$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: 9WBSrJz9kPiL+x+h2fzjIoBpnxhD9TsCkMOFPA/ovs0= Subject key identifier: C9:0E:48:77:71:84:1E:D4:4A:90:74:EC:D3:18:E2:07:1E:2A:B3:C0 Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 34F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 34E1 Signing time: Sat 18 Oct 2025 14:56:03 +0000 Manifest this update: Sat 18 Oct 2025 14:56:02 +0000 Manifest next update: Sat 25 Oct 2025 14:56:02 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: aZRRAwfU1OFnmmkek2NYyfs1cfgHLl5RwywcdPWW6r4=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Oct 18 14:56:02 2025 GMT Not After : Oct 25 14:56:02 2025 GMT Subject: CN=68f3aa82-2de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:c4:9f:46:39:2f:32:df:89:4b:6d:f2:d3: 5d:70:64:17:b3:92:d5:7c:cc:8d:10:17:10:01:06: 97:bb:46:cc:fd:f5:80:98:26:c2:44:8e:bb:8c:a5: 21:86:7c:15:53:f9:0d:99:bc:13:f4:8d:40:d3:d5: 64:2a:43:06:c7:bc:6f:39:38:43:58:dd:f8:f0:70: 88:bc:16:a6:d2:b5:66:61:ae:42:25:09:fd:ed:55: 7b:79:13:3f:57:38:b4:16:31:58:f9:ad:24:e4:f7: 4d:06:7c:65:14:ba:6f:cb:bf:d1:4f:4e:04:a2:f5: f5:ee:e5:b7:d8:91:19:ba:cf:27:ec:02:53:7f:fd: e0:24:4f:25:28:e9:1e:14:b7:b8:2d:a0:4f:49:44: f8:1f:51:18:3d:37:41:42:dd:e9:f4:ff:49:e1:fe: 78:c6:e2:31:2b:6d:e5:ac:f8:a8:84:6b:30:62:2e: 7c:95:1e:0f:12:2a:65:b9:dd:c7:b5:c4:a3:25:35: 98:22:ac:6b:4b:15:86:dd:5a:45:37:c2:9b:19:d2: 60:48:cf:62:1e:4a:2c:b8:fc:1b:5c:b8:84:62:f1: af:6e:0b:85:78:69:8c:2c:98:ba:b4:75:a1:5b:31: d8:5e:f0:eb:fa:14:b2:45:df:76:b1:99:4c:f4:5d: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:48:77:71:84:1E:D4:4A:90:74:EC:D3:18:E2:07:1E:2A:B3:C0 X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f6:0b:f5:46:86:44:7c:6e:76:c8:2d:2a:73:23:80:9a:40: e0:cc:6a:34:dc:08:b7:79:90:f3:6f:e0:ee:1e:85:05:0b:d9: ea:6b:11:07:2f:57:de:88:cf:89:38:4a:65:cc:59:84:1f:a4: bf:70:73:c6:92:89:a8:24:52:a9:d0:38:14:e8:07:66:99:e5: 2f:06:71:0d:08:9b:f0:d9:75:b1:2f:49:af:a1:8f:89:b0:62: f7:11:a9:dc:73:f0:9e:53:3f:f9:82:a6:b1:40:20:4f:f4:39: 3d:3d:d1:a5:5f:8e:f1:76:28:67:bc:0d:e0:64:f1:80:59:7f: b3:44:f2:29:39:5e:72:c3:64:a4:f2:c6:5b:14:3f:c2:3b:eb: ac:70:d9:c7:3a:ce:47:76:47:22:03:34:cc:93:50:83:ce:07: af:b0:c7:5e:3b:b5:bf:3b:dc:ab:ce:58:84:ac:b2:ec:32:2b: ac:9d:8c:75:eb:43:a7:89:2a:b3:1d:2a:28:09:39:3e:f6:c0: 83:00:0f:0a:66:50:4c:e6:8a:24:78:44:7a:9a:21:c9:3e:ab: 43:ba:8b:a9:45:3f:53:fb:d6:43:6d:42:26:aa:47:13:63:4e: 3a:ac:9e:fb:a3:39:3e:9f:5b:11:a5:91:7c:7c:e0:42:da:26: 2a:9a:80:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUxMDE4MTQ1NjAyWhcNMjUxMDI1MTQ1NjAyWjAYMRYwFAYD VQQDEw02OGYzYWE4Mi0yZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxDEn0Y5LzLfiUtt8tNdcGQXs5LVfMyNEBcQAQaXu0bM/fWAmCbCRI67jKUh hnwVU/kNmbwT9I1A09VkKkMGx7xvOThDWN348HCIvBam0rVmYa5CJQn97VV7eRM/ Vzi0FjFY+a0k5PdNBnxlFLpvy7/RT04EovX17uW32JEZus8n7AJTf/3gJE8lKOke FLe4LaBPSUT4H1EYPTdBQt3p9P9J4f54xuIxK23lrPiohGswYi58lR4PEiplud3H tcSjJTWYIqxrSxWG3VpFN8KbGdJgSM9iHkosuPwbXLiEYvGvbguFeGmMLJi6tHWh WzHYXvDr+hSyRd92sZlM9F1tZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkOSHdx hB7USpB07NMY4gceKrPAMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL9gv1RoZEfG52yC0qcyOAmkDgzGo03Ai3eZDzb+DuHoUFC9nqaxEH L1feiM+JOEplzFmEH6S/cHPGkomoJFKp0DgU6AdmmeUvBnENCJvw2XWxL0mvoY+J sGL3Eancc/CeUz/5gqaxQCBP9Dk9PdGlX47xdihnvA3gZPGAWX+zRPIpOV5yw2Sk 8sZbFD/CO+uscNnHOs5HdkciAzTMk1CDzgevsMdeO7W/O9yrzliErLLsMiusnYx1 60OniSqzHSooCTk+9sCDAA8KZlBM5ookeER6miHJPqtDuoupRT9T+9ZDbUImqkcT Y046rJ77ozk+n1sRpZF8fOBC2iYqmoBl -----END CERTIFICATE-----Generated at Mon Oct 20 15:08:51 2025 by rpki-client