$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft File: V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json) Hash identifier: iyXg4VQ1SWQDp6ZhgfcLY79YXJzSIOw6sA/SidnnsUg= Subject key identifier: 9D:55:C7:92:69:50:4F:49:EB:4E:2A:46:30:B3:C0:BC:DE:EB:DA:F6 Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 Certificate issuer: /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft Manifest number: 3C Signing time: Sun 19 Oct 2025 11:00:55 +0000 Manifest this update: Sun 19 Oct 2025 11:00:54 +0000 Manifest next update: Sun 26 Oct 2025 11:00:54 +0000 Files and hashes: 1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: k9jL5Hj/LcMPV0wu6zeFi7MoCKKWTykUwloaSxx1Ej0=) 2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: I9mTloe+CBVyT9j1b2vknypKCm7MYiUBGA2nLvqI+nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Validity Not Before: Oct 19 11:00:54 2025 GMT Not After : Oct 26 11:00:54 2025 GMT Subject: CN=68f4c4e6-565f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:ad:ed:d7:ec:b9:82:de:83:51:df:73:e4: ed:9f:6a:a1:61:c5:c7:b9:cd:80:a4:28:25:d6:e5: 1d:00:5b:31:8e:0b:62:f4:22:1d:3d:08:d8:b6:5e: 49:3a:91:a4:84:16:0c:f6:a1:fb:46:96:71:06:bb: 78:82:fb:ab:14:67:91:9d:03:36:fc:f3:a1:ab:c2: 13:d7:e5:28:b9:97:af:9f:41:f6:69:0d:39:30:06: 22:42:a9:1d:8c:49:7c:6a:88:64:ce:17:5d:d1:30: d5:31:36:b7:02:b8:fb:3a:2e:3d:29:83:c6:d1:d0: f9:61:d2:28:0e:46:65:52:8b:88:4b:1d:58:73:18: 3f:db:c0:b0:c0:86:01:47:c5:11:80:88:c3:61:94: 0e:ff:0a:af:2b:9b:6b:87:8d:e6:f6:59:c3:6d:a9: 54:dc:11:75:a5:f4:5e:4d:5c:c9:4a:dd:eb:20:2a: 36:ad:47:a4:f0:f6:3b:fd:dc:7f:a4:b4:bb:fc:16: c4:59:5a:2b:79:68:ef:c6:dc:0c:5c:88:98:69:6c: 40:75:1c:dd:bc:ff:94:c2:e0:5c:5e:c6:93:d8:a3: f9:4b:b2:cd:44:18:e5:e2:78:58:e3:3d:e5:bf:e1: 28:c7:ec:f0:be:16:70:a4:e7:b4:9e:4c:d2:57:49: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:55:C7:92:69:50:4F:49:EB:4E:2A:46:30:B3:C0:BC:DE:EB:DA:F6 X509v3 Authority Key Identifier: keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8a:9e:f4:a5:f4:b2:e9:a8:a6:55:0f:a9:2a:e1:b1:80:93: cd:d7:d1:cb:17:15:da:15:d7:64:7e:76:79:3e:2f:d4:75:05: 3a:0c:49:15:3e:72:c3:e9:f0:c0:75:4c:d4:29:0b:35:bb:14: 13:c0:12:e0:39:56:52:a5:d4:5b:c7:29:2f:02:35:c9:29:90: 01:cc:b9:82:51:cc:cf:14:83:60:2a:f3:e5:6c:e9:ed:c1:f6: f2:5f:ed:fa:bc:e2:4b:15:e8:a2:45:ba:04:b5:f5:cf:51:5e: fe:da:65:51:73:13:6f:62:01:48:db:1b:92:54:01:41:ea:58: ac:ba:5c:36:bf:95:39:97:15:c4:2a:01:cb:55:83:6e:2d:ae: 68:14:a7:36:53:07:ae:75:e4:a7:76:ec:fe:07:29:4d:db:da: 31:09:cb:d5:6f:9b:f8:9e:f6:03:d0:0e:7c:67:94:21:61:af: f1:b4:2b:0d:d2:3c:59:a1:dc:66:28:06:d3:ad:67:b7:7d:ca: 70:8a:65:dd:1b:4c:79:f9:36:67:8c:a5:8d:c7:9a:da:8c:57: 89:79:5f:e7:d7:c9:ad:cc:30:19:8f:09:72:a3:f2:13:21:14: e8:b0:3a:a4:15:3e:0f:f8:a5:35:41:59:02:e2:9a:60:46:6d: 8e:a0:31:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoNTc0REIzRDYyNURFODQyMDJFM0FDOUMxQzNENUIwNzc0 RDZCNzhFMzAeFw0yNTEwMTkxMTAwNTRaFw0yNTEwMjYxMTAwNTRaMBgxFjAUBgNV BAMTDTY4ZjRjNGU2LTU2NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSqK3t1+y5gt6DUd9z5O2faqFhxce5zYCkKCXW5R0AWzGOC2L0Ih09CNi2Xkk6 kaSEFgz2oftGlnEGu3iC+6sUZ5GdAzb886GrwhPX5Si5l6+fQfZpDTkwBiJCqR2M SXxqiGTOF13RMNUxNrcCuPs6Lj0pg8bR0Plh0igORmVSi4hLHVhzGD/bwLDAhgFH xRGAiMNhlA7/Cq8rm2uHjeb2WcNtqVTcEXWl9F5NXMlK3esgKjatR6Tw9jv93H+k tLv8FsRZWit5aO/G3AxciJhpbEB1HN28/5TC4FxexpPYo/lLss1EGOXieFjjPeW/ 4SjH7PC+FnCk57SeTNJXSUGvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnVXHkmlQ T0nrTipGMLPAvN7r2vYwHwYDVR0jBBgwFoAUV02z1iXehCAuOsnBw9Wwd01reOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzQ5QTFBODc4NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENBdU9zbkJ3OVd3ZDAxcmVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjAyejFpWGVoQ0F1T3NuQnc5V3dkMDFyZU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzQ5QTFBODc4NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENB dU9zbkJ3OVd3ZDAxcmVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKKnvSl9LLpqKZVD6kq4bGAk83X0csXFdoV12R+dnk+L9R1BToMSRU+ csPp8MB1TNQpCzW7FBPAEuA5VlKl1FvHKS8CNckpkAHMuYJRzM8Ug2Aq8+Vs6e3B 9vJf7fq84ksV6KJFugS19c9RXv7aZVFzE29iAUjbG5JUAUHqWKy6XDa/lTmXFcQq ActVg24trmgUpzZTB6515Kd27P4HKU3b2jEJy9Vvm/ie9gPQDnxnlCFhr/G0Kw3S PFmh3GYoBtOtZ7d9ynCKZd0bTHn5NmeMpY3HmtqMV4l5X+fXya3MMBmPCXKj8hMh FOiwOqQVPg/4pTVBWQLimmBGbY6gMVo= -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:43 2025 by rpki-client