$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: koBdeZdCiAEJuIk20G8k6+CKRAUc4AgtOncLipKKBjQ= Subject key identifier: F3:AF:96:1D:9A:13:23:10:26:4F:45:82:EE:93:54:18:0E:2E:F0:95 Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: 010C Signing time: Sun 19 Oct 2025 07:51:09 +0000 Manifest this update: Sun 19 Oct 2025 07:51:08 +0000 Manifest next update: Sun 26 Oct 2025 07:51:08 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: WiPmuisVc8rZ/YWTRJQ8oo8ozXfV7fRGWD+9sIg3v2c=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: 6KnYqtU5eDGuSaPKMnhRfcXUWukIQCJpgFhNSz5ECjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: Oct 19 07:51:08 2025 GMT Not After : Oct 26 07:51:08 2025 GMT Subject: CN=68f4986c-c253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:ea:61:52:a9:fe:9a:b7:67:f7:2c:7d:3d: 8f:85:a6:c0:49:f6:71:92:0e:6e:ed:66:2a:59:f5: 03:cd:de:84:10:d8:ff:50:ec:e7:2a:3c:d5:5f:e7: 58:dd:f5:68:c0:a1:c8:29:26:c0:83:31:c8:57:39: 35:dc:78:c6:76:83:45:47:a4:7b:b2:bf:c6:bb:16: 45:f1:cd:17:5a:b7:26:9d:04:9e:1a:d8:40:6b:84: 26:df:0a:92:86:73:6a:f1:c5:9d:86:83:a5:0c:49: e3:32:13:c3:df:1e:44:43:d3:24:64:9e:da:c0:2f: 84:94:6a:80:1f:cf:38:1c:62:e2:94:19:f3:53:98: 74:75:fc:34:73:30:2e:bf:73:bd:68:5c:50:14:94: 63:8c:4c:bd:13:2c:35:ae:31:f7:11:69:75:b4:b5: ff:fb:a3:14:e0:6d:6e:60:1f:17:9e:e4:37:ef:f0: b0:d0:f5:4b:1c:3c:a8:dd:76:4b:58:b7:33:0e:af: 20:c4:45:b0:b3:ce:a3:22:5f:f0:cb:37:40:66:d7: c9:72:7d:b0:bd:02:67:58:fb:41:fb:ca:61:9b:a9: 72:cf:c8:4a:2a:85:2c:02:dd:fb:99:05:ec:9b:47: 7d:59:bb:98:e1:af:74:34:62:71:83:c4:27:9b:21: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:96:1D:9A:13:23:10:26:4F:45:82:EE:93:54:18:0E:2E:F0:95 X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7f:cb:03:7a:b6:81:53:ca:a5:02:6b:d9:59:00:3e:03:83: 8c:d0:29:e0:92:a4:e9:ef:fa:e6:b2:ab:b9:8e:a2:7b:82:37: 8a:08:59:93:83:51:3b:01:d6:62:29:2e:b7:18:8a:7f:55:44: ec:bd:c9:e7:7d:7f:6e:9f:4c:51:cd:c0:f5:90:86:c0:58:21: 3d:0e:f1:2f:0e:88:73:90:d4:78:41:f0:8b:9a:fe:1e:3e:fd: 66:8c:08:61:b5:e0:b9:b9:0d:75:54:2c:c6:06:a9:74:d8:51: ef:13:11:c1:c7:70:b3:8c:0c:c3:56:49:d5:fe:86:a2:cf:39: ba:01:d2:66:db:a9:95:e7:a1:68:39:dc:1b:86:79:76:e5:4e: da:8f:a4:ed:4a:f7:4d:bd:d7:58:b7:e2:9e:7d:19:cf:e8:94: d5:16:cd:e5:95:87:1d:ef:f2:22:4f:ad:14:46:b9:5f:8c:2f: 65:b5:d9:fc:db:6d:c2:31:ee:92:67:e0:eb:01:60:b2:d7:0f: d0:30:a7:66:7d:9a:b7:f3:e2:ca:f6:70:eb:70:a9:8a:02:42: e0:35:8b:37:de:02:db:51:36:19:6c:44:c8:05:8a:bc:a8:d2: 45:d7:3d:a3:1f:0b:2d:44:a7:da:16:63:74:a1:78:82:9d:dd: 2b:19:d9:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUxMDE5MDc1MTA4WhcNMjUxMDI2MDc1MTA4WjAYMRYwFAYD VQQDEw02OGY0OTg2Yy1jMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9LqYVKp/pq3Z/csfT2PhabASfZxkg5u7WYqWfUDzd6EENj/UOznKjzVX+dY 3fVowKHIKSbAgzHIVzk13HjGdoNFR6R7sr/GuxZF8c0XWrcmnQSeGthAa4Qm3wqS hnNq8cWdhoOlDEnjMhPD3x5EQ9MkZJ7awC+ElGqAH884HGLilBnzU5h0dfw0czAu v3O9aFxQFJRjjEy9Eyw1rjH3EWl1tLX/+6MU4G1uYB8XnuQ37/Cw0PVLHDyo3XZL WLczDq8gxEWws86jIl/wyzdAZtfJcn2wvQJnWPtB+8phm6lyz8hKKoUsAt37mQXs m0d9WbuY4a90NGJxg8QnmyGk9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOvlh2a EyMQJk9Fgu6TVBgOLvCVMB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAff8sDeraBU8qlAmvZWQA+A4OM0CngkqTp7/rmsqu5jqJ7gjeKCFmT g1E7AdZiKS63GIp/VUTsvcnnfX9un0xRzcD1kIbAWCE9DvEvDohzkNR4QfCLmv4e Pv1mjAhhteC5uQ11VCzGBql02FHvExHBx3CzjAzDVknV/oaizzm6AdJm26mV56Fo Odwbhnl25U7aj6TtSvdNvddYt+KefRnP6JTVFs3llYcd7/IiT60URrlfjC9ltdn8 223CMe6SZ+DrAWCy1w/QMKdmfZq38+LK9nDrcKmKAkLgNYs33gLbUTYZbETIBYq8 qNJF1z2jHwstRKfaFmN0oXiCnd0rGdkQ -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:09 2025 by rpki-client