$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json) Hash identifier: 1QGnlsftQEDYFJcHLbE92HjYH8ZvCVTivg0SuQ50V/4= Subject key identifier: 8A:EC:C9:4B:CF:E9:8E:75:F8:68:AE:7F:44:84:E4:BB:57:D3:DC:E8 Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Certificate serial: 0B2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft Manifest number: 0B23 Signing time: Mon 20 Oct 2025 20:00:50 +0000 Manifest this update: Mon 20 Oct 2025 20:00:49 +0000 Manifest next update: Mon 27 Oct 2025 20:00:49 +0000 Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: iODWSS6gacA0irbycOy6YdXWCcrsAoa0QoHQeqxge9Y=) 2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: 7dou7EZJS0k+10u39gMW4DiImFVNtTINLLrPstsJeHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2859 (0xb2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Validity Not Before: Oct 20 20:00:49 2025 GMT Not After : Oct 27 20:00:49 2025 GMT Subject: CN=68f694f2-1ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:01:3e:50:d9:a2:fe:17:76:86:0d:93:97: bc:61:b8:99:6d:1a:9f:f5:1e:e8:13:1b:0e:08:94: fa:e8:e8:cd:d8:22:43:3d:f4:a6:1c:e7:e6:42:f2: d0:ca:fe:75:b7:61:58:e2:b0:d6:b2:f7:ea:2f:ff: 50:a9:09:a8:e1:7e:85:23:bd:09:3a:4b:ff:c1:c1: db:aa:fa:f6:8c:04:24:73:e4:71:f8:85:3b:d6:c0: c2:1f:2d:4e:df:85:e1:cd:92:64:56:20:58:db:26: 98:ee:08:53:37:35:27:e7:75:77:ae:5f:c4:8f:06: 90:cf:3e:64:98:26:60:ca:0d:36:1d:e1:27:75:e6: 21:1f:fa:2d:b5:4f:82:bd:8a:80:2b:35:12:c2:ca: 45:26:99:f0:0d:de:9f:70:64:ad:65:7e:7c:f8:70: fb:d4:6b:39:de:ec:25:39:f4:9e:6c:37:d8:03:0f: e8:79:53:f9:cb:34:28:d5:16:a6:09:b0:e1:2b:2f: 3c:f2:d4:83:71:fc:1c:6a:3d:d4:dd:cc:44:19:36: 59:52:7d:1d:e4:08:67:d3:b8:bc:8b:a4:79:4e:4f: 36:79:23:d7:29:83:62:a9:0d:21:61:6e:66:43:97: bd:2f:ed:c6:b6:cc:3e:fc:ce:bb:f6:17:d3:19:35: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:C9:4B:CF:E9:8E:75:F8:68:AE:7F:44:84:E4:BB:57:D3:DC:E8 X509v3 Authority Key Identifier: keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6a:5c:29:33:67:93:26:6c:96:82:c6:20:f0:41:e3:13:e0: ac:6f:5d:61:d0:80:c1:72:89:f3:b4:67:92:c9:90:f2:42:63: ac:72:d0:e3:1f:ed:e5:0e:ee:71:93:7a:d9:c9:d8:8a:b9:75: 2e:2e:66:8e:c8:e7:95:25:66:31:e8:2a:3f:2a:ce:43:71:3e: f7:19:45:cc:02:7d:0b:df:ab:95:a4:9f:f5:2b:fc:fd:89:e2: 8c:cf:71:1d:37:58:bf:57:ff:14:75:1a:f6:fd:65:b0:2d:c9: 81:19:25:8a:17:a7:45:11:42:c9:cf:00:7c:15:2a:e3:26:45: 1a:f8:62:fa:2c:fc:98:6b:ee:ad:b0:e4:08:e1:5b:59:7d:dc: a7:1f:ee:1b:9e:7c:01:8e:56:e0:60:01:95:22:ee:06:b7:c5: d9:ab:47:e5:af:98:27:a0:46:ec:26:2d:e5:48:ff:8d:1d:c0: b9:37:bf:9e:80:11:f8:1d:4f:4f:11:48:28:21:09:a4:0e:5c: 9c:82:bf:4f:68:ab:70:67:31:65:da:89:75:77:e4:0b:be:fd: a0:79:e0:fb:43:09:e5:99:54:b1:62:71:80:ea:d6:0c:3f:d4: 23:8e:b3:4b:db:91:1f:43:2e:fb:39:a0:ef:b2:df:93:e7:f8: 43:3f:01:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyQUQxMTAvBgNVBAUTKEIzOEQyQjhGNEQ1QkI2QTUzRTlCNDE5MjYxMDQ4MUE1 RDg4MTY1NDYwHhcNMjUxMDIwMjAwMDQ5WhcNMjUxMDI3MjAwMDQ5WjAYMRYwFAYD VQQDEw02OGY2OTRmMi0xZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulABPlDZov4XdoYNk5e8YbiZbRqf9R7oExsOCJT66OjN2CJDPfSmHOfmQvLQ yv51t2FY4rDWsvfqL/9QqQmo4X6FI70JOkv/wcHbqvr2jAQkc+Rx+IU71sDCHy1O 34XhzZJkViBY2yaY7ghTNzUn53V3rl/EjwaQzz5kmCZgyg02HeEndeYhH/ottU+C vYqAKzUSwspFJpnwDd6fcGStZX58+HD71Gs53uwlOfSebDfYAw/oeVP5yzQo1Ram CbDhKy888tSDcfwcaj3U3cxEGTZZUn0d5Ahn07i8i6R5Tk82eSPXKYNiqQ0hYW5m Q5e9L+3Gtsw+/M679hfTGTWU+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrsyUvP 6Y51+Giuf0SE5LtX09zoMB8GA1UdIwQYMBaAFLONK49NW7alPptBkmEEgaXYgWVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTJBRC8zOERBQTA2QzRC MjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRxVS1tMEdTWVFTQnBkaUJa VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M0MHJqMDFidHFVLW0wR1NZUVNCcGRpQlpVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTJBRC8zOERBQTA2QzRCMjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRx VS1tMEdTWVFTQnBkaUJaVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADalwpM2eTJmyWgsYg8EHjE+Csb11h0IDBconztGeSyZDyQmOsctDj H+3lDu5xk3rZydiKuXUuLmaOyOeVJWYx6Co/Ks5DcT73GUXMAn0L36uVpJ/1K/z9 ieKMz3EdN1i/V/8UdRr2/WWwLcmBGSWKF6dFEULJzwB8FSrjJkUa+GL6LPyYa+6t sOQI4VtZfdynH+4bnnwBjlbgYAGVIu4Gt8XZq0flr5gnoEbsJi3lSP+NHcC5N7+e gBH4HU9PEUgoIQmkDlycgr9PaKtwZzFl2ol1d+QLvv2geeD7QwnlmVSxYnGA6tYM P9QjjrNL25EfQy77OaDvst+T5/hDPwHX -----END CERTIFICATE-----Generated at Tue Oct 21 01:38:30 2025 by rpki-client