$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: HLrj6pzMwiY2AMAJ1nzYWN/oUmpf1XOVkeCiZLtH/rk= Subject key identifier: 0B:9C:80:71:22:F5:FD:AE:2C:82:A5:C3:DF:FA:2C:57:65:E0:EB:12 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 01CC Signing time: Sun 19 Oct 2025 05:31:51 +0000 Manifest this update: Sun 19 Oct 2025 05:31:50 +0000 Manifest next update: Sun 26 Oct 2025 05:31:50 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: iDg7DFexJZApAgdOfFTK5YsA0ZNTsGoS84VWfzmdFG8=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: gvjJNiO9vqYIhsYjJBaQQlt1G1Z/kYCgfliXikgsWHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Oct 19 05:31:50 2025 GMT Not After : Oct 26 05:31:50 2025 GMT Subject: CN=68f477c6-9865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:0d:26:29:1d:d2:0e:e4:ba:44:1b:0d:bc: f1:f7:e1:ad:ed:da:cc:4a:7c:20:5c:8e:b7:c9:1c: a7:44:de:80:87:4a:82:96:ad:3e:91:9c:65:57:4a: 6b:1a:9c:e9:23:17:35:96:fb:80:24:94:c9:d2:09: 04:03:3d:a1:4b:3d:b0:28:b9:17:4a:22:23:94:ab: e9:c6:de:18:bc:b6:f5:e2:ed:aa:b1:28:ca:99:4e: b5:03:d2:64:37:44:cc:ca:85:19:ee:36:7f:46:14: cb:db:42:83:c7:a4:16:28:42:f1:60:0d:aa:03:47: d6:b8:93:92:66:5c:0e:d7:2a:f8:71:f4:32:f9:17: c4:35:e8:bb:aa:78:c2:92:04:23:ff:8b:36:9c:51: 11:fa:3c:59:ca:52:a9:ec:ca:1d:6b:c1:c8:0d:86: 9e:44:3c:ab:4b:3a:e5:56:ec:0b:b2:39:69:fe:a7: 65:ae:2d:98:f7:a0:29:c5:5a:00:5b:36:63:61:11: a3:6f:69:cd:eb:17:50:3a:84:60:6d:76:ad:a8:6b: 0c:06:ac:19:70:81:3f:17:04:dd:13:62:75:1b:ee: 44:aa:48:87:d0:78:c7:b0:94:24:20:2b:e6:f9:9c: e4:f5:2e:8c:fd:21:4b:0e:5b:4d:8a:b8:6c:b8:b4: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9C:80:71:22:F5:FD:AE:2C:82:A5:C3:DF:FA:2C:57:65:E0:EB:12 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ae:77:78:2b:8c:35:6e:92:91:44:98:ee:69:69:c7:90:b0: a8:5d:09:99:90:5d:10:a2:f8:de:83:5d:f2:d5:6f:7a:16:e1: 27:1f:19:23:01:92:0a:29:57:68:e4:20:ab:97:58:69:42:9d: d6:44:84:f3:3d:21:2d:48:3f:7d:1e:32:41:48:aa:d4:0d:4d: c6:ee:55:d8:59:70:97:32:4a:4f:db:c7:25:c3:60:81:75:5f: d0:1d:6d:6b:f5:45:c1:97:e2:20:b4:62:68:6f:40:b6:87:12: 1a:de:8b:bb:05:66:99:ac:0e:2c:46:38:7f:15:5a:6a:62:bf: 75:5c:0e:60:30:68:1d:8b:f7:d8:31:df:fa:6f:2f:79:65:3c: e3:a3:8f:2b:58:12:e0:cc:e5:7e:f5:01:76:77:ac:f9:bb:5c: 5a:f3:9f:af:99:79:9d:d5:d1:b4:04:d0:73:2b:b3:23:6c:20: ca:28:bc:26:74:93:b9:ac:50:c0:90:76:9a:e3:14:17:3d:e8: 47:da:d6:ae:1d:ea:43:d3:e5:e0:45:f8:05:22:49:cc:03:81: 46:a2:4d:f8:59:30:a1:ff:21:b7:12:a2:6b:1e:33:41:16:2a: fa:89:cb:a7:eb:37:9b:4c:62:0c:4e:05:2f:58:fd:04:0a:0c: 27:af:58:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUxMDE5MDUzMTUwWhcNMjUxMDI2MDUzMTUwWjAYMRYwFAYD VQQDEw02OGY0NzdjNi05ODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5QNJikd0g7kukQbDbzx9+Gt7drMSnwgXI63yRynRN6Ah0qClq0+kZxlV0pr GpzpIxc1lvuAJJTJ0gkEAz2hSz2wKLkXSiIjlKvpxt4YvLb14u2qsSjKmU61A9Jk N0TMyoUZ7jZ/RhTL20KDx6QWKELxYA2qA0fWuJOSZlwO1yr4cfQy+RfENei7qnjC kgQj/4s2nFER+jxZylKp7Moda8HIDYaeRDyrSzrlVuwLsjlp/qdlri2Y96ApxVoA WzZjYRGjb2nN6xdQOoRgbXatqGsMBqwZcIE/FwTdE2J1G+5EqkiH0HjHsJQkICvm +Zzk9S6M/SFLDltNirhsuLRN6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAucgHEi 9f2uLIKlw9/6LFdl4OsSMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCrnd4K4w1bpKRRJjuaWnHkLCoXQmZkF0Qovjeg13y1W96FuEnHxkj AZIKKVdo5CCrl1hpQp3WRITzPSEtSD99HjJBSKrUDU3G7lXYWXCXMkpP28clw2CB dV/QHW1r9UXBl+IgtGJob0C2hxIa3ou7BWaZrA4sRjh/FVpqYr91XA5gMGgdi/fY Md/6by95ZTzjo48rWBLgzOV+9QF2d6z5u1xa85+vmXmd1dG0BNBzK7MjbCDKKLwm dJO5rFDAkHaa4xQXPehH2tauHepD0+XgRfgFIknMA4FGok34WTCh/yG3EqJrHjNB Fir6icun6zebTGIMTgUvWP0ECgwnr1gH -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:09 2025 by rpki-client