$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: fWyiN84LH09CAbLFiMwTjqy5Zkr2e3NowZvHK1Vo8MQ= Subject key identifier: A6:83:51:26:0C:18:DC:19:F8:30:9E:A9:86:8B:DD:78:6C:35:06:A7 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 0152 Signing time: Sun 19 Oct 2025 06:58:45 +0000 Manifest this update: Sun 19 Oct 2025 06:58:44 +0000 Manifest next update: Sun 26 Oct 2025 06:58:44 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: EFkJm8EkpPaIz2dqSyGSONuPldqRjDjYEDFlpMIt3lY=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Oct 19 06:58:44 2025 GMT Not After : Oct 26 06:58:44 2025 GMT Subject: CN=68f48c25-4b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:e9:0f:d9:40:57:a2:9a:43:db:5c:b6:0b: de:1a:84:1e:cb:17:15:6e:ce:5f:e0:14:73:f1:2f: 7f:ce:ba:75:80:27:43:5a:85:a5:c5:20:31:3e:12: 65:77:ef:80:eb:c4:25:e2:5a:e6:38:da:1a:4f:ab: f0:0c:7f:0e:d2:b4:be:70:7c:48:a0:87:97:02:00: b6:b5:71:25:e1:cb:4d:b5:29:73:e7:7e:90:54:d7: e0:2c:1f:67:5f:db:91:3c:c6:cd:c0:80:74:e3:16: 43:62:68:a4:bc:ae:2c:b8:a2:a9:68:b9:68:63:aa: 2f:fc:83:c7:1a:35:02:90:61:78:10:a0:11:56:37: 23:c6:de:a9:bd:13:e5:e5:16:0f:38:bb:22:7d:7a: 0e:36:28:4c:59:22:f8:68:4f:02:cd:42:af:0c:7d: a2:82:ae:2c:98:9b:4d:04:cb:ef:74:aa:e3:17:2d: 17:a5:2c:fe:b8:0e:21:71:5b:b6:b9:1d:c8:6a:aa: 49:d9:fe:65:ed:77:df:52:e0:80:ab:b8:74:ec:8d: ce:c2:86:9e:0d:f9:14:35:ca:49:eb:68:77:6f:40: 08:e0:3f:8b:ff:96:c6:25:bd:41:48:f3:39:88:f9: e9:f4:ab:e4:b7:48:8c:68:2d:bf:1e:25:0e:f3:b7: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:83:51:26:0C:18:DC:19:F8:30:9E:A9:86:8B:DD:78:6C:35:06:A7 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:10:8d:e1:96:fa:64:a4:0b:35:9d:58:b0:0d:72:ae:fb:09: e7:16:79:99:67:b6:b4:2a:1a:10:0b:c0:f5:3c:dc:06:39:cf: c9:3c:53:2a:89:95:f7:c9:bb:e1:04:03:c3:76:81:27:a3:11: 8b:e2:10:d4:e0:d8:ba:50:a7:6f:47:eb:79:09:3e:d0:35:07: 77:78:81:15:ee:bf:03:5e:73:f1:ea:de:69:b9:b5:55:f8:8c: 1a:97:fe:aa:0d:9f:84:94:c6:b2:b7:2e:59:d4:55:55:ae:ba: f0:10:13:c0:ac:b1:12:64:7b:7e:ad:e2:c0:c7:ef:af:38:2a: 13:bd:e7:60:b3:b7:6f:2c:f0:9e:3f:17:c1:65:4c:6a:d9:f7: 5b:cb:89:0b:36:bc:14:1b:64:f7:6a:1e:2f:64:a2:8a:c4:10: ec:3e:67:18:c5:77:be:b8:8e:fb:17:cc:c5:98:2a:c9:32:21: 48:7a:47:6f:f0:4a:7e:d4:ae:ad:ec:6f:fa:ad:ee:09:11:49: ee:e3:59:03:f4:24:52:c0:6e:f0:9c:aa:95:71:68:31:b4:fb: e4:8b:c7:49:e0:07:90:8c:e7:e8:91:75:38:78:39:70:19:16: 50:d2:88:83:d3:76:c9:a3:a3:14:a2:90:b9:37:1d:3a:fc:53: d1:a7:ef:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUxMDE5MDY1ODQ0WhcNMjUxMDI2MDY1ODQ0WjAYMRYwFAYD VQQDEw02OGY0OGMyNS00YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWrpD9lAV6KaQ9tctgveGoQeyxcVbs5f4BRz8S9/zrp1gCdDWoWlxSAxPhJl d++A68Ql4lrmONoaT6vwDH8O0rS+cHxIoIeXAgC2tXEl4ctNtSlz536QVNfgLB9n X9uRPMbNwIB04xZDYmikvK4suKKpaLloY6ov/IPHGjUCkGF4EKARVjcjxt6pvRPl 5RYPOLsifXoONihMWSL4aE8CzUKvDH2igq4smJtNBMvvdKrjFy0XpSz+uA4hcVu2 uR3IaqpJ2f5l7XffUuCAq7h07I3OwoaeDfkUNcpJ62h3b0AI4D+L/5bGJb1BSPM5 iPnp9Kvkt0iMaC2/HiUO87eUqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaDUSYM GNwZ+DCeqYaL3XhsNQanMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPEI3hlvpkpAs1nViwDXKu+wnnFnmZZ7a0KhoQC8D1PNwGOc/JPFMq iZX3ybvhBAPDdoEnoxGL4hDU4Ni6UKdvR+t5CT7QNQd3eIEV7r8DXnPx6t5pubVV +Iwal/6qDZ+ElMayty5Z1FVVrrrwEBPArLESZHt+reLAx++vOCoTvedgs7dvLPCe PxfBZUxq2fdby4kLNrwUG2T3ah4vZKKKxBDsPmcYxXe+uI77F8zFmCrJMiFIekdv 8Ep+1K6t7G/6re4JEUnu41kD9CRSwG7wnKqVcWgxtPvki8dJ4AeQjOfokXU4eDlw GRZQ0oiD03bJo6MUopC5Nx06/FPRp++v -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:35 2025 by rpki-client