$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: jjOY5dCIJbxreZbt29NdC+wzqQZFOOaZv0tUadcUI94= Subject key identifier: 74:4E:EF:54:21:FE:49:35:55:87:06:2F:EB:FB:C7:9A:C0:DC:A8:25 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: DE Signing time: Sun 19 Oct 2025 08:37:37 +0000 Manifest this update: Sun 19 Oct 2025 08:37:36 +0000 Manifest next update: Sun 26 Oct 2025 08:37:36 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: 1MmFDZvMqgdToNyuY9CkR1zhnPX1DQb8YF5ekMfZhHk=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Oct 19 08:37:36 2025 GMT Not After : Oct 26 08:37:36 2025 GMT Subject: CN=68f4a350-8522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:90:40:08:aa:86:3d:33:9e:c5:66:7e:b3: ed:cc:01:04:58:69:ae:86:86:1b:f5:96:a7:ab:e8: 94:7a:e5:44:3d:1d:1d:7c:9c:7d:87:7f:cd:df:c2: f0:75:0c:bf:70:4d:af:a1:6c:5c:f4:08:a5:c2:cd: 2e:14:02:4b:9b:d3:6c:f6:c8:33:ec:f4:ab:df:df: 43:f9:33:6f:12:83:a4:d4:4b:5f:22:14:59:9c:40: 29:7a:42:d8:e5:51:87:1a:d6:77:6d:45:48:4d:bd: e7:ed:ba:a4:2a:7d:59:91:57:4b:a2:df:e2:24:03: c3:a4:fc:3f:9f:38:55:b6:cd:ee:bc:03:fa:d1:5f: 8c:c9:4f:7f:92:39:ce:72:dd:f9:bf:28:bf:de:13: 24:05:4c:66:72:08:cf:b7:b3:50:ab:cd:1b:8a:bf: 3d:d7:a3:27:4a:f3:4e:b0:ba:05:29:9f:a3:bf:f8: af:5a:fd:70:6d:44:8a:ac:c6:4c:e7:76:37:59:fa: d2:32:c7:70:bd:67:0e:03:65:22:43:30:f0:dc:dc: 86:3a:cf:f7:e2:37:8f:45:ef:f5:66:5f:29:c4:5c: 70:1e:82:f6:10:5d:38:05:e9:8b:c8:d6:d2:8b:e5: 4a:3a:62:8a:e1:bb:f8:47:a3:0c:95:32:33:98:b3: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:EF:54:21:FE:49:35:55:87:06:2F:EB:FB:C7:9A:C0:DC:A8:25 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d9:74:be:71:12:d5:d4:fc:bf:47:3d:28:86:c8:eb:45:a0: d4:de:56:eb:d9:f6:4d:44:26:e8:50:01:df:f8:62:95:97:bc: d7:de:d7:e1:6e:c8:5f:ea:3f:74:ea:bd:5d:07:0b:a1:de:4e: c8:01:af:f8:ba:1a:9d:88:3a:55:ef:88:37:89:b6:8c:a0:f1: 14:04:fc:b1:9f:e0:75:9a:a7:24:55:df:ae:ec:e3:fb:cf:ff: 46:cd:53:f5:22:f5:89:aa:e7:a4:07:8b:43:cf:f0:bb:52:3b: 49:47:68:44:6a:c6:dc:e2:e7:7b:51:60:0d:e9:2f:a9:36:ad: 7b:5d:58:3a:0c:f4:9b:2a:5f:05:49:59:53:13:d7:e5:a6:11: 6d:3f:89:58:85:13:ec:ee:5e:83:3c:30:66:5a:1c:1a:6a:ff: 32:ed:45:60:2b:12:ac:8d:48:33:04:7f:13:b8:cd:9e:44:4f: 11:dc:48:ae:8f:49:e8:ca:7e:6b:bf:47:cd:1e:f3:42:52:07: 16:61:de:ce:15:99:f0:7b:a2:8d:30:9c:e8:86:3d:01:7e:9f: 8f:d1:53:b4:48:91:f5:68:8d:d1:8d:52:63:42:34:d2:59:17: 63:06:75:ed:86:33:b2:3e:db:2a:45:00:18:76:be:9f:5e:76: 24:97:58:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUxMDE5MDgzNzM2WhcNMjUxMDI2MDgzNzM2WjAYMRYwFAYD VQQDEw02OGY0YTM1MC04NTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eeQQAiqhj0znsVmfrPtzAEEWGmuhoYb9Zanq+iUeuVEPR0dfJx9h3/N38Lw dQy/cE2voWxc9Ailws0uFAJLm9Ns9sgz7PSr399D+TNvEoOk1EtfIhRZnEApekLY 5VGHGtZ3bUVITb3n7bqkKn1ZkVdLot/iJAPDpPw/nzhVts3uvAP60V+MyU9/kjnO ct35vyi/3hMkBUxmcgjPt7NQq80bir8916MnSvNOsLoFKZ+jv/ivWv1wbUSKrMZM 53Y3WfrSMsdwvWcOA2UiQzDw3NyGOs/34jePRe/1Zl8pxFxwHoL2EF04BemLyNbS i+VKOmKK4bv4R6MMlTIzmLNauwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRO71Qh /kk1VYcGL+v7x5rA3KglMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv2XS+cRLV1Py/Rz0ohsjrRaDU3lbr2fZNRCboUAHf+GKVl7zX3tfh bshf6j906r1dBwuh3k7IAa/4uhqdiDpV74g3ibaMoPEUBPyxn+B1mqckVd+u7OP7 z/9GzVP1IvWJquekB4tDz/C7UjtJR2hEasbc4ud7UWAN6S+pNq17XVg6DPSbKl8F SVlTE9flphFtP4lYhRPs7l6DPDBmWhwaav8y7UVgKxKsjUgzBH8TuM2eRE8R3Eiu j0noyn5rv0fNHvNCUgcWYd7OFZnwe6KNMJzohj0Bfp+P0VO0SJH1aI3RjVJjQjTS WRdjBnXthjOyPtsqRQAYdr6fXnYkl1jF -----END CERTIFICATE-----Generated at Tue Oct 21 02:15:33 2025 by rpki-client