$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: QOtL3+dkmRfB51g2MQjXdhALt6p2NwfXy1X3JY/KFoY= Subject key identifier: 13:39:50:C9:D1:31:C5:2D:B7:E0:FE:35:FF:32:0B:FB:9F:37:E1:6A Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 1517 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 1506 Signing time: Sat 18 Oct 2025 15:44:39 +0000 Manifest this update: Sat 18 Oct 2025 15:44:38 +0000 Manifest next update: Sat 25 Oct 2025 15:44:38 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: EbEeVMOuQQNUTYJcewdxI9mK40I940IumxtwuzhujeY=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5399 (0x1517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Oct 18 15:44:38 2025 GMT Not After : Oct 25 15:44:38 2025 GMT Subject: CN=68f3b5e6-2e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:42:bf:0d:b8:04:71:c1:fc:ea:61:65:54: ff:0e:1c:cb:c9:09:dd:94:83:54:08:09:5a:04:96: c8:cc:23:a3:61:85:ba:6d:c8:22:bf:c6:74:9c:b2: 61:60:c3:48:94:e9:63:1a:db:36:59:39:d5:d2:d3: f8:26:ef:95:cf:d5:58:35:e6:82:dc:2f:56:08:0a: 24:7b:e2:8d:95:2b:ce:02:c2:51:e7:ea:f7:18:da: 2d:18:01:36:11:45:06:a1:81:c0:53:7e:4f:c5:77: 0f:68:ba:d9:38:3d:fe:15:27:d2:88:2c:57:5d:c4: 84:06:ce:72:7c:bb:31:1d:01:9b:4c:0e:79:1e:b9: fa:93:85:25:12:57:9d:80:b4:55:57:a0:27:ab:e0: 2c:15:0f:1a:17:f5:70:03:cb:d9:83:38:55:99:a3: 69:85:4e:53:22:6b:8e:56:9c:00:4f:f9:51:70:43: 6e:c4:f2:b5:bb:42:5e:ea:45:8e:da:71:17:88:99: fb:d3:4d:7a:a1:aa:57:ea:4c:9f:f7:02:44:84:f2: 37:fb:d4:67:9e:c3:7e:d9:46:fa:3f:3f:ab:2a:bf: 36:43:e1:ba:bf:75:b5:1d:2a:b4:72:04:67:91:fa: cd:17:58:36:cd:be:da:74:a9:03:82:f4:56:9a:23: 12:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:39:50:C9:D1:31:C5:2D:B7:E0:FE:35:FF:32:0B:FB:9F:37:E1:6A X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:31:f1:44:cd:3c:65:cd:c6:e4:90:e8:80:f8:70:0e:60:e8: 47:0e:36:07:dd:59:2b:b0:c1:54:9c:8a:19:5b:1d:39:ee:6f: ac:d0:3f:f2:e5:cb:79:5c:46:2f:4d:fd:fb:9c:a0:c7:23:3a: 03:39:cc:75:f3:59:f4:3f:c9:f9:00:a7:14:ad:c8:69:3a:2c: 79:74:7c:51:f9:cf:9c:8c:0b:c2:80:3f:ff:f8:27:eb:e7:12: 8f:c0:64:ec:2c:d4:6c:31:5f:5f:74:91:40:4a:9e:14:5a:1c: d2:bd:43:7a:e5:08:2d:81:99:f9:da:10:ff:35:b0:c9:5a:5a: 71:d7:5e:59:1d:35:71:f0:a4:30:74:2e:cc:5b:f4:5e:f8:38: 3c:48:d1:4e:63:cd:7f:af:4e:72:83:a9:33:c8:ae:87:35:f6: 76:7f:db:f0:2e:4e:66:21:d3:00:4c:1e:0b:0d:d1:03:44:9b: eb:58:8c:7a:a7:72:dd:22:8b:4b:c5:68:dc:8d:2e:52:de:b0: 67:58:b7:15:3b:6d:4d:0b:42:eb:32:6c:17:ca:60:01:b5:bc: f3:7e:b3:31:0e:9e:8a:62:ff:6a:7f:43:62:36:2b:78:4a:5e: 89:29:f2:c5:45:e5:74:21:27:5f:7e:f1:d0:65:52:bb:93:e8: d1:c4:db:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUxMDE4MTU0NDM4WhcNMjUxMDI1MTU0NDM4WjAYMRYwFAYD VQQDEw02OGYzYjVlNi0yZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ENCvw24BHHB/OphZVT/DhzLyQndlINUCAlaBJbIzCOjYYW6bcgiv8Z0nLJh YMNIlOljGts2WTnV0tP4Ju+Vz9VYNeaC3C9WCAoke+KNlSvOAsJR5+r3GNotGAE2 EUUGoYHAU35PxXcPaLrZOD3+FSfSiCxXXcSEBs5yfLsxHQGbTA55Hrn6k4UlEled gLRVV6Anq+AsFQ8aF/VwA8vZgzhVmaNphU5TImuOVpwAT/lRcENuxPK1u0Je6kWO 2nEXiJn70016oapX6kyf9wJEhPI3+9RnnsN+2Ub6Pz+rKr82Q+G6v3W1HSq0cgRn kfrNF1g2zb7adKkDgvRWmiMSyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBM5UMnR McUtt+D+Nf8yC/ufN+FqMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTMfFEzTxlzcbkkOiA+HAOYOhHDjYH3VkrsMFUnIoZWx057m+s0D/y 5ct5XEYvTf37nKDHIzoDOcx181n0P8n5AKcUrchpOix5dHxR+c+cjAvCgD//+Cfr 5xKPwGTsLNRsMV9fdJFASp4UWhzSvUN65QgtgZn52hD/NbDJWlpx115ZHTVx8KQw dC7MW/Re+Dg8SNFOY81/r05yg6kzyK6HNfZ2f9vwLk5mIdMATB4LDdEDRJvrWIx6 p3LdIotLxWjcjS5S3rBnWLcVO21NC0LrMmwXymABtbzzfrMxDp6KYv9qf0NiNit4 Sl6JKfLFReV0ISdffvHQZVK7k+jRxNtd -----END CERTIFICATE-----Generated at Mon Oct 20 17:04:11 2025 by rpki-client