$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json) Hash identifier: N0ceHXQiG/Mk3cR35ZjtFyTPhyxV2Du5+iplWDBOZeY= Subject key identifier: D6:BE:97:1E:25:F0:EE:2C:D2:2A:8A:6D:61:E5:66:8B:02:9C:96:27 Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft Manifest number: 56 Signing time: Sun 19 Oct 2025 10:36:17 +0000 Manifest this update: Sun 19 Oct 2025 10:36:16 +0000 Manifest next update: Sun 26 Oct 2025 10:36:16 +0000 Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: dN2nbmTmrSlAu2vr+7SciB/XarU2htif9Kz9EM7KS28=) 2: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: h8My7kHHxTir1n7YjOpu1k0UspYcJlhUdG9c241e5p0=) 3: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: xPUr73eaPxAllhq8tmQserAPhMGn1YX9uZTViIiEYlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Validity Not Before: Oct 19 10:36:16 2025 GMT Not After : Oct 26 10:36:16 2025 GMT Subject: CN=68f4bf21-b4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:61:1a:8c:fb:a8:71:9e:d9:a8:c5:aa:9c: 5f:e4:fb:46:4b:fb:9a:ee:98:fe:85:c8:50:7b:95: b3:ea:62:3d:aa:e1:05:cb:e0:8c:87:c7:44:65:fe: 41:00:8c:ae:e3:a6:bf:a7:96:06:b1:56:09:0a:d3: 07:cc:ab:37:cc:b4:d7:8d:e9:7e:95:10:99:67:51: 0d:55:4e:b1:9f:fe:f9:d1:b6:75:4d:0e:c1:3a:fd: 9b:f6:67:9c:39:dd:de:b5:2f:84:9b:3b:39:a9:22: 97:bd:43:9b:44:ed:8a:93:64:bc:78:cc:af:da:c6: fe:01:2b:da:1f:c2:e8:ef:fb:b6:f1:09:cf:6b:0e: 37:bf:d2:a9:89:a5:b1:fe:89:ae:4d:8b:1e:d5:e4: 4b:0e:35:46:ee:b0:ff:d7:f7:3a:07:20:ed:3a:b7: 75:76:27:23:68:1e:39:8a:d3:d6:96:c9:7c:9f:13: a0:28:6d:71:a4:99:9d:8d:09:bc:ab:8b:dc:d2:11: f5:52:42:74:46:dc:2b:fe:ab:07:27:23:cb:9e:6e: ac:ea:a2:2e:8b:d4:9b:10:82:6b:e2:10:b6:0e:76: b0:63:ac:25:fd:bf:6a:11:f2:46:86:f3:1c:10:5f: b9:76:19:c6:a9:f2:95:63:9d:70:fb:9b:6a:16:5f: c3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BE:97:1E:25:F0:EE:2C:D2:2A:8A:6D:61:E5:66:8B:02:9C:96:27 X509v3 Authority Key Identifier: keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4f:6a:c7:23:92:f3:66:dd:3a:a4:49:e4:a3:33:c7:45:54: 82:ef:c0:51:5a:01:ea:8d:b7:a3:a7:bf:6f:f0:ea:4d:26:ac: f2:5a:ec:71:a8:ea:30:2f:46:10:37:65:a6:58:2a:9d:19:d5: e5:c3:19:37:05:27:b4:46:6e:3f:9a:ad:96:d0:fe:18:4a:9d: 43:87:75:96:cd:38:ee:aa:4e:88:08:be:51:75:b0:d2:cc:d7: af:e6:b9:bc:42:e1:c1:9e:48:cf:8e:14:f3:cb:d3:19:08:cc: 6f:14:8c:4d:c6:6a:5d:5d:0a:f4:1c:69:d4:7d:7c:6d:c0:49: 6e:13:8f:89:c6:f8:64:72:1c:16:50:99:36:7e:e3:3e:7e:ef: e4:a2:a5:2a:15:79:1c:30:2d:57:f0:3b:11:7a:c4:8c:65:15: d2:35:6d:e9:d7:bc:90:b9:88:ea:ec:39:58:12:16:ba:75:3a: dd:b1:a1:ca:0d:a4:af:61:9b:e0:38:38:72:b9:5a:8e:9c:79: 09:6f:ec:1a:38:e6:01:ab:05:9c:cf:61:1c:73:94:64:da:d6: 4e:88:7b:67:70:4e:96:54:0b:72:53:1a:f1:1d:32:b4:97:46: 54:3a:1e:5f:7d:5f:9a:86:0b:39:2a:59:60:4a:05:61:05:b6: ba:5c:81:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTQ4MTExMC8GA1UEBRMoRjRCN0QwNDQzQjhDRkY5QjQwOThCQjhDRUNCRUQ4N0ZD RUE5QkFEMjAeFw0yNTEwMTkxMDM2MTZaFw0yNTEwMjYxMDM2MTZaMBgxFjAUBgNV BAMTDTY4ZjRiZjIxLWI0ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIBGEajPuocZ7ZqMWqnF/k+0ZL+5rumP6FyFB7lbPqYj2q4QXL4IyHx0Rl/kEA jK7jpr+nlgaxVgkK0wfMqzfMtNeN6X6VEJlnUQ1VTrGf/vnRtnVNDsE6/Zv2Z5w5 3d61L4SbOzmpIpe9Q5tE7YqTZLx4zK/axv4BK9ofwujv+7bxCc9rDje/0qmJpbH+ ia5Nix7V5EsONUbusP/X9zoHIO06t3V2JyNoHjmK09aWyXyfE6AobXGkmZ2NCbyr i9zSEfVSQnRG3Cv+qwcnI8uebqzqoi6L1JsQgmviELYOdrBjrCX9v2oR8kaG8xwQ X7l2Gcap8pVjnXD7m2oWX8OzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1r6XHiXw 7izSKoptYeVmiwKclicwHwYDVR0jBBgwFoAU9LfQRDuM/5tAmLuM7L7Yf86putIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NDgxL0ExODU0REUwMkJE ODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0QW1MdU03TDdZZjg2cHV0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUxmUVJEdU1fNXRBbUx1TTdMN1lmODZwdXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NDgxL0ExODU0REUwMkJEODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0 QW1MdU03TDdZZjg2cHV0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABRPascjkvNm3TqkSeSjM8dFVILvwFFaAeqNt6Onv2/w6k0mrPJa7HGo 6jAvRhA3ZaZYKp0Z1eXDGTcFJ7RGbj+arZbQ/hhKnUOHdZbNOO6qTogIvlF1sNLM 16/mubxC4cGeSM+OFPPL0xkIzG8UjE3Gal1dCvQcadR9fG3ASW4Tj4nG+GRyHBZQ mTZ+4z5+7+SipSoVeRwwLVfwOxF6xIxlFdI1benXvJC5iOrsOVgSFrp1Ot2xocoN pK9hm+A4OHK5Wo6ceQlv7Bo45gGrBZzPYRxzlGTa1k6Ie2dwTpZUC3JTGvEdMrSX RlQ6Hl99X5qGCzkqWWBKBWEFtrpcgeE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:07 2025 by rpki-client