$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json) Hash identifier: Oe2Psgi3AuHXO5A/f358adLqS8LHVN1ir2NO7ul8uD8= Subject key identifier: 03:49:39:86:AD:4F:71:41:78:6F:26:2B:B4:F5:8A:E1:BB:17:CA:C9 Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft Manifest number: 05A4 Signing time: Sun 19 Oct 2025 00:51:17 +0000 Manifest this update: Sun 19 Oct 2025 00:51:16 +0000 Manifest next update: Sun 26 Oct 2025 00:51:16 +0000 Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: lGCVzBk39ppupfaDGEoXqC3a6zr8SzqkfirnzSZoODE=) 2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: MnGT95K1KMZ27Vz9GV0/eAka386Vq2ptFRht280ijWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Validity Not Before: Oct 19 00:51:16 2025 GMT Not After : Oct 26 00:51:16 2025 GMT Subject: CN=68f43604-cd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:5b:bd:ae:1d:55:7f:09:3a:4e:d7:97:61: db:f7:ff:e4:e9:14:6b:3f:d0:8e:92:4e:43:70:39: 09:4a:da:f6:a9:1d:45:a7:9a:4e:48:bc:ec:61:dd: a4:4b:6c:5e:c6:72:10:e6:5a:63:a2:d2:ad:61:2e: 38:22:34:0a:28:88:70:ee:ee:95:d3:a3:a4:d5:74: d2:ba:28:d3:2d:3d:4c:4b:84:56:25:f0:a0:d6:bf: f7:4b:68:d7:79:ae:37:bd:03:af:45:0f:1d:76:0a: f0:a6:46:34:da:bc:f7:ee:e5:b9:6b:7a:7a:93:35: 9b:ee:59:e9:3b:5e:0a:45:0b:a0:d6:d6:ca:c4:b5: 14:c5:a1:a5:20:3b:b8:24:9a:6a:13:f4:b1:77:04: 59:85:2e:82:9b:35:06:88:d2:36:b8:20:70:c3:32: e6:87:76:3d:92:6d:34:46:22:50:3f:82:a7:a3:5c: d2:28:f2:a0:41:2a:30:bf:56:13:b7:f1:03:18:6a: ef:5c:59:49:5f:bc:11:ef:19:a2:9a:8e:9e:23:09: a1:78:66:4f:9c:30:96:11:bc:f6:c0:0e:8d:95:15: f8:82:46:78:f7:38:a8:2a:2b:5c:eb:23:c2:37:11: 8a:44:17:51:d4:08:2a:cb:12:21:84:9e:80:17:13: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:39:86:AD:4F:71:41:78:6F:26:2B:B4:F5:8A:E1:BB:17:CA:C9 X509v3 Authority Key Identifier: keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5a:e8:f3:6c:f1:f7:3c:f3:ed:f4:ba:44:71:80:59:ff:db: dc:8a:34:3f:a6:6b:fd:2b:10:70:d1:4d:ea:9c:4f:46:8c:5a: 79:16:a2:48:35:1c:52:a6:12:0a:96:21:b7:00:30:c4:1b:bd: 68:a0:81:73:f8:ad:26:98:f1:31:ad:bb:e8:7d:93:ea:d1:de: fc:6a:79:31:b6:fe:f2:9e:4e:0f:45:27:cf:7c:d8:d8:e4:da: 65:d9:82:29:b1:3d:87:1c:78:6b:24:b7:e8:95:3a:11:d6:79: 4f:02:6d:a1:68:18:f5:b9:c0:ad:0e:68:92:83:ba:b4:75:a8: 2a:7b:96:24:61:85:82:cc:4a:5b:94:37:82:f0:6f:5c:1f:07: 68:5a:14:f3:bb:52:b8:e4:d9:50:9c:35:f0:20:f3:d0:d1:e7: 97:35:0b:9a:22:2d:94:31:a9:1f:40:68:9a:72:25:57:f8:7a: ea:4e:ae:42:5a:ef:bf:f1:ec:4e:2f:4e:b3:ac:2d:22:d1:a7: 34:2e:bc:a2:a7:8e:40:e3:be:8f:35:03:66:8d:57:d5:07:2f: 65:d8:25:cf:58:34:96:5f:1e:de:63:d9:02:6c:b5:d4:e3:a0: cd:d8:21:ae:d5:1c:cc:f1:a7:20:01:e8:74:82:73:a8:3d:a9: 0b:f4:fa:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFMTkxMTAvBgNVBAUTKEVGNTAwMUE3NUI1ODA1OUQ5M0E1RDMxNjM4NTRCNDZB RDY2QTlFQzgwHhcNMjUxMDE5MDA1MTE2WhcNMjUxMDI2MDA1MTE2WjAYMRYwFAYD VQQDEw02OGY0MzYwNC1jZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHRbva4dVX8JOk7Xl2Hb9//k6RRrP9COkk5DcDkJStr2qR1Fp5pOSLzsYd2k S2xexnIQ5lpjotKtYS44IjQKKIhw7u6V06Ok1XTSuijTLT1MS4RWJfCg1r/3S2jX ea43vQOvRQ8ddgrwpkY02rz37uW5a3p6kzWb7lnpO14KRQug1tbKxLUUxaGlIDu4 JJpqE/SxdwRZhS6CmzUGiNI2uCBwwzLmh3Y9km00RiJQP4Kno1zSKPKgQSowv1YT t/EDGGrvXFlJX7wR7xmimo6eIwmheGZPnDCWEbz2wA6NlRX4gkZ49zioKitc6yPC NxGKRBdR1AgqyxIhhJ6AFxMThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANJOYat T3FBeG8mK7T1iuG7F8rJMB8GA1UdIwQYMBaAFO9QAadbWAWdk6XTFjhUtGrWap7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEUxOS83MDcxNDY0RUVE RUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJaMlRwZE1XT0ZTMGF0WnFu c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxQUJwMXRZQloyVHBkTVdPRlMwYXRacW5zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEUxOS83MDcxNDY0RUVERUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJa MlRwZE1XT0ZTMGF0WnFuc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkWujzbPH3PPPt9LpEcYBZ/9vcijQ/pmv9KxBw0U3qnE9GjFp5FqJI NRxSphIKliG3ADDEG71ooIFz+K0mmPExrbvofZPq0d78ankxtv7ynk4PRSfPfNjY 5Npl2YIpsT2HHHhrJLfolToR1nlPAm2haBj1ucCtDmiSg7q0dagqe5YkYYWCzEpb lDeC8G9cHwdoWhTzu1K45NlQnDXwIPPQ0eeXNQuaIi2UMakfQGiaciVX+HrqTq5C Wu+/8exOL06zrC0i0ac0Lryip45A476PNQNmjVfVBy9l2CXPWDSWXx7eY9kCbLXU 46DN2CGu1RzM8acgAeh0gnOoPakL9PpP -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:35 2025 by rpki-client