$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: EWyI6vrkI8jInyjeTlUnopqLWrCF78ojvzmnR2Tk69I= Subject key identifier: 58:83:D2:A7:87:B3:6E:94:65:90:E1:B6:07:EE:61:55:7E:93:D2:E0 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 223B Signing time: Sat 18 Oct 2025 16:08:11 +0000 Manifest this update: Sat 18 Oct 2025 16:08:10 +0000 Manifest next update: Sat 25 Oct 2025 16:08:10 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: L1BmvK69CTVotQkxGQ6IW/IB5mkA1WBAPbH9rLhA7Q4=) 2: BC5760CCA5D111F0920A5141C4F9AE02.roa (hash: zr98exTbiR01RVEMn168wagRdGn/6JpqbLvEV4Hy3Ys=) 3: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: SkqOP3HGJvJNACUcXS+nN5Zr4p2eXR8/AXO6wYAFnB4=) 4: B6193EAEA9C511F09E184A44C4F9AE02.roa (hash: ICS/kSmPGxTeB3htB7GP0dydiPm6U9ECVjxjKP8r5ms=) 5: 756C3370F38611EFBF7CEF35C4F9AE02.roa (hash: I206azeDw7188f2RrvVA5wF12wBicT93JJVfui6x0u0=) 6: 114016CE65DB11F0A01C3E60C4F9AE02.roa (hash: ErUpQfksEEfKD74XB+FFiaOlKOxRk0KEFfC9SCixKUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8824 (0x2278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Oct 18 16:08:10 2025 GMT Not After : Oct 25 16:08:10 2025 GMT Subject: CN=68f3bb6a-141c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:40:d5:73:39:6f:42:2a:cf:2d:64:03:b0: 21:79:5c:7a:49:1a:00:22:53:5b:31:8b:1f:b2:df: f3:9b:b3:21:85:5c:d3:92:95:c1:f9:45:b2:34:a6: 31:59:0d:cd:21:44:1b:6f:d7:96:4e:d8:c9:39:96: 85:f0:ce:72:72:50:fa:15:c8:46:f8:2d:ee:b2:62: 02:97:c9:e1:4e:0f:f8:62:0b:7f:ad:06:44:94:2d: 53:73:9f:e7:78:25:a8:fd:90:5c:dc:9d:f9:49:86: 2b:87:f8:39:d3:c3:48:f5:e8:b6:a8:63:58:97:91: 0d:f8:cf:1c:60:53:22:65:62:d9:16:ff:e0:3f:e2: 7c:c7:bc:70:43:76:08:86:3b:f9:cc:f5:84:65:c6: 3b:08:6f:e5:db:68:f0:9b:7b:03:f4:58:11:b0:b0: 91:93:ef:7a:93:c6:ec:8e:0e:b1:f3:94:00:6c:54: 17:58:25:dd:1d:fd:b8:2e:9d:00:cb:11:f8:4a:50: 96:76:e1:18:47:e4:37:7c:d5:9e:88:e0:44:a6:5f: 43:e5:37:45:63:b7:16:e9:99:7e:10:d2:70:75:df: 25:cb:05:9a:73:7f:33:df:85:3d:b2:47:56:97:f3: c6:cd:cf:14:e9:3d:cc:7c:4c:81:60:66:18:b9:13: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:83:D2:A7:87:B3:6E:94:65:90:E1:B6:07:EE:61:55:7E:93:D2:E0 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ff:8e:82:4c:3a:93:3a:15:39:b7:f0:cb:f3:3f:8b:2b:47: 86:78:27:aa:53:64:ba:7e:98:2b:e3:1f:7f:b6:1b:31:16:29: ce:cb:96:e7:3a:cf:e6:ab:8d:c1:21:be:55:69:d9:3e:44:00: 27:fa:96:e9:ac:e9:41:e3:00:a6:22:41:21:7c:1d:79:6f:70: 28:88:e2:c9:d6:e8:9a:de:f2:bb:ea:18:c3:e1:9d:17:38:c2: db:79:dc:1c:6f:50:5a:cc:a9:0b:e6:61:01:00:91:ba:1b:97: 5c:b0:36:5a:07:c5:83:47:e8:22:78:c5:f3:14:59:57:f3:1b: 44:31:4b:c6:a3:6a:ce:8c:66:88:a7:d6:31:41:91:76:15:ab: 7e:df:a4:41:d8:db:56:03:26:76:df:45:ad:36:a5:f5:af:3c: 08:db:68:ca:ee:06:a3:b1:dc:20:ca:71:81:12:50:47:da:c5: cd:24:0a:c6:55:ad:6a:dc:21:a0:13:f9:18:1d:0b:7a:12:f8: 36:87:0f:00:7d:72:40:6e:a0:bd:e2:00:de:e1:0c:36:cc:7b: 45:6d:ae:ce:7b:d8:c4:a1:3f:47:65:a3:1f:19:6c:9a:18:f1: f5:50:f8:e1:d1:e3:fc:ee:57:7b:65:e1:67:03:b7:22:69:88: 40:10:58:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUxMDE4MTYwODEwWhcNMjUxMDI1MTYwODEwWjAYMRYwFAYD VQQDEw02OGYzYmI2YS0xNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgBA1XM5b0Iqzy1kA7AheVx6SRoAIlNbMYsfst/zm7MhhVzTkpXB+UWyNKYx WQ3NIUQbb9eWTtjJOZaF8M5yclD6FchG+C3usmICl8nhTg/4Ygt/rQZElC1Tc5/n eCWo/ZBc3J35SYYrh/g508NI9ei2qGNYl5EN+M8cYFMiZWLZFv/gP+J8x7xwQ3YI hjv5zPWEZcY7CG/l22jwm3sD9FgRsLCRk+96k8bsjg6x85QAbFQXWCXdHf24Lp0A yxH4SlCWduEYR+Q3fNWeiOBEpl9D5TdFY7cW6Zl+ENJwdd8lywWac38z34U9skdW l/PGzc8U6T3MfEyBYGYYuRPZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiD0qeH s26UZZDhtgfuYVV+k9LgMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo/46CTDqTOhU5t/DL8z+LK0eGeCeqU2S6fpgr4x9/thsxFinOy5bn Os/mq43BIb5Vadk+RAAn+pbprOlB4wCmIkEhfB15b3AoiOLJ1uia3vK76hjD4Z0X OMLbedwcb1BazKkL5mEBAJG6G5dcsDZaB8WDR+gieMXzFFlX8xtEMUvGo2rOjGaI p9YxQZF2Fat+36RB2NtWAyZ230WtNqX1rzwI22jK7gajsdwgynGBElBH2sXNJArG Va1q3CGgE/kYHQt6Evg2hw8AfXJAbqC94gDe4Qw2zHtFba7Oe9jEoT9HZaMfGWya GPH1UPjh0eP87ld7ZeFnA7ciaYhAEFgV -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:11 2025 by rpki-client