$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: Uewk3M87OihqBZGntRGznFqJNZnMMijtBGlwh2pJSeE= Subject key identifier: 29:07:29:16:BE:9C:C1:88:26:F0:7D:36:0B:FA:B3:CE:21:AC:B7:FF Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 0836 Signing time: Sat 18 Oct 2025 22:03:24 +0000 Manifest this update: Sat 18 Oct 2025 22:03:23 +0000 Manifest next update: Sat 25 Oct 2025 22:03:23 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: Mi3Xbu47A0USzrzWFuzskCuj/VM+da46OoOf+ECGEwc=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 1QBFWULUSDuABI4M5A9+pwghN2xnBCwM1ByVsOf4OoA=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) 7: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Oct 18 22:03:23 2025 GMT Not After : Oct 25 22:03:23 2025 GMT Subject: CN=68f40eac-9e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:67:c5:97:d6:e5:63:5e:35:61:e0:d9:93: 6a:44:21:f0:d8:40:8e:49:d0:fb:6c:8e:24:94:fe: 63:26:05:64:84:c6:81:14:87:a3:ed:3a:37:28:af: a8:59:7e:cc:e3:b5:20:55:3d:8c:db:85:09:d7:7d: 26:6e:8a:51:78:22:c3:d9:d5:20:4a:eb:10:78:58: a0:b1:3e:cb:b7:9e:7a:d7:b4:7e:33:1d:a6:a4:7c: 35:3c:a2:3b:d6:0d:a3:58:20:f1:44:44:af:2c:80: b6:89:63:44:4c:7f:bf:9b:8d:ef:51:44:39:e3:65: 2c:4d:6f:20:3f:78:09:4f:3d:72:54:02:bb:4c:42: d0:62:50:22:59:ea:9c:2e:55:54:9d:d6:a1:e7:4d: ec:f1:83:93:7c:32:5b:36:1b:68:15:64:31:39:40: f4:f7:a2:b9:78:5e:0c:ba:fc:a6:a4:55:49:18:9e: 9f:35:3c:1c:97:a5:b3:bf:ad:3d:2a:d7:84:14:de: f8:10:3f:29:80:9e:ad:85:83:07:59:13:1e:3c:af: bb:18:22:d8:77:71:e5:1b:50:c4:f5:72:a9:dc:5e: 50:40:1b:f0:cc:30:3a:ba:d4:60:0a:3f:18:b3:6e: 82:90:df:78:46:74:c2:1d:0b:2e:80:7a:e5:1a:e2: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:07:29:16:BE:9C:C1:88:26:F0:7D:36:0B:FA:B3:CE:21:AC:B7:FF X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:98:de:bf:bb:62:7c:2b:5c:2d:aa:68:20:d0:1f:98:80:9b: 9a:ce:08:2b:50:40:a1:25:31:d9:3a:f0:48:13:e2:db:75:af: 34:2b:2c:d8:ea:fc:f2:53:92:ef:d9:a6:74:b3:bf:fd:a9:87: 85:e1:1a:5b:b7:1b:aa:27:4f:0f:69:62:d0:80:6d:71:3a:69: 0d:50:81:57:e9:2f:d0:4c:26:cf:9e:2d:0c:36:0e:33:85:98: 69:38:a0:23:9c:65:f4:05:18:73:e8:93:23:8f:cd:15:76:d9: 64:95:bf:a3:9b:65:f8:eb:20:1e:45:6d:a1:ac:55:a0:a7:cf: 26:df:1e:c2:ad:80:06:cd:d2:59:93:38:a5:d2:2c:15:ef:37: 1e:3c:7b:bc:db:e1:ef:9d:9e:17:60:4c:b9:c7:44:40:38:87: 6c:a7:34:1f:65:4b:4e:8d:c4:cc:eb:2d:cf:48:cf:fe:58:31: 1b:94:15:0d:db:10:d1:f7:f4:1d:af:50:c8:7a:ea:dc:49:94: 70:0f:30:06:5f:1e:50:41:83:38:16:95:8e:06:57:56:fa:6b: 66:96:7c:2e:1b:0e:ed:92:a2:a7:e2:91:1b:a2:37:18:39:4f: 18:73:21:d7:0f:08:30:a7:d4:45:43:1b:97:cb:90:10:c2:83: 3c:93:ee:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUxMDE4MjIwMzIzWhcNMjUxMDI1MjIwMzIzWjAYMRYwFAYD VQQDEw02OGY0MGVhYy05ZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR9nxZfW5WNeNWHg2ZNqRCHw2ECOSdD7bI4klP5jJgVkhMaBFIej7To3KK+o WX7M47UgVT2M24UJ130mbopReCLD2dUgSusQeFigsT7Lt55617R+Mx2mpHw1PKI7 1g2jWCDxRESvLIC2iWNETH+/m43vUUQ542UsTW8gP3gJTz1yVAK7TELQYlAiWeqc LlVUndah503s8YOTfDJbNhtoFWQxOUD096K5eF4MuvympFVJGJ6fNTwcl6Wzv609 KteEFN74ED8pgJ6thYMHWRMePK+7GCLYd3HlG1DE9XKp3F5QQBvwzDA6utRgCj8Y s26CkN94RnTCHQsugHrlGuKbxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkHKRa+ nMGIJvB9Ngv6s84hrLf/MB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYmN6/u2J8K1wtqmgg0B+YgJuazggrUEChJTHZOvBIE+Lbda80KyzY 6vzyU5Lv2aZ0s7/9qYeF4RpbtxuqJ08PaWLQgG1xOmkNUIFX6S/QTCbPni0MNg4z hZhpOKAjnGX0BRhz6JMjj80Vdtlklb+jm2X46yAeRW2hrFWgp88m3x7CrYAGzdJZ kzil0iwV7zcePHu82+HvnZ4XYEy5x0RAOIdspzQfZUtOjcTM6y3PSM/+WDEblBUN 2xDR9/Qdr1DIeurcSZRwDzAGXx5QQYM4FpWOBldW+mtmlnwuGw7tkqKn4pEbojcY OU8YcyHXDwgwp9RFQxuXy5AQwoM8k+6y -----END CERTIFICATE-----Generated at Mon Oct 20 07:58:57 2025 by rpki-client