b:61:ff:ff:f4:f2:e6:2d:9c:96: b0:92:c3:22:a6:69:d6:7e:a8:ca:57:59:f5:4a:b3:2e:db:d1: ea:f4:23:23:31:c4:55:57:00:91:26:c7:be:c4:32:53:86:10: a7:81:41:b6:30:55:75:dd:be:9e:ef:83:cf:ff:a0:7b:55:6d: ed:0d:eb:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjUxMDE5MDQ0MTUwWhcNMjUxMDI2MDQ0MTUwWjAYMRYwFAYD VQQDEw02OGY0NmMwZi1hNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eIkYwrJ0C+9GSHs55JKDWuEkMfCn68qfYlmHVoQdFOQLUyP0yxpFlFFm5OZ Ac8rS534hMRXlqG275KPoiLT8S7nvcHm/0t33h5e/YXVlCTVDP5BtgLsjNKlr3SQ 3pgrTMi/sAMBZZO9HKh25Om+xDptwdUomPZEzIpM5tjVZSd4XlEBcVw715ul6IxO JHxkgZp0PvwsXSNhBIfxfTHmUdvG+yAxZWB9hjOaCgtK54L0t04rT75Y/NUkL2fn 0xgslRd12wz0xKBU2ooLmjfHJ8Ql22hOgsMWRHlK/heClVgsS2fasIldFXs3BEKK 9WoXXxUuLRV2AB7o124HQcluGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzHB2+p 4Az27jWgSJcx+XxoodefMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl5hsjqDdD2U9y62ebOiwUPFvv8N6rBys8t5Xv0DenUEx2bWB9WLR1 7La99P6+/B/uJ5Z7AB6rnUri1I4YTm0ATH0cWoRvYO/w+Fq4zeJkL4fVeOZMdJOJ pWeOzVSSa9/lGsDTKb29c4PhnAcTIuJ5jqCZXIMgLwBBhhvOCiycdqR7Dc+djGN/ 0jBY6cEKa4nyKvCbFkE5GxFIIizk6caYgcMcbBP8GLi49pJDV+UlS9jbEwueh5pT eWJs/lth///08uYtnJawksMipmnWfqjKV1n1SrMu29Hq9CMjMcRVVwCRJse+xDJT hhCngUG2MFV13b6e74PP/6B7VW3tDet+ -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:06 2025 by rpki-client