$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: KuaHPFpWcMWBWNhWRhXnpQGv5QZuXjxF3DuTyYdiejA= Subject key identifier: 74:F5:BE:96:74:FF:7A:B3:30:5D:2A:7F:5D:A0:0F:57:B4:56:6C:58 Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 2214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21F3 Signing time: Sat 18 Oct 2025 16:08:51 +0000 Manifest this update: Sat 18 Oct 2025 16:08:51 +0000 Manifest next update: Sat 25 Oct 2025 16:08:51 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: i9z2X0T4mYVyZAIBIx9gwFRnWSAPTbnPsL3N2mgTMVg=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8724 (0x2214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Oct 18 16:08:51 2025 GMT Not After : Oct 25 16:08:51 2025 GMT Subject: CN=68f3bb93-6b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d3:fc:4e:8b:da:74:dd:b3:db:48:3a:36:03: d9:c8:d0:fb:a2:5c:aa:e1:fa:3e:98:66:9c:84:fd: ba:42:71:68:bb:8d:81:b0:78:96:a1:cd:ad:ba:ad: dc:99:0e:06:71:3c:f1:c3:d8:6e:93:8a:e4:1e:35: 15:2a:bf:79:2a:23:26:c5:e0:06:c3:a1:e5:98:bd: 1f:71:00:4f:e8:3d:bb:4a:23:e3:e4:6f:f8:d9:6d: 19:88:8d:03:58:81:24:65:cc:b0:2a:18:08:c4:38: 8c:47:9c:82:94:52:e3:99:1b:48:64:f9:0b:e9:88: bf:62:2b:cb:6a:9e:98:81:60:bb:25:0c:63:58:6c: 94:ec:88:e2:7f:cd:07:55:74:e3:f6:17:94:d6:a7: 70:bf:09:a5:df:70:8e:fe:55:70:c5:9a:6c:ca:16: b5:6c:5a:86:49:3c:58:81:16:67:bf:f1:48:af:26: d7:6b:83:e6:24:3b:af:31:2f:46:7b:39:cb:15:5a: 9f:35:bb:0d:2e:eb:43:d2:e8:b1:81:a3:8c:16:c2: 56:cd:2f:59:4b:49:ae:7d:4f:64:1d:9b:f3:2c:be: 2d:98:cc:e0:ca:67:69:a1:3d:27:63:70:71:91:6c: 91:e9:c5:65:76:98:f0:9f:08:79:03:f8:70:73:d4: 21:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F5:BE:96:74:FF:7A:B3:30:5D:2A:7F:5D:A0:0F:57:B4:56:6C:58 X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f3:96:a9:fb:29:9a:e4:45:34:68:5b:2a:2c:70:c4:7d:63: f1:60:e7:64:b6:45:33:91:69:7a:7b:c3:18:f0:5f:80:c1:02: c8:1e:07:f0:e7:05:78:48:3c:e0:0e:36:20:74:7f:19:48:1f: 05:95:c0:61:78:7b:9e:c7:e8:b5:39:10:b1:03:d0:d1:93:6d: 63:b6:d3:d4:1f:f0:54:d5:a7:99:e5:c4:34:62:a3:cf:91:73: bf:03:78:c7:0d:2c:67:c5:66:c2:8d:b3:f6:d1:01:91:07:4a: 3b:1d:6d:70:57:65:f1:a2:3e:1e:da:58:c1:9e:15:11:d4:7f: a3:1d:a0:0a:38:9c:bc:7a:5a:07:57:0e:41:65:17:66:a7:20: 79:d3:a4:94:5a:0e:7f:41:3a:09:93:68:c8:a6:4c:63:2c:24: 99:37:7c:0f:22:ec:30:83:dc:70:98:a1:34:aa:62:0f:0e:5f: 11:33:52:45:71:9d:9b:a3:66:e0:d4:88:cd:e2:22:86:b1:89: a7:21:05:31:b0:19:e6:5f:6a:c4:ff:7b:45:ec:30:07:43:c9: fe:b4:ce:69:0c:91:d9:09:1d:d0:59:c4:45:3c:ea:bd:c0:e3: d9:7a:12:4d:35:25:03:67:7c:81:ad:95:40:1c:9f:b0:03:da: 6d:4c:82:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUxMDE4MTYwODUxWhcNMjUxMDI1MTYwODUxWjAYMRYwFAYD VQQDEw02OGYzYmI5My02YjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49P8TovadN2z20g6NgPZyND7olyq4fo+mGachP26QnFou42BsHiWoc2tuq3c mQ4GcTzxw9huk4rkHjUVKr95KiMmxeAGw6HlmL0fcQBP6D27SiPj5G/42W0ZiI0D WIEkZcywKhgIxDiMR5yClFLjmRtIZPkL6Yi/YivLap6YgWC7JQxjWGyU7Ijif80H VXTj9heU1qdwvwml33CO/lVwxZpsyha1bFqGSTxYgRZnv/FIrybXa4PmJDuvMS9G eznLFVqfNbsNLutD0uixgaOMFsJWzS9ZS0mufU9kHZvzLL4tmMzgymdpoT0nY3Bx kWyR6cVldpjwnwh5A/hwc9QhHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT1vpZ0 /3qzMF0qf12gD1e0VmxYMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC85ap+yma5EU0aFsqLHDEfWPxYOdktkUzkWl6e8MY8F+AwQLIHgfw 5wV4SDzgDjYgdH8ZSB8FlcBheHuex+i1ORCxA9DRk21jttPUH/BU1aeZ5cQ0YqPP kXO/A3jHDSxnxWbCjbP20QGRB0o7HW1wV2Xxoj4e2ljBnhUR1H+jHaAKOJy8eloH Vw5BZRdmpyB506SUWg5/QToJk2jIpkxjLCSZN3wPIuwwg9xwmKE0qmIPDl8RM1JF cZ2bo2bg1IjN4iKGsYmnIQUxsBnmX2rE/3tF7DAHQ8n+tM5pDJHZCR3QWcRFPOq9 wOPZehJNNSUDZ3yBrZVAHJ+wA9ptTIKI -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:38 2025 by rpki-client