$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: n4/e/8j1wPD+szh75vUa+DuWHCeQlluM3/zBaepjRpI= Subject key identifier: 90:57:D6:C1:E1:C3:8B:CD:F7:16:75:70:DE:DC:62:EC:74:9A:31:E0 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08EF Signing time: Sat 18 Oct 2025 21:31:00 +0000 Manifest this update: Sat 18 Oct 2025 21:30:59 +0000 Manifest next update: Sat 25 Oct 2025 21:30:59 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: HwS7Gt7EnLWaZIrehbGgCEOzOqU9Dv6cy+3+1odr72c=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Oct 18 21:30:59 2025 GMT Not After : Oct 25 21:30:59 2025 GMT Subject: CN=68f40714-805b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:ad:97:a8:4b:43:9b:26:ae:40:4e:e9:45: 69:81:df:51:5c:f3:93:7a:10:c6:fa:23:b5:f5:0d: 42:66:a8:e0:47:04:31:a4:bb:35:69:0a:0f:e1:ac: 24:d4:c9:15:8c:32:50:8a:0b:b9:74:86:3e:98:5e: 4b:01:d0:03:78:f8:8d:f3:75:fb:4d:f9:05:c5:67: af:bb:6d:bf:3c:ee:92:5c:81:99:68:df:0b:af:48: 31:8a:ef:38:5f:18:b7:b7:4b:84:88:e1:34:97:08: 8a:ee:f8:42:cc:9e:ac:01:b1:83:e2:cf:c1:4a:d1: ec:50:bb:6e:9d:d9:b0:b5:e2:98:17:18:e1:e2:9c: eb:85:8e:9c:55:3c:18:9e:8c:2e:4f:aa:7f:82:db: 04:1f:f7:ea:fc:71:24:b8:18:30:d5:00:e4:66:63: 53:fb:a1:94:90:8f:f6:4a:51:1b:c7:ad:59:e8:c2: 12:e9:f8:ad:84:2e:b2:76:c6:c8:4f:84:99:2c:7a: 7b:15:aa:2a:84:aa:65:b0:2f:5d:f5:bd:29:1e:21: 79:9e:f9:b8:9b:de:dd:a3:35:2d:30:a4:69:14:d4: 3e:28:21:af:00:df:4d:21:14:1c:01:f1:6c:de:84: 23:fe:c9:9a:d5:8f:53:f6:79:13:26:91:41:66:12: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:57:D6:C1:E1:C3:8B:CD:F7:16:75:70:DE:DC:62:EC:74:9A:31:E0 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d7:cb:dc:17:93:7c:e4:c9:aa:44:5a:c9:3b:b6:bb:1c:4b: c6:0d:88:0e:93:6e:fa:fb:7a:10:5e:6c:e7:db:a5:e9:73:fe: f4:60:17:17:87:47:87:a0:d1:f9:92:4e:f4:1e:22:96:e3:02: 54:9e:6f:dc:6e:5c:f0:df:b1:bc:eb:49:76:25:6f:f7:3e:2b: 4d:04:6b:d2:12:2a:d1:fe:af:a5:ac:5d:91:55:7c:24:58:88: ca:b5:78:4c:30:ef:30:cc:18:07:65:08:8b:ec:3c:1a:4d:3c: e9:2f:13:2a:6e:d5:08:40:3a:81:d3:bb:9e:3b:7c:31:ec:1d: 94:fb:77:09:d7:74:38:9e:3e:e0:45:35:d5:cc:82:8f:66:69: 2b:2d:fb:d0:27:7b:0f:6e:38:46:18:2e:57:b6:0d:ba:92:4b: 9f:20:19:6b:13:e0:44:56:df:86:9a:07:bc:1c:dd:8e:28:d9: 81:f8:6a:d6:29:15:d8:b6:ad:13:f1:de:28:92:3a:14:08:59: c8:96:a2:3a:67:bb:e8:22:48:35:42:80:b7:df:28:c9:5a:7e: 87:46:a0:93:04:e3:4c:63:e0:7a:db:2e:2c:85:09:9e:4c:8b: 3d:b3:74:99:db:a4:0a:41:87:bf:78:b2:3c:64:92:66:85:87: 94:04:20:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUxMDE4MjEzMDU5WhcNMjUxMDI1MjEzMDU5WjAYMRYwFAYD VQQDEw02OGY0MDcxNC04MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXitl6hLQ5smrkBO6UVpgd9RXPOTehDG+iO19Q1CZqjgRwQxpLs1aQoP4awk 1MkVjDJQigu5dIY+mF5LAdADePiN83X7TfkFxWevu22/PO6SXIGZaN8Lr0gxiu84 Xxi3t0uEiOE0lwiK7vhCzJ6sAbGD4s/BStHsULtundmwteKYFxjh4pzrhY6cVTwY nowuT6p/gtsEH/fq/HEkuBgw1QDkZmNT+6GUkI/2SlEbx61Z6MIS6fithC6ydsbI T4SZLHp7FaoqhKplsC9d9b0pHiF5nvm4m97dozUtMKRpFNQ+KCGvAN9NIRQcAfFs 3oQj/sma1Y9T9nkTJpFBZhLHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBX1sHh w4vN9xZ1cN7cYux0mjHgMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz18vcF5N85MmqRFrJO7a7HEvGDYgOk276+3oQXmzn26Xpc/70YBcX h0eHoNH5kk70HiKW4wJUnm/cblzw37G860l2JW/3PitNBGvSEirR/q+lrF2RVXwk WIjKtXhMMO8wzBgHZQiL7DwaTTzpLxMqbtUIQDqB07ueO3wx7B2U+3cJ13Q4nj7g RTXVzIKPZmkrLfvQJ3sPbjhGGC5Xtg26kkufIBlrE+BEVt+Gmge8HN2OKNmB+GrW KRXYtq0T8d4okjoUCFnIlqI6Z7voIkg1QoC33yjJWn6HRqCTBONMY+B62y4shQme TIs9s3SZ26QKQYe/eLI8ZJJmhYeUBCCG -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:06 2025 by rpki-client