$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: 7pEh46PGVwKF6ZbpNA10PgF97rw9mDQvDTl11nk9mcw= Subject key identifier: 15:D6:1F:9D:9C:6D:C7:8E:3A:2C:6D:D3:BB:AC:9D:77:55:1A:E6:20 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 01D9 Signing time: Sun 19 Oct 2025 05:13:54 +0000 Manifest this update: Sun 19 Oct 2025 05:13:54 +0000 Manifest next update: Sun 26 Oct 2025 05:13:54 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: V+cUPeneoMfu8n/gDtAptgD3Du4kZufwjOQ9EH6pTbo=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Oct 19 05:13:54 2025 GMT Not After : Oct 26 05:13:54 2025 GMT Subject: CN=68f47392-aa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e9:fb:47:4a:1e:fc:1a:ca:a5:b1:65:60:f3: df:79:82:14:a9:2a:ce:5e:eb:b8:53:95:1f:a2:c8: fa:27:80:e9:2c:4e:b5:22:96:61:6b:86:73:a6:2b: 28:bb:78:82:5a:34:79:e2:ae:ea:44:d0:82:61:07: ae:74:e8:e5:80:19:15:f1:06:c2:00:d2:f9:30:96: 41:ae:e6:12:6e:89:11:e8:2b:c9:f9:44:fd:9d:98: d4:c0:b1:fc:80:3d:88:85:6a:21:d6:31:4f:ba:92: 47:19:68:4e:69:0d:36:8b:aa:d5:89:c8:f6:9e:81: 9f:aa:29:3d:30:29:d0:98:9c:0b:60:38:55:f5:48: 45:f4:2c:8c:fb:f0:4e:c7:5f:be:71:02:88:f3:03: ef:59:fe:11:ee:56:59:e5:93:03:a2:2c:c0:f9:41: 12:9a:bd:03:40:7d:d4:7a:08:8f:30:64:a2:6d:a2: 0b:ed:c8:b6:e4:1e:2e:b2:6b:3a:81:ae:e0:45:9a: 03:df:31:80:dc:4e:09:ac:06:4f:8c:e1:4b:5a:26: 42:2e:bc:00:42:64:4e:3a:e8:93:6f:c5:fb:94:5b: 18:24:53:2e:98:28:c6:1e:44:bf:d8:ef:4b:30:ec: 65:5e:22:cf:8a:0f:2b:ae:3c:4b:ae:17:61:55:e1: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D6:1F:9D:9C:6D:C7:8E:3A:2C:6D:D3:BB:AC:9D:77:55:1A:E6:20 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ff:6c:9f:52:9a:6b:3a:b0:6e:70:e0:db:37:f9:1c:d4:a5: 11:94:01:0c:08:69:4e:a0:1a:24:1e:52:a7:c2:ba:f8:f2:14: 50:62:70:ca:69:96:19:d4:5a:11:05:8a:ec:89:17:8c:35:86: 0b:80:ca:d6:21:22:f9:39:b7:8c:20:f5:c4:2d:21:83:2d:a3: aa:8c:8f:d9:6e:a8:a9:45:60:18:18:fe:9a:ae:c8:bf:45:76: b9:8b:bf:cd:3e:93:ae:b4:8f:30:90:dd:26:ef:53:d9:9b:29: d9:53:12:ea:18:7f:3c:e6:8b:13:25:52:15:dc:b0:73:0f:50: dc:79:57:8a:3b:fd:64:01:e8:7d:8a:bf:d8:0b:62:c9:61:b3: c5:58:02:3a:2c:ec:e5:e7:d5:01:fc:b3:f0:94:c6:2d:81:81: 25:e3:92:8e:82:46:8e:32:6b:62:18:63:c9:6a:21:b6:25:bd: 09:9f:1c:e1:9a:a4:0f:02:d4:be:a7:ad:d2:ce:4a:1e:de:03: 97:02:ac:04:79:86:e8:83:22:12:17:98:2e:b9:b1:57:48:6a: 88:20:20:8f:7a:88:44:e9:c3:b2:57:43:6a:6d:45:d5:04:ff: 53:c1:ed:a4:7c:4e:32:6d:9e:1c:70:91:68:ef:84:cb:cb:0e: ff:a1:44:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjUxMDE5MDUxMzU0WhcNMjUxMDI2MDUxMzU0WjAYMRYwFAYD VQQDEw02OGY0NzM5Mi1hYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5en7R0oe/BrKpbFlYPPfeYIUqSrOXuu4U5Ufosj6J4DpLE61IpZha4Zzpiso u3iCWjR54q7qRNCCYQeudOjlgBkV8QbCANL5MJZBruYSbokR6CvJ+UT9nZjUwLH8 gD2IhWoh1jFPupJHGWhOaQ02i6rVicj2noGfqik9MCnQmJwLYDhV9UhF9CyM+/BO x1++cQKI8wPvWf4R7lZZ5ZMDoizA+UESmr0DQH3UegiPMGSibaIL7ci25B4usms6 ga7gRZoD3zGA3E4JrAZPjOFLWiZCLrwAQmROOuiTb8X7lFsYJFMumCjGHkS/2O9L MOxlXiLPig8rrjxLrhdhVeFG5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXWH52c bceOOixt07usnXdVGuYgMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR/2yfUpprOrBucODbN/kc1KURlAEMCGlOoBokHlKnwrr48hRQYnDK aZYZ1FoRBYrsiReMNYYLgMrWISL5ObeMIPXELSGDLaOqjI/ZbqipRWAYGP6arsi/ RXa5i7/NPpOutI8wkN0m71PZmynZUxLqGH885osTJVIV3LBzD1DceVeKO/1kAeh9 ir/YC2LJYbPFWAI6LOzl59UB/LPwlMYtgYEl45KOgkaOMmtiGGPJaiG2Jb0Jnxzh mqQPAtS+p63Szkoe3gOXAqwEeYbogyISF5guubFXSGqIICCPeohE6cOyV0NqbUXV BP9Twe2kfE4ybZ4ccJFo74TLyw7/oURY -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:32 2025 by rpki-client