$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: 6FM2USjHaKueM5UeLH2yknEvoaYlZr7fmCGlHyAKEgQ= Subject key identifier: 92:F8:4B:6B:51:A9:C0:AD:E5:79:55:B8:45:73:58:6D:6E:32:06:C5 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0B8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0B75 Signing time: Sat 18 Oct 2025 19:58:58 +0000 Manifest this update: Sat 18 Oct 2025 19:58:57 +0000 Manifest next update: Sat 25 Oct 2025 19:58:57 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: LygcydWa5PopPe5MFcLfJ4LPpKervkZBk7qnKeD5hYo=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: eQjSLvcTPm64WJsuRzl8viIdz6G/ld4B/GelvP5rP4g=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1f6aFvhkVa/N7iAPf2YxVBmmTzpTWpZU9hllszfOpEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Oct 18 19:58:57 2025 GMT Not After : Oct 25 19:58:57 2025 GMT Subject: CN=68f3f182-5590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:65:2b:aa:9d:26:a6:b3:91:db:ac:13:91: 57:c3:57:13:f8:68:54:df:2e:8a:e5:2d:ce:86:21: 28:53:06:d1:1b:2e:76:12:c3:6c:57:ba:50:63:b4: 30:26:41:4c:a3:d0:be:9a:36:06:15:f3:1e:ad:51: 1b:4a:71:27:5a:c7:e0:40:2c:10:43:db:70:5b:92: 1e:d8:ed:61:2b:7d:8a:f2:c7:d5:c4:c1:1b:0f:a0: 18:3f:09:ff:62:88:6c:ce:1c:ec:6b:ac:0e:68:d5: 2a:5e:86:5c:2c:90:66:a7:1b:7a:00:e6:9f:68:60: 33:7e:96:0f:c5:ae:ac:91:aa:e9:48:af:9f:a2:e8: 77:0c:de:67:1e:dd:39:74:67:43:7a:1e:09:08:e6: 10:06:04:8f:0e:46:99:dc:2f:d1:a5:55:6c:23:cb: a1:77:eb:3e:51:7a:a2:42:5d:95:16:46:23:0c:e2: 18:2a:ac:04:b2:05:57:58:ef:49:1d:e1:53:be:a5: 3e:d8:a1:ea:d9:69:c3:c9:eb:cf:f5:5d:46:5c:77: eb:21:5f:34:49:92:f9:78:3c:d9:38:fe:81:54:8e: a4:9d:fb:86:11:7b:7b:1e:86:15:de:fd:34:5d:fa: da:20:62:88:1b:b8:d6:b6:cd:85:4d:6b:73:3d:26: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F8:4B:6B:51:A9:C0:AD:E5:79:55:B8:45:73:58:6D:6E:32:06:C5 X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:64:98:6c:18:bf:99:4e:b4:c3:4e:4c:e2:fe:78:7a:2a:56: 90:94:e4:cd:79:11:ff:a6:8c:ec:13:89:3c:1d:f9:bc:9d:4a: c0:41:f3:0e:5b:19:04:0a:41:92:c5:bc:4c:ce:7f:4d:c8:79: 5c:93:63:78:f7:c2:13:80:44:13:4b:72:ae:25:b6:a4:14:c3: 9c:9f:08:9a:fc:ff:d8:53:aa:97:66:42:4f:e2:ea:f2:d7:e4: c9:57:95:92:54:35:a2:ef:e3:e0:13:d8:b3:f4:84:36:43:99: 23:a0:69:11:27:0d:5a:95:7a:ea:b3:e5:bc:3d:f3:fe:f2:9b: 3b:bc:7c:78:d7:49:b2:bd:d8:0a:71:5c:5f:9b:79:83:11:9e: e5:4e:c9:5f:58:65:32:79:07:ff:8e:d2:ec:63:f9:f2:44:ae: 70:e2:29:f5:db:49:1e:c8:2b:2f:58:86:4e:55:60:d3:08:9e: 0d:27:5f:d9:11:c3:35:80:0e:66:77:9c:3c:fe:b8:f8:e6:ae: 86:09:64:fa:4d:27:d8:3c:c1:5d:1d:f6:1b:ee:f9:84:07:87: f3:b2:8b:b8:dc:7b:82:99:3f:7c:a7:16:8e:cc:0d:39:9e:cb: d9:f5:7c:71:c1:46:e4:5d:d6:d7:b2:76:03:45:dd:35:62:c3: 01:8c:ac:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUxMDE4MTk1ODU3WhcNMjUxMDI1MTk1ODU3WjAYMRYwFAYD VQQDEw02OGYzZjE4Mi01NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsftlK6qdJqazkdusE5FXw1cT+GhU3y6K5S3OhiEoUwbRGy52EsNsV7pQY7Qw JkFMo9C+mjYGFfMerVEbSnEnWsfgQCwQQ9twW5Ie2O1hK32K8sfVxMEbD6AYPwn/ Yohszhzsa6wOaNUqXoZcLJBmpxt6AOafaGAzfpYPxa6skarpSK+fouh3DN5nHt05 dGdDeh4JCOYQBgSPDkaZ3C/RpVVsI8uhd+s+UXqiQl2VFkYjDOIYKqwEsgVXWO9J HeFTvqU+2KHq2WnDyevP9V1GXHfrIV80SZL5eDzZOP6BVI6knfuGEXt7HoYV3v00 XfraIGKIG7jWts2FTWtzPSYhgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL4S2tR qcCt5XlVuEVzWG1uMgbFMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsZJhsGL+ZTrTDTkzi/nh6KlaQlOTNeRH/pozsE4k8Hfm8nUrAQfMO WxkECkGSxbxMzn9NyHlck2N498ITgEQTS3KuJbakFMOcnwia/P/YU6qXZkJP4ury 1+TJV5WSVDWi7+PgE9iz9IQ2Q5kjoGkRJw1alXrqs+W8PfP+8ps7vHx410myvdgK cVxfm3mDEZ7lTslfWGUyeQf/jtLsY/nyRK5w4in120keyCsvWIZOVWDTCJ4NJ1/Z EcM1gA5md5w8/rj45q6GCWT6TSfYPMFdHfYb7vmEB4fzsou43HuCmT98pxaOzA05 nsvZ9XxxwUbkXdbXsnYDRd01YsMBjKwh -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:22 2025 by rpki-client