$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: WKtEKh9hZKkSZNeo5GmX4DDj2UlUjb1qnNqp3HXa/BI= Subject key identifier: BD:6F:BD:55:64:19:CF:A0:6F:98:EB:14:52:ED:AF:37:2E:5B:72:2C Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 0226 Signing time: Sun 19 Oct 2025 04:17:14 +0000 Manifest this update: Sun 19 Oct 2025 04:17:13 +0000 Manifest next update: Sun 26 Oct 2025 04:17:13 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: 8NH6gPQTLQGe+IYESqEuBXDOsXfetsxtsxbirqSk1Kw=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: 3BIidzXw3SbxxirE9B5rO+NW6ewizhq6UX39Bo2kTKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Oct 19 04:17:13 2025 GMT Not After : Oct 26 04:17:13 2025 GMT Subject: CN=68f4664a-1c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:bc:92:0e:c2:5e:a2:0c:09:e7:93:f4:2c: 90:3e:2f:1f:a3:6d:7c:a4:4d:a9:21:75:87:93:e1: 5e:f0:ca:99:09:94:3f:02:c3:ae:7f:38:fb:09:c1: c2:bb:e8:c9:e6:10:36:44:72:8f:7c:b6:a2:d0:4c: 55:5b:48:47:b2:83:94:b6:de:97:51:f0:bc:97:8c: e1:6f:71:71:7a:60:46:ac:0a:26:cb:66:cb:09:f0: cb:2c:c0:30:a7:ea:27:f8:b5:d3:6d:05:94:1e:15: 07:c2:85:33:ae:98:68:aa:de:98:4c:4d:c4:c9:dc: 7c:ae:48:72:ec:3d:60:70:1e:ef:03:e3:23:04:4e: a2:86:31:e7:d7:de:f8:55:03:d4:d3:96:e7:33:28: b9:e6:85:fc:a9:f8:f0:e4:bf:7a:b8:2c:6d:59:1d: dd:26:78:a1:45:f7:35:4a:77:f0:c0:34:90:e4:9c: 5c:a9:40:b9:6e:d5:24:73:4a:67:f6:ca:1a:74:40: f1:86:fb:75:2b:9e:f9:4a:61:40:d2:01:5a:a5:39: cc:a8:dd:e8:a4:38:d7:91:7c:2a:73:59:9d:0c:91: 2c:1d:ce:a8:19:5c:e1:c7:99:3d:b6:07:79:1d:fd: ec:13:11:8c:4a:b1:ad:5c:b7:fd:00:3b:98:32:b4: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6F:BD:55:64:19:CF:A0:6F:98:EB:14:52:ED:AF:37:2E:5B:72:2C X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:64:70:2e:1a:86:29:e4:9e:1f:d3:39:5f:2e:2f:05:63:3b: fe:b2:ae:1f:a1:3a:99:e1:bb:1e:e9:04:d6:5f:0c:4d:3a:aa: 81:7e:3f:65:c9:64:68:3e:36:f2:5b:39:5c:a9:81:35:d7:61: 06:23:64:ff:57:59:42:44:0d:c2:51:98:94:83:f3:4d:54:a0: 63:6d:e7:1a:24:15:5e:f6:49:01:b2:2a:83:e0:e0:94:15:62: a6:89:68:71:3a:e3:91:d6:62:9a:93:6d:45:04:bf:ff:92:4f: 44:d0:3e:c1:50:18:26:1f:44:13:64:28:ae:1d:64:54:a5:ec: 73:da:56:92:eb:18:b3:de:4e:d8:39:60:d2:5f:14:b3:71:fc: 4e:bf:4a:b7:c2:9f:c7:1a:f7:18:6c:68:bf:53:37:21:77:a2: ad:ea:6a:39:d4:c9:06:44:c8:3e:6f:b2:c3:58:39:05:4d:64: bd:c3:69:65:ef:1d:c9:ba:bd:c7:29:a6:16:00:d0:cc:b1:57: c5:b1:13:5b:a7:4e:9f:ca:e9:da:f1:37:20:84:4f:44:82:ee: 5d:e5:9d:f7:07:c3:40:dd:03:7a:ec:e8:6f:c8:50:86:a8:8e: 63:03:8d:e0:84:52:bd:1d:cb:13:d6:b2:03:4e:eb:02:2c:a1: a6:90:b6:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjUxMDE5MDQxNzEzWhcNMjUxMDI2MDQxNzEzWjAYMRYwFAYD VQQDEw02OGY0NjY0YS0xYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLS8kg7CXqIMCeeT9CyQPi8fo218pE2pIXWHk+Fe8MqZCZQ/AsOufzj7CcHC u+jJ5hA2RHKPfLai0ExVW0hHsoOUtt6XUfC8l4zhb3FxemBGrAomy2bLCfDLLMAw p+on+LXTbQWUHhUHwoUzrphoqt6YTE3Eydx8rkhy7D1gcB7vA+MjBE6ihjHn1974 VQPU05bnMyi55oX8qfjw5L96uCxtWR3dJnihRfc1SnfwwDSQ5JxcqUC5btUkc0pn 9soadEDxhvt1K575SmFA0gFapTnMqN3opDjXkXwqc1mdDJEsHc6oGVzhx5k9tgd5 Hf3sExGMSrGtXLf9ADuYMrRfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1vvVVk Gc+gb5jrFFLtrzcuW3IsMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxZHAuGoYp5J4f0zlfLi8FYzv+sq4foTqZ4bse6QTWXwxNOqqBfj9l yWRoPjbyWzlcqYE112EGI2T/V1lCRA3CUZiUg/NNVKBjbecaJBVe9kkBsiqD4OCU FWKmiWhxOuOR1mKak21FBL//kk9E0D7BUBgmH0QTZCiuHWRUpexz2laS6xiz3k7Y OWDSXxSzcfxOv0q3wp/HGvcYbGi/Uzchd6Kt6mo51MkGRMg+b7LDWDkFTWS9w2ll 7x3Jur3HKaYWANDMsVfFsRNbp06fyuna8TcghE9Egu5d5Z33B8NA3QN67OhvyFCG qI5jA43ghFK9HcsT1rIDTusCLKGmkLaG -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:28 2025 by rpki-client