$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: ApPNDJdwfZF2W4ZCfONQaz+BlRJjwlEJHpM8riAliII= Subject key identifier: 5C:78:74:BE:2F:40:F7:AC:2C:39:E2:70:A3:FB:8F:3E:E9:58:BF:25 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: 39 Signing time: Sun 19 Oct 2025 11:00:52 +0000 Manifest this update: Sun 19 Oct 2025 11:00:51 +0000 Manifest next update: Sun 26 Oct 2025 11:00:51 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: 9LuSEzK9F8jfzS1wFjHJ7RWJdl8aI5JjmdEMAWO/ckI=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: Oct 19 11:00:51 2025 GMT Not After : Oct 26 11:00:51 2025 GMT Subject: CN=68f4c4e4-813b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:7a:5d:16:45:9f:f4:f3:9b:00:73:99:3c: a6:7a:c8:8d:47:84:7e:e4:62:03:45:15:b1:d6:53: b9:a9:dc:83:6b:b2:9f:57:77:55:5a:b8:e4:36:22: 01:99:74:15:08:1d:38:71:2c:7e:c3:88:b0:71:41: f8:e3:36:eb:1a:80:1b:bc:90:39:91:76:3c:c1:21: f9:15:33:15:64:45:b7:dd:6d:b6:42:98:cb:92:6b: 36:ae:57:1a:2d:04:f8:ed:15:b2:df:ee:2f:28:0b: da:ec:a0:a6:a3:1d:1e:d4:33:66:f9:fb:e3:ea:eb: ff:e1:72:1e:e3:9c:b0:34:e8:4f:98:34:3b:f0:7e: ee:6a:7b:4b:11:c7:ab:c0:d3:17:52:15:46:c2:56: 97:cf:1e:f7:6c:84:b6:3d:22:d6:15:04:6e:01:76: 54:1e:ba:81:d2:0d:aa:f0:cf:55:e7:5f:bd:c8:24: dd:d9:90:70:1f:f7:85:85:95:5e:b5:29:eb:ae:09: 28:35:25:63:3e:52:4c:f3:11:bc:02:c8:bb:2b:3b: 49:e8:9a:9d:9d:8e:a9:e9:5d:54:f0:82:e3:49:81: 78:cf:07:d4:81:ff:87:e5:9a:f8:8c:7f:d3:b9:2e: 96:26:4a:14:41:88:5d:9e:8d:f7:ef:96:47:0b:d9: cd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:78:74:BE:2F:40:F7:AC:2C:39:E2:70:A3:FB:8F:3E:E9:58:BF:25 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:79:71:93:78:5e:a6:33:6d:fe:7d:d0:b9:75:f0:57:9d:e2: 20:04:c4:40:54:62:e2:66:43:44:03:3e:5c:70:c1:fa:ec:23: 58:98:1b:6b:e7:8f:9c:c0:12:18:d4:20:85:2b:38:ba:6e:55: 89:82:ff:02:d4:b0:bc:57:3b:20:41:d1:14:91:12:c3:f4:9d: e2:48:9f:4c:f2:e0:93:19:7f:a7:aa:c6:81:3c:22:b4:b5:02: 1a:ef:22:51:36:01:f9:a4:e5:ab:25:db:66:1d:7c:92:6b:c1: 86:e2:a2:fe:3d:3a:fd:33:38:74:18:a1:e5:dc:71:b5:cf:2b: 80:57:fe:8f:15:47:87:43:a4:8f:d5:0c:4d:2f:08:aa:d1:23: 27:cf:f2:00:48:ae:0d:2a:45:85:ef:48:65:07:95:c3:04:f6: eb:35:ba:44:32:7b:c2:95:ad:9b:c8:e6:db:ab:d8:d1:99:32: a9:c9:f7:50:34:b6:3e:e9:cc:93:65:2a:04:f2:aa:aa:93:17: ee:c7:11:08:1a:93:fe:82:7a:62:6f:55:aa:30:5b:ea:d0:0e: 1c:5a:0e:ac:ab:4e:a3:22:6b:dd:12:d3:b0:8a:04:c9:b9:64: 55:3f:67:cb:03:f9:73:a6:b6:67:90:55:32:1e:1f:9b:4c:5b: 65:fa:8d:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1 NTM4M0U0RTAeFw0yNTEwMTkxMTAwNTFaFw0yNTEwMjYxMTAwNTFaMBgxFjAUBgNV BAMTDTY4ZjRjNGU0LTgxM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtX3pdFkWf9PObAHOZPKZ6yI1HhH7kYgNFFbHWU7mp3INrsp9Xd1VauOQ2IgGZ dBUIHThxLH7DiLBxQfjjNusagBu8kDmRdjzBIfkVMxVkRbfdbbZCmMuSazauVxot BPjtFbLf7i8oC9rsoKajHR7UM2b5++Pq6//hch7jnLA06E+YNDvwfu5qe0sRx6vA 0xdSFUbCVpfPHvdshLY9ItYVBG4BdlQeuoHSDarwz1XnX73IJN3ZkHAf94WFlV61 KeuuCSg1JWM+UkzzEbwCyLsrO0nomp2djqnpXVTwguNJgXjPB9SB/4flmviMf9O5 LpYmShRBiF2ejffvlkcL2c0RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXHh0vi9A 96wsOeJwo/uPPulYvyUwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIN5cZN4XqYzbf590Ll18Fed4iAExEBUYuJmQ0QDPlxwwfrsI1iYG2vn j5zAEhjUIIUrOLpuVYmC/wLUsLxXOyBB0RSREsP0neJIn0zy4JMZf6eqxoE8IrS1 AhrvIlE2Afmk5asl22YdfJJrwYbiov49Ov0zOHQYoeXccbXPK4BX/o8VR4dDpI/V DE0vCKrRIyfP8gBIrg0qRYXvSGUHlcME9us1ukQye8KVrZvI5tur2NGZMqnJ91A0 tj7pzJNlKgTyqqqTF+7HEQgak/6CemJvVaowW+rQDhxaDqyrTqMia90S07CKBMm5 ZFU/Z8sD+XOmtmeQVTIeH5tMW2X6jWs= -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:50 2025 by rpki-client