$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: vSVMl4UW1itx/6yuI/OTbXMPhug3N38jmANUq2oT0mE= Subject key identifier: 4D:A2:BF:BF:FE:55:BD:A3:21:70:B2:0A:46:6D:00:EB:04:81:2D:3E Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 5A Signing time: Sun 19 Oct 2025 10:34:09 +0000 Manifest this update: Sun 19 Oct 2025 10:34:09 +0000 Manifest next update: Sun 26 Oct 2025 10:34:08 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: tF2WLRmoxPeJ7i3bNskrMqpI6JMpx/ryKpTLN0lkEe8=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Oct 19 10:34:09 2025 GMT Not After : Oct 26 10:34:08 2025 GMT Subject: CN=68f4bea1-65d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:fa:ea:56:1b:dd:0b:cb:21:87:96:d3:d8: e6:f4:b5:f4:d3:62:0c:ef:b1:62:8d:d1:0d:94:3d: 2a:17:75:dd:b6:49:cb:be:ae:fb:52:c7:48:99:cc: b8:02:19:79:4f:d8:87:7d:6d:f2:a6:c0:78:7d:e9: 9f:bb:0b:31:07:97:67:5c:e0:21:0d:25:4a:f0:7c: 87:30:6b:6c:8c:ba:25:6e:1b:44:fc:25:c5:8c:89: 03:98:be:7c:19:4e:67:83:81:53:6d:36:c5:78:14: a7:b7:ea:f4:f9:32:2c:2b:fa:37:56:4f:6a:91:c0: 15:44:b1:76:0c:59:60:b3:e9:27:af:81:a6:e8:f6: 48:73:7d:2e:c6:a2:ef:0e:0e:9b:78:3a:37:c8:6a: ed:ae:90:75:5c:a0:08:88:ee:8d:c8:da:ab:e4:17: dd:cb:d3:1e:c7:c2:7a:9b:7f:84:66:76:93:ce:b4: 30:5d:5b:0e:60:14:a0:0c:d3:b1:c7:2a:ee:73:83: 8d:df:8b:1d:4c:a2:7b:d4:d0:80:92:59:d0:ed:72: 74:8c:93:04:c3:65:53:60:80:4a:3b:02:9d:e7:ab: 7d:ae:58:9c:d1:45:83:76:2c:54:ee:4f:4f:0c:a9: cc:f6:79:36:63:23:a4:49:5f:0e:25:7e:70:82:e1: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A2:BF:BF:FE:55:BD:A3:21:70:B2:0A:46:6D:00:EB:04:81:2D:3E X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:2a:a8:14:c9:60:b4:d8:cf:4e:bf:8d:44:cf:b7:b4:c1:b6: 02:67:0d:75:bb:9a:d3:e0:36:d5:cb:6f:8b:8c:4f:b9:d3:8b: c6:bd:37:da:0b:2b:70:be:de:08:a1:94:9f:41:06:55:e6:12: 7d:75:b3:4e:e0:c3:e4:3a:78:6b:80:09:1a:30:ea:a3:f4:9c: 05:4d:d4:a0:01:15:6a:03:b3:bb:3f:c9:3f:86:d8:a6:b7:c4: f6:00:a0:75:b4:c4:db:dc:30:3d:1e:33:23:19:d4:0d:93:64: 03:0b:ae:d6:c0:f6:ea:83:f6:8b:b0:98:3b:46:9b:49:fe:78: 62:b1:51:6c:0c:ef:1d:94:52:1c:d4:c1:39:d8:dc:77:28:e2: 43:09:fa:69:5e:7e:70:a6:41:e4:be:aa:6f:32:9a:c7:99:fd: 46:c7:a9:fd:d0:83:9f:8d:37:40:d2:4f:1d:96:97:26:0c:56: 28:85:ca:a9:2a:df:a7:e1:50:c6:0a:ad:da:cf:c4:07:4a:70: 64:b4:ab:4e:38:e9:51:a8:2a:bd:b8:65:4b:77:6b:f8:63:9f: d0:c1:e8:57:46:11:61:f9:cc:ea:4e:ff:f6:34:24:a9:d4:a4: 89:2f:0a:f5:a4:70:d3:77:5a:da:60:14:82:49:2d:d3:97:e7: 2f:b6:c8:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTEwMTkxMDM0MDlaFw0yNTEwMjYxMDM0MDhaMBgxFjAUBgNV BAMTDTY4ZjRiZWExLTY1ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnF/rqVhvdC8shh5bT2Ob0tfTTYgzvsWKN0Q2UPSoXdd22Scu+rvtSx0iZzLgC GXlP2Id9bfKmwHh96Z+7CzEHl2dc4CENJUrwfIcwa2yMuiVuG0T8JcWMiQOYvnwZ TmeDgVNtNsV4FKe36vT5Miwr+jdWT2qRwBVEsXYMWWCz6Sevgabo9khzfS7Gou8O Dpt4OjfIau2ukHVcoAiI7o3I2qvkF93L0x7Hwnqbf4RmdpPOtDBdWw5gFKAM07HH Ku5zg43fix1MonvU0ICSWdDtcnSMkwTDZVNggEo7Ap3nq32uWJzRRYN2LFTuT08M qcz2eTZjI6RJXw4lfnCC4VpXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTaK/v/5V vaMhcLIKRm0A6wSBLT4wHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkqqBTJYLTYz06/jUTPt7TBtgJnDXW7mtPgNtXLb4uMT7nTi8a9N9oL K3C+3gihlJ9BBlXmEn11s07gw+Q6eGuACRow6qP0nAVN1KABFWoDs7s/yT+G2Ka3 xPYAoHW0xNvcMD0eMyMZ1A2TZAMLrtbA9uqD9ouwmDtGm0n+eGKxUWwM7x2UUhzU wTnY3Hco4kMJ+mlefnCmQeS+qm8ymseZ/UbHqf3Qg5+NN0DSTx2WlyYMViiFyqkq 36fhUMYKrdrPxAdKcGS0q0446VGoKr24ZUt3a/hjn9DB6FdGEWH5zOpO//Y0JKnU pIkvCvWkcNN3WtpgFIJJLdOX5y+2yFw= -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:10 2025 by rpki-client