$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: V7rYmvATNVi65R4RGkmYSCVi59SkOsftwIQKP1MZbNw= Subject key identifier: 9E:A7:7F:F5:B6:A0:B1:DA:13:5C:B7:B2:55:4A:2B:9B:E7:81:17:6E Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 04CC Signing time: Sun 19 Oct 2025 01:40:34 +0000 Manifest this update: Sun 19 Oct 2025 01:40:34 +0000 Manifest next update: Sun 26 Oct 2025 01:40:34 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: K/MYDOMzWlZVVPtMwUtJlwqE2JNDrdeceTnkXMM0YYs=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Oct 19 01:40:34 2025 GMT Not After : Oct 26 01:40:34 2025 GMT Subject: CN=68f44192-1ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:d2:d0:55:e8:16:6e:ef:7e:81:0c:ae:86: d4:a1:38:f1:d7:bc:38:16:62:b2:c2:c2:a5:68:6d: 23:93:1e:2e:7a:99:ef:88:b4:e2:09:3b:5f:9d:26: 07:b8:de:96:45:92:23:8a:44:2a:1d:c3:94:55:4d: 05:cb:a9:6c:72:c2:0d:42:ae:f4:41:01:2e:a5:ec: 54:4d:ac:ca:92:a5:14:18:ce:06:9d:d6:29:08:7c: 47:48:1c:cd:48:e3:25:93:1a:c5:fe:c5:a5:e4:a3: c5:0f:d2:9a:43:1d:b1:90:f6:a9:a6:e8:69:cc:8f: 6a:a0:4e:70:6e:2e:04:b6:d2:cc:25:03:e3:45:52: 61:e5:3b:04:b1:97:5a:c6:6f:4a:b3:3c:02:8e:f5: 70:a9:d5:f5:b4:c1:1a:2f:33:d9:84:be:15:f0:1c: 16:9c:76:de:69:8c:19:f4:dc:da:61:bc:3f:b5:dc: 70:bd:68:f2:27:d1:90:13:2b:2a:2c:41:e3:ea:66: 87:76:bd:22:b8:4b:7b:41:1f:59:15:ef:f6:fc:26: 97:df:b4:d0:3d:54:a7:cf:d4:f7:19:fb:8a:32:e7: eb:bc:4c:e8:3d:65:97:1f:dc:0f:28:2f:af:e1:ec: 29:51:86:b3:6d:e1:63:5e:49:6b:92:34:a9:d3:2e: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A7:7F:F5:B6:A0:B1:DA:13:5C:B7:B2:55:4A:2B:9B:E7:81:17:6E X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a5:de:d8:f0:32:52:76:ef:fe:4c:45:c7:2d:79:f0:a3:3c: 07:6d:3b:1d:db:c2:2d:41:b9:b7:d8:06:c0:59:f7:9e:ff:8f: b9:e8:98:e6:02:d3:95:59:a3:13:4e:a9:a6:5d:5d:b9:22:81: f0:f8:8c:f3:1b:d2:36:6a:f5:97:90:7f:a0:bb:a9:03:15:7f: f2:33:c0:f3:fd:d1:04:9e:cc:65:c2:be:c3:89:3e:08:23:ff: 7d:29:ae:83:86:90:87:14:f3:f4:a4:af:0c:f8:d1:49:5b:f2: cb:64:5a:25:7f:0b:10:9f:2e:ec:0d:da:48:33:9e:71:71:7f: c9:fd:6e:ae:50:61:51:9a:21:6d:b1:59:d3:d4:49:18:67:c6: ce:61:b6:e5:e5:27:22:56:95:6e:58:f6:e7:54:bd:43:41:20: af:d0:9a:7d:3e:6d:6a:c2:2b:e5:9c:72:50:d3:f7:36:a2:20: 85:58:97:cf:02:47:f6:5d:19:b2:dd:fa:3b:ba:fd:36:26:e4: aa:6b:79:64:d3:74:ba:5a:23:21:ae:30:f5:66:2d:ca:aa:b5: d7:22:27:f7:9a:70:40:82:51:3b:96:7c:02:75:c4:b7:57:f7: 0b:0f:a1:bc:54:ba:10:3a:b9:43:1d:f5:3f:5e:6d:3a:51:61: b3:0a:47:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUxMDE5MDE0MDM0WhcNMjUxMDI2MDE0MDM0WjAYMRYwFAYD VQQDEw02OGY0NDE5Mi0xZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KXS0FXoFm7vfoEMrobUoTjx17w4FmKywsKlaG0jkx4uepnviLTiCTtfnSYH uN6WRZIjikQqHcOUVU0Fy6lscsINQq70QQEupexUTazKkqUUGM4GndYpCHxHSBzN SOMlkxrF/sWl5KPFD9KaQx2xkPappuhpzI9qoE5wbi4EttLMJQPjRVJh5TsEsZda xm9KszwCjvVwqdX1tMEaLzPZhL4V8BwWnHbeaYwZ9NzaYbw/tdxwvWjyJ9GQEysq LEHj6maHdr0iuEt7QR9ZFe/2/CaX37TQPVSnz9T3GfuKMufrvEzoPWWXH9wPKC+v 4ewpUYazbeFjXklrkjSp0y4lrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6nf/W2 oLHaE1y3slVKK5vngRduMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+pd7Y8DJSdu/+TEXHLXnwozwHbTsd28ItQbm32AbAWfee/4+56Jjm AtOVWaMTTqmmXV25IoHw+IzzG9I2avWXkH+gu6kDFX/yM8Dz/dEEnsxlwr7DiT4I I/99Ka6DhpCHFPP0pK8M+NFJW/LLZFolfwsQny7sDdpIM55xcX/J/W6uUGFRmiFt sVnT1EkYZ8bOYbbl5SciVpVuWPbnVL1DQSCv0Jp9Pm1qwivlnHJQ0/c2oiCFWJfP Akf2XRmy3fo7uv02JuSqa3lk03S6WiMhrjD1Zi3KqrXXIif3mnBAglE7lnwCdcS3 V/cLD6G8VLoQOrlDHfU/Xm06UWGzCkdt -----END CERTIFICATE-----Generated at Tue Oct 21 02:01:59 2025 by rpki-client