$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: +CpkEX93a6kY1ATMT3gdayjM3VYsNo3gqmf7+4xQaSU= Subject key identifier: 49:58:EC:4D:A1:4C:F4:28:6D:5D:CC:31:A2:5D:3B:45:B2:04:A2:7A Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 3516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 4816 Signing time: Mon 20 Oct 2025 14:21:56 +0000 Manifest this update: Mon 20 Oct 2025 14:21:55 +0000 Manifest next update: Mon 27 Oct 2025 14:21:55 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: lMQkSxA/TqU6LRwHYvOZlwIyZwQ8L4c5U26aAY+H/BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13590 (0x3516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: Oct 20 14:21:55 2025 GMT Not After : Oct 27 14:21:55 2025 GMT Subject: CN=68f64583-fa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:8f:0f:9f:9c:98:57:87:65:0e:71:52:b6: 5c:21:0e:22:61:8a:0c:59:a9:f2:5c:6c:89:a5:4c: 8f:31:5d:5b:97:13:10:89:c7:c1:70:c5:fa:97:bd: e1:8e:4a:d7:e7:56:a8:8e:9c:0a:b7:0f:fe:c4:4b: 34:b3:79:f0:77:63:2c:c8:32:37:29:ee:bd:ea:12: cb:eb:db:a5:78:17:48:0e:c5:66:3d:7f:6e:d7:1c: 88:2d:43:78:a1:b2:4f:c3:49:04:7c:86:4a:6b:08: 7d:5c:05:f2:69:a4:b2:0f:57:29:f7:89:bf:dd:4a: 3b:54:b4:bb:1c:dc:73:cc:26:6f:68:57:9b:7a:7d: 26:e0:28:ea:3e:d4:c5:19:5a:dd:83:3e:2e:02:3b: 1b:be:1a:73:da:a7:9d:86:e5:9a:4d:9b:f8:7e:f0: b1:94:83:b2:9a:43:0a:6e:24:09:1e:7a:1c:58:56: 51:60:d8:ff:c0:f8:0d:12:51:d2:f1:d7:74:55:fc: b5:42:15:87:d9:d1:a2:83:64:f6:98:b3:f8:d1:d4: 49:e6:2f:89:00:72:ab:3b:a0:1a:f3:43:93:b9:e0: 63:ae:62:23:df:31:bd:49:d1:fd:d9:9c:83:e9:7e: f9:db:54:6e:b5:39:b4:90:51:d5:31:f8:74:0c:8f: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:58:EC:4D:A1:4C:F4:28:6D:5D:CC:31:A2:5D:3B:45:B2:04:A2:7A X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a3:91:4e:39:e3:44:af:82:15:96:79:ed:22:93:bf:c0:2a: 45:1a:5b:da:e6:75:b7:df:a6:03:fd:fe:43:e4:9e:bd:6f:bd: d6:f0:72:49:aa:29:7d:4a:68:65:dc:da:f9:bd:f8:e5:20:cb: 09:6e:51:73:c8:59:e2:1e:bc:c4:ca:87:b2:f3:a2:6b:ae:bf: 7d:dc:27:26:3b:42:d1:b6:5d:21:6c:94:31:29:3f:d9:ba:83: 68:39:14:d0:8d:e1:55:d0:95:d0:03:c5:6d:61:f1:55:2b:91: 64:ae:eb:7e:15:a2:b5:bf:54:25:ba:a1:92:d3:66:6a:52:dd: cf:63:1f:94:01:40:65:66:c7:ea:07:d3:b7:c0:d8:82:4d:ad: 06:08:f8:ee:26:dd:47:25:e4:f3:47:42:9a:c5:ea:1c:ca:65: 33:ca:e4:a5:54:ca:1f:05:27:a9:8f:4a:1a:1d:36:ae:da:ab: ce:76:2e:ac:c0:48:fc:97:6a:28:57:53:08:62:b4:b7:49:36: 81:e0:1b:3a:9f:78:6a:92:c3:1e:66:21:7a:a7:cf:17:a7:89: cf:41:19:4c:22:31:ea:c9:88:5e:b0:fd:2e:8e:86:1a:bf:40: 95:76:97:64:19:e1:71:d5:ed:57:b5:d1:97:f4:db:b9:29:75: 48:b8:19:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjUxMDIwMTQyMTU1WhcNMjUxMDI3MTQyMTU1WjAYMRYwFAYD VQQDEw02OGY2NDU4My1mYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L+PD5+cmFeHZQ5xUrZcIQ4iYYoMWanyXGyJpUyPMV1blxMQicfBcMX6l73h jkrX51aojpwKtw/+xEs0s3nwd2MsyDI3Ke696hLL69uleBdIDsVmPX9u1xyILUN4 obJPw0kEfIZKawh9XAXyaaSyD1cp94m/3Uo7VLS7HNxzzCZvaFeben0m4CjqPtTF GVrdgz4uAjsbvhpz2qedhuWaTZv4fvCxlIOymkMKbiQJHnocWFZRYNj/wPgNElHS 8dd0Vfy1QhWH2dGig2T2mLP40dRJ5i+JAHKrO6Aa80OTueBjrmIj3zG9SdH92ZyD 6X7521RutTm0kFHVMfh0DI/e1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElY7E2h TPQobV3MMaJdO0WyBKJ6MB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZo5FOOeNEr4IVlnntIpO/wCpFGlva5nW336YD/f5D5J69b73W8HJJ qil9Smhl3Nr5vfjlIMsJblFzyFniHrzEyoey86Jrrr993CcmO0LRtl0hbJQxKT/Z uoNoORTQjeFV0JXQA8VtYfFVK5Fkrut+FaK1v1QluqGS02ZqUt3PYx+UAUBlZsfq B9O3wNiCTa0GCPjuJt1HJeTzR0KaxeocymUzyuSlVMofBSepj0oaHTau2qvOdi6s wEj8l2ooV1MIYrS3STaB4Bs6n3hqksMeZiF6p88Xp4nPQRlMIjHqyYhesP0ujoYa v0CVdpdkGeFx1e1XtdGX9Nu5KXVIuBlV -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:28 2025 by rpki-client