$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: 53w6PvHj1LVoejR/H2sNqTu8pM1LnmnZzNsiU0W3Vs0= Subject key identifier: 8A:C5:5E:8D:7D:0E:41:FB:3D:79:C8:D1:83:C4:24:38:CE:2D:BD:26 Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 050A Signing time: Sun 19 Oct 2025 01:24:43 +0000 Manifest this update: Sun 19 Oct 2025 01:24:42 +0000 Manifest next update: Sun 26 Oct 2025 01:24:42 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: h7nkLklATrp2DMbGy4QC6KT4/B0ZQHJldP/7t7u3FuE=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: cTO7dHRgQ10X2+wIM0WDWEXY+Ht/milaq+pShcIOrgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: Oct 19 01:24:42 2025 GMT Not After : Oct 26 01:24:42 2025 GMT Subject: CN=68f43ddb-834a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:59:c1:ee:09:a5:12:67:21:72:94:87:87: 6f:e2:46:0a:99:cb:56:85:f9:76:30:f1:ff:c2:07: a5:10:e5:16:b7:1f:1e:a7:74:3b:62:1c:2e:3e:37: c9:5c:7b:e6:f4:24:2b:e9:d1:3a:43:bd:fb:61:29: 1d:8e:1e:a0:17:17:ff:97:de:cd:ac:27:9b:e2:0f: 01:ad:a0:47:34:19:0d:da:51:d7:06:e9:b4:8c:2a: 06:6c:90:be:ab:55:5e:98:97:04:64:cb:45:d0:a5: 9f:07:bb:53:67:af:9c:06:47:77:f0:c9:a1:82:04: f6:0e:dd:e4:42:88:bb:35:7b:9c:22:77:34:9f:fb: 97:01:4b:0a:ba:a3:e9:8d:e3:ac:38:79:26:6d:95: 53:f8:62:33:21:ed:a4:16:19:93:aa:01:77:ed:9c: fd:5c:4d:53:33:7f:64:8b:27:a8:5f:29:e0:43:dc: 51:94:af:dd:60:ba:f5:fc:b9:14:30:c0:f8:06:30: 0f:7c:d7:70:8d:67:b0:65:d5:be:bb:ab:55:fa:08: 62:c5:72:0b:db:93:ae:58:74:72:04:95:44:7f:55: 4e:20:9c:58:6f:a6:83:5d:d9:ab:99:c8:e7:de:be: c0:92:3e:7a:9a:9f:39:2a:d4:a7:5d:f1:22:0f:20: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C5:5E:8D:7D:0E:41:FB:3D:79:C8:D1:83:C4:24:38:CE:2D:BD:26 X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:be:57:c8:70:1e:e9:9e:69:25:07:2e:7e:5d:2a:c7:73:bb: e6:2d:d7:22:68:f7:4a:7b:a1:b8:24:57:99:55:d8:9c:1d:d0: 1c:dd:bc:8c:01:de:41:49:42:20:05:60:ba:a6:55:3e:fa:f4: 3f:ff:1d:73:17:9c:86:c0:e4:76:9b:49:92:b0:36:8d:59:00: 86:bd:c6:b7:6c:3a:8d:c9:8e:4f:f8:22:69:9e:06:8f:9d:18: a2:0a:42:ad:cf:6e:7e:95:b2:f7:b6:27:19:47:1f:be:c9:08: 80:4f:bc:58:d7:e9:02:07:b9:38:86:c2:13:13:81:28:0e:dd: 27:68:88:f1:79:42:5d:41:ea:f1:fe:07:e9:64:f8:e8:fb:b0: c0:79:66:fe:f4:ee:c1:62:f8:e5:73:5d:dc:82:38:64:f8:ee: 6f:63:8f:94:f4:bf:f3:16:27:6d:88:67:a7:aa:ff:0e:92:22: 34:fc:47:85:25:2a:e3:9d:77:c5:82:a1:39:32:9f:28:80:88: 24:77:af:59:d0:90:a8:3e:d4:87:71:49:6d:55:16:89:cc:64: 80:b2:27:b7:ec:86:1f:a7:8b:06:41:2a:f2:92:bc:b2:6c:74: 61:df:44:87:25:f5:ec:fa:8a:d0:04:92:d3:75:1c:18:d7:67: d7:4c:c2:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjUxMDE5MDEyNDQyWhcNMjUxMDI2MDEyNDQyWjAYMRYwFAYD VQQDEw02OGY0M2RkYi04MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlydZwe4JpRJnIXKUh4dv4kYKmctWhfl2MPH/wgelEOUWtx8ep3Q7YhwuPjfJ XHvm9CQr6dE6Q737YSkdjh6gFxf/l97NrCeb4g8BraBHNBkN2lHXBum0jCoGbJC+ q1VemJcEZMtF0KWfB7tTZ6+cBkd38MmhggT2Dt3kQoi7NXucInc0n/uXAUsKuqPp jeOsOHkmbZVT+GIzIe2kFhmTqgF37Zz9XE1TM39kiyeoXyngQ9xRlK/dYLr1/LkU MMD4BjAPfNdwjWewZdW+u6tV+ghixXIL25OuWHRyBJVEf1VOIJxYb6aDXdmrmcjn 3r7Akj56mp85KtSnXfEiDyAbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrFXo19 DkH7PXnI0YPEJDjOLb0mMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDvlfIcB7pnmklBy5+XSrHc7vmLdciaPdKe6G4JFeZVdicHdAc3byM Ad5BSUIgBWC6plU++vQ//x1zF5yGwOR2m0mSsDaNWQCGvca3bDqNyY5P+CJpngaP nRiiCkKtz25+lbL3ticZRx++yQiAT7xY1+kCB7k4hsITE4EoDt0naIjxeUJdQerx /gfpZPjo+7DAeWb+9O7BYvjlc13cgjhk+O5vY4+U9L/zFidtiGenqv8OkiI0/EeF JSrjnXfFgqE5Mp8ogIgkd69Z0JCoPtSHcUltVRaJzGSAsie37IYfp4sGQSrykryy bHRh30SHJfXs+orQBJLTdRwY12fXTMLM -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:04 2025 by rpki-client