$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: OuKA4wqYC1KIyDso1nMCwcLKVcknHcuFBokbor/CVSA= Subject key identifier: E8:CE:52:8F:4C:C2:86:04:50:FA:9C:75:1A:9F:AA:4D:15:3F:5E:F0 Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: 01B1 Signing time: Sun 19 Oct 2025 05:41:44 +0000 Manifest this update: Sun 19 Oct 2025 05:41:44 +0000 Manifest next update: Sun 26 Oct 2025 05:41:44 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: Z6Z4qoNhkFWY2Kl0SJve9dpmkZ7g+aLQFA+YuUCHisQ=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: Oct 19 05:41:44 2025 GMT Not After : Oct 26 05:41:44 2025 GMT Subject: CN=68f47a18-3e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:c9:55:2c:38:70:04:88:c7:20:02:91:e7: af:ee:02:db:0b:3a:0c:aa:db:db:cb:d0:86:c0:f9: 57:fb:a0:12:43:30:01:78:5b:ee:e0:2a:9f:ce:51: ea:92:ec:8a:b4:97:a1:a1:bf:9c:de:c4:d4:31:20: 9a:a6:9a:d2:48:a0:29:3e:09:a4:a3:f6:d7:5e:8e: 42:cf:84:c2:31:36:87:c5:18:13:ea:3c:e8:b2:96: 6d:13:1d:31:9a:a0:77:ba:d4:39:ce:c6:00:36:c6: 3a:b4:68:6f:6f:9f:69:9b:45:be:bf:4e:da:3e:44: 18:c5:33:97:44:66:a2:20:02:b3:60:ad:ef:e2:29: da:ff:bb:27:a5:7f:a5:5c:bb:2b:e6:c2:6e:91:d0: e8:64:d4:e8:06:d8:03:d2:d5:5e:76:aa:e8:01:6e: bb:40:98:2d:e7:a6:05:57:ef:d9:dd:a7:1b:11:0d: f8:ac:c1:46:a5:6c:11:b9:0e:aa:bb:55:5f:82:ea: 9b:bb:50:ab:70:e7:18:39:d0:e0:ec:b6:c0:5c:95: 65:e3:0b:88:a3:05:0f:04:38:80:48:dd:cb:1c:60: 44:65:8c:0e:1e:b9:14:4c:b8:71:d2:14:3f:dd:a1: fb:1d:e6:43:66:13:c7:01:0a:36:f5:51:60:a6:75: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CE:52:8F:4C:C2:86:04:50:FA:9C:75:1A:9F:AA:4D:15:3F:5E:F0 X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:51:ae:d2:e5:37:b6:98:1a:1c:a7:b6:a7:1f:74:b9:7a:e2: 9e:29:9a:d6:f4:55:e8:5e:5a:cc:c0:08:41:ac:e8:30:ab:f0: e4:c9:2a:5a:97:18:5a:02:71:bc:cf:35:57:af:32:b0:27:24: ba:2b:28:19:26:2d:cb:32:b0:00:9f:aa:8e:bc:58:52:28:41: c5:9e:4a:1a:6a:0f:7b:9c:71:30:c7:13:3a:3e:bb:ce:af:03: 8b:45:e7:d6:30:d8:31:a3:3c:5e:22:56:74:dc:d7:a2:5c:b3: 8d:4e:18:75:08:06:a2:ea:af:ef:4e:e7:fe:d5:27:6e:7f:03: 43:7d:4e:16:26:54:66:56:5c:46:41:a9:f8:3c:89:a2:65:2d: 24:c1:b0:eb:d3:81:a9:1e:a0:7e:c0:09:53:a8:36:ee:cd:51: ed:49:86:53:c6:9a:10:fc:81:93:f9:00:f7:17:f2:54:38:5c: 11:1f:55:62:46:0d:dc:bf:e8:25:0e:46:71:75:d0:d6:5d:c0: 11:eb:9e:78:55:7a:7f:51:cd:b2:2a:38:0c:64:66:9a:c4:5f: 48:cb:9c:4d:00:67:0f:8e:63:de:9a:33:cb:16:25:32:e1:27: 0c:80:62:16:ae:58:4a:4d:0e:ec:2d:e8:0e:59:b4:66:ba:ee: 28:a5:d1:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjUxMDE5MDU0MTQ0WhcNMjUxMDI2MDU0MTQ0WjAYMRYwFAYD VQQDEw02OGY0N2ExOC0zZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsszJVSw4cASIxyACkeev7gLbCzoMqtvby9CGwPlX+6ASQzABeFvu4CqfzlHq kuyKtJehob+c3sTUMSCapprSSKApPgmko/bXXo5Cz4TCMTaHxRgT6jzospZtEx0x mqB3utQ5zsYANsY6tGhvb59pm0W+v07aPkQYxTOXRGaiIAKzYK3v4ina/7snpX+l XLsr5sJukdDoZNToBtgD0tVedqroAW67QJgt56YFV+/Z3acbEQ34rMFGpWwRuQ6q u1Vfguqbu1CrcOcYOdDg7LbAXJVl4wuIowUPBDiASN3LHGBEZYwOHrkUTLhx0hQ/ 3aH7HeZDZhPHAQo29VFgpnW0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjOUo9M woYEUPqcdRqfqk0VP17wMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Ua7S5Te2mBocp7anH3S5euKeKZrW9FXoXlrMwAhBrOgwq/DkySpa lxhaAnG8zzVXrzKwJyS6KygZJi3LMrAAn6qOvFhSKEHFnkoaag97nHEwxxM6PrvO rwOLRefWMNgxozxeIlZ03NeiXLONThh1CAai6q/vTuf+1SdufwNDfU4WJlRmVlxG Qan4PImiZS0kwbDr04GpHqB+wAlTqDbuzVHtSYZTxpoQ/IGT+QD3F/JUOFwRH1Vi Rg3cv+glDkZxddDWXcAR6554VXp/Uc2yKjgMZGaaxF9Iy5xNAGcPjmPemjPLFiUy 4ScMgGIWrlhKTQ7sLegOWbRmuu4opdH1 -----END CERTIFICATE-----Generated at Mon Oct 20 04:05:58 2025 by rpki-client