$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: hDSlWZgs9KB94q2C4P2CPoZtX9mZqrAI27S/PxmY6UM= Subject key identifier: 7A:13:08:CB:77:6E:0A:26:F9:82:F3:E5:C6:DF:AF:7E:82:84:B1:F8 Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 51 Signing time: Sun 19 Oct 2025 10:37:51 +0000 Manifest this update: Sun 19 Oct 2025 10:37:51 +0000 Manifest next update: Sun 26 Oct 2025 10:37:51 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: uUkigSJjuoP/DspsuCKDaNOQUZLpPQCIH0ORTcriMcs=) 2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Oct 19 10:37:51 2025 GMT Not After : Oct 26 10:37:51 2025 GMT Subject: CN=68f4bf7f-c123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:84:c1:2f:1d:66:99:23:30:4f:e5:1d:5a: 5a:4e:17:85:af:92:b7:61:94:73:4d:42:d2:31:65: 48:03:9b:08:e1:8e:45:e9:84:38:bb:b7:96:53:7d: 0f:ee:af:82:a3:b9:59:36:ed:a2:4d:20:19:21:e7: cb:16:95:91:a6:b8:77:3d:71:96:7e:65:1b:a9:9c: 0c:36:98:3b:99:47:a1:24:df:6b:38:a3:e6:bf:2e: 09:9a:08:94:6d:d0:1a:fa:7b:d4:c9:57:6d:4f:a3: 90:22:2d:5d:fe:6d:c2:25:c0:3f:1c:19:ba:c2:7d: bd:85:60:f3:15:7c:39:a8:11:55:a0:54:1f:c5:ea: 79:a5:31:90:f8:02:3b:ee:4e:e7:5f:c1:09:63:58: ee:12:99:68:cb:8c:95:db:72:e2:04:7f:3a:84:c4: a8:5a:96:57:40:77:f3:7c:7e:29:10:75:fa:1f:c5: e3:b3:15:d4:7a:b5:68:4d:12:f9:5a:54:f3:cf:bb: 18:34:68:08:6d:20:02:19:9a:6d:2d:6b:ac:85:72: f7:ba:a5:e6:62:4b:f8:ff:31:29:16:e2:6e:ec:16: f1:e8:23:e6:28:c5:62:7e:f8:ac:d5:c8:c0:d4:f6: 27:ee:ea:75:b0:19:c1:e2:11:aa:0f:d7:0d:cd:93: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:13:08:CB:77:6E:0A:26:F9:82:F3:E5:C6:DF:AF:7E:82:84:B1:F8 X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:1d:fb:c4:28:0d:e7:21:e3:7f:4c:45:66:7d:01:8e:92:24: 03:5d:f1:1c:06:f5:75:90:4b:8f:b4:18:ca:f2:8e:b6:55:ac: aa:af:a7:20:23:d2:3d:98:39:3d:41:17:ab:bf:e0:b5:99:2c: a7:ed:03:4f:e8:59:03:d0:43:1f:c8:26:e5:6c:ad:c3:4c:14: 03:d3:e4:9a:45:12:d9:7a:5b:d5:4c:16:47:64:f0:12:b7:4f: 12:53:c4:27:7a:dd:14:ef:93:fc:8c:a6:ab:82:28:6e:64:a1: 1d:c2:1f:7a:00:dc:99:e5:f0:d1:f0:ec:cb:33:ae:82:1f:fa: 8a:a9:90:f3:73:89:3c:2a:98:38:21:f4:1a:f4:b6:85:12:2b: 5b:d6:01:95:aa:08:e9:c1:24:2d:e2:43:eb:74:87:f0:fa:9b: 9b:fc:0e:35:c6:ea:e7:df:0b:1e:7d:3b:d3:d4:a3:63:8b:b5: 2a:7d:84:fc:6f:5e:f5:74:13:0d:6b:e6:cc:e2:88:a7:0b:5f: ae:c8:a4:08:c1:8a:c4:0a:51:ad:96:27:d2:19:d6:15:d1:e5: 2d:4e:04:69:93:06:01:45:f3:18:65:ef:77:ae:0e:63:23:e6: 6b:f8:13:08:a9:92:f7:95:3b:e1:11:38:bd:a8:6d:a4:e9:a9: 77:72:68:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTEwMTkxMDM3NTFaFw0yNTEwMjYxMDM3NTFaMBgxFjAUBgNV BAMTDTY4ZjRiZjdmLWMxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvToTBLx1mmSMwT+UdWlpOF4WvkrdhlHNNQtIxZUgDmwjhjkXphDi7t5ZTfQ/u r4KjuVk27aJNIBkh58sWlZGmuHc9cZZ+ZRupnAw2mDuZR6Ek32s4o+a/LgmaCJRt 0Br6e9TJV21Po5AiLV3+bcIlwD8cGbrCfb2FYPMVfDmoEVWgVB/F6nmlMZD4Ajvu TudfwQljWO4SmWjLjJXbcuIEfzqExKhalldAd/N8fikQdfofxeOzFdR6tWhNEvla VPPPuxg0aAhtIAIZmm0ta6yFcve6peZiS/j/MSkW4m7sFvHoI+YoxWJ++KzVyMDU 9ifu6nWwGcHiEaoP1w3Nk1tzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUehMIy3du Cib5gvPlxt+vfoKEsfgwHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 REQ5L0EzODdDRjhFMkZEMjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9w UW1HMFJxOHR6NFBWUVdQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQd+8QoDech439MRWZ9AY6SJANd8RwG9XWQS4+0GMryjrZVrKqvpyAj 0j2YOT1BF6u/4LWZLKftA0/oWQPQQx/IJuVsrcNMFAPT5JpFEtl6W9VMFkdk8BK3 TxJTxCd63RTvk/yMpquCKG5koR3CH3oA3Jnl8NHw7MszroIf+oqpkPNziTwqmDgh 9Br0toUSK1vWAZWqCOnBJC3iQ+t0h/D6m5v8DjXG6uffCx59O9PUo2OLtSp9hPxv XvV0Ew1r5sziiKcLX67IpAjBisQKUa2WJ9IZ1hXR5S1OBGmTBgFF8xhl73euDmMj 5mv4EwipkveVO+EROL2obaTpqXdyaDI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:04 2025 by rpki-client