$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: wi16vBkHLRfIHv9nMninAxj9FxlHIMe/6kkIqSf6h9Q= Subject key identifier: 09:76:98:B0:69:90:7E:9F:C7:6B:D8:18:E4:76:6A:CC:5B:35:87:61 Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: DB Signing time: Sun 19 Oct 2025 08:37:34 +0000 Manifest this update: Sun 19 Oct 2025 08:37:33 +0000 Manifest next update: Sun 26 Oct 2025 08:37:33 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: diVJR0MS6C9SmWsY43tEa+R6uQ719KAvNZsNgi8UM74=) 2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Oct 19 08:37:33 2025 GMT Not After : Oct 26 08:37:33 2025 GMT Subject: CN=68f4a34e-1736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:a3:f9:01:1e:47:c8:2b:84:5c:d7:04:4b: c5:d8:c2:30:f9:4a:96:b8:4c:26:ee:3e:ca:f7:27: b3:c5:a6:e7:3b:e2:01:04:e4:56:21:de:7d:66:8a: 93:98:e0:7a:22:4d:f7:29:b6:5d:55:82:ac:5e:1e: a9:19:b3:3d:17:35:77:81:1b:1d:09:06:6d:b7:66: 8b:c3:51:81:d9:f8:22:48:93:d9:ce:ab:e0:5e:82: a9:b8:c5:a3:9a:cb:d1:9e:f3:42:ef:e9:ce:d8:4f: 50:f6:83:6a:ec:38:02:d2:2d:05:58:54:8a:56:71: df:3b:1a:fe:2a:fe:c1:4b:6f:dd:fa:5d:c4:73:7f: b9:ab:81:22:92:9c:42:90:b2:41:85:a1:cc:ff:1d: 04:a1:c8:be:a3:01:da:03:4c:14:54:2f:8c:9f:5b: 7f:f5:6a:4b:42:5a:3a:37:15:14:aa:37:1d:87:cf: aa:f8:ec:6a:6f:bf:6a:1f:14:ad:12:11:49:f3:0f: 88:70:42:0d:02:a5:e5:61:be:27:4e:ab:92:09:d1: 2a:4d:d0:9a:cf:35:cb:fd:72:63:b6:0e:2a:62:ed: 56:8a:9f:93:93:9c:fc:ca:69:91:a1:77:ee:78:1e: 7c:47:9e:82:43:d7:85:de:c7:f5:cc:86:1d:f9:ce: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:98:B0:69:90:7E:9F:C7:6B:D8:18:E4:76:6A:CC:5B:35:87:61 X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5f:63:be:e4:4e:17:b2:7f:54:c4:69:4a:f6:42:00:a8:1f: ec:80:d2:9b:bb:8d:3d:21:08:05:3e:72:48:a3:7c:64:3e:0c: 8d:3c:e9:ce:66:56:b2:8b:1e:3c:5a:ce:78:58:89:f6:c3:47: f0:cd:23:12:7d:c2:a3:87:0d:51:6b:78:62:e0:77:bc:04:6d: 39:30:5c:ed:f6:7f:e2:9d:30:f5:99:21:d9:44:e4:7b:8a:47: 50:60:3d:7d:2e:19:53:93:53:c0:24:01:bb:a4:1b:e6:a9:3d: 05:0e:91:c0:15:5a:1a:15:cf:b6:10:be:8e:66:e5:09:ae:f8: a8:f4:0f:fe:9c:c6:57:ec:21:50:68:68:5d:49:37:1a:c8:e0: 4d:45:23:54:35:3a:8b:f2:43:b3:2e:0a:a2:99:c7:4e:ed:cd: b2:ad:ca:18:d6:bc:ef:b9:fd:73:c1:c0:71:ee:b7:47:2f:26: b6:e5:58:21:87:35:c8:eb:ba:fb:47:25:f2:71:aa:12:aa:0a: 50:12:3a:1a:a4:83:de:45:ed:5e:a8:67:96:7f:9e:46:b1:02: b7:fa:58:07:43:3d:fb:2d:87:8e:97:8d:46:ec:cf:ea:8d:e9: b9:91:b3:82:97:c7:30:ae:de:d3:cc:a9:78:e9:64:85:e9:47: 6b:4d:40:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUxMDE5MDgzNzMzWhcNMjUxMDI2MDgzNzMzWjAYMRYwFAYD VQQDEw02OGY0YTM0ZS0xNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGej+QEeR8grhFzXBEvF2MIw+UqWuEwm7j7K9yezxabnO+IBBORWId59ZoqT mOB6Ik33KbZdVYKsXh6pGbM9FzV3gRsdCQZtt2aLw1GB2fgiSJPZzqvgXoKpuMWj msvRnvNC7+nO2E9Q9oNq7DgC0i0FWFSKVnHfOxr+Kv7BS2/d+l3Ec3+5q4EikpxC kLJBhaHM/x0Eoci+owHaA0wUVC+Mn1t/9WpLQlo6NxUUqjcdh8+q+Oxqb79qHxSt EhFJ8w+IcEINAqXlYb4nTquSCdEqTdCazzXL/XJjtg4qYu1Wip+Tk5z8ymmRoXfu eB58R56CQ9eF3sf1zIYd+c4v3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl2mLBp kH6fx2vYGOR2asxbNYdhMB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2X2O+5E4Xsn9UxGlK9kIAqB/sgNKbu409IQgFPnJIo3xkPgyNPOnO Zlayix48Ws54WIn2w0fwzSMSfcKjhw1Ra3hi4He8BG05MFzt9n/inTD1mSHZROR7 ikdQYD19LhlTk1PAJAG7pBvmqT0FDpHAFVoaFc+2EL6OZuUJrvio9A/+nMZX7CFQ aGhdSTcayOBNRSNUNTqL8kOzLgqimcdO7c2yrcoY1rzvuf1zwcBx7rdHLya25Vgh hzXI67r7RyXycaoSqgpQEjoapIPeRe1eqGeWf55GsQK3+lgHQz37LYeOl41G7M/q jem5kbOCl8cwrt7TzKl46WSF6UdrTUB8 -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:44 2025 by rpki-client