$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: mk9HZGMPj2LSyJPz0wrTif1pFq0RjOs7Ftpi6Czat+4= Subject key identifier: DF:F6:EC:9C:CD:CE:08:76:E9:B4:FA:44:16:47:D8:FF:CF:5E:BE:A3 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 0176 Signing time: Sun 19 Oct 2025 06:25:09 +0000 Manifest this update: Sun 19 Oct 2025 06:25:09 +0000 Manifest next update: Sun 26 Oct 2025 06:25:09 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: tEsSQRWYUKgbvawSfU5RM6cWnOTu3ASow0u+4tZU3gY=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Oct 19 06:25:09 2025 GMT Not After : Oct 26 06:25:09 2025 GMT Subject: CN=68f48445-f6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b6:91:1c:bf:06:9a:06:53:64:13:06:81:98: a4:ac:f2:3a:a6:70:26:f5:c8:31:13:d8:9b:b3:a3: c3:1d:0e:7c:95:5e:2b:2a:b8:61:cf:6b:2a:16:72: 0c:ce:16:2f:98:14:51:c5:30:23:f1:dd:db:b8:2c: 9c:8e:d4:5f:fd:7c:06:74:6e:19:66:ee:27:31:6e: b2:27:ed:b4:7e:25:e7:df:ad:c8:51:fe:70:bf:e1: 97:0f:c3:17:73:a8:84:b9:2e:2c:31:a1:99:22:f6: e2:a0:56:db:ec:28:67:87:58:92:22:10:c0:56:04: e1:11:ee:1a:fd:1e:6d:44:ab:ec:2b:52:b1:af:a6: 71:8a:ba:17:50:66:45:d1:0f:e5:cf:3d:97:e6:d3: b1:e1:f9:c2:22:bd:13:a1:59:be:3e:9b:5b:d2:36: 69:10:fd:bd:a0:65:49:b1:99:9f:94:81:c9:bf:2d: 47:ad:d1:dc:c1:fb:b6:12:6f:d0:59:8b:9a:19:de: 29:c0:78:c1:2b:a0:e6:16:58:58:ba:cb:79:ef:ef: 7c:c8:1d:fa:7b:08:f2:bb:a8:57:f6:47:0c:6f:64: 4c:3c:a8:10:e9:dd:18:f8:9d:32:1f:35:22:61:f1: 6e:5d:59:1d:20:b6:dd:6c:be:1b:28:03:46:04:24: ac:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F6:EC:9C:CD:CE:08:76:E9:B4:FA:44:16:47:D8:FF:CF:5E:BE:A3 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:cc:00:38:fe:75:6b:62:e0:1b:3b:6c:dc:e8:37:ae:41:33: ab:d5:f8:7e:e2:4f:45:32:7c:46:bc:49:f2:ae:aa:00:bf:a4: 85:ca:dc:df:b3:76:af:2e:e3:fa:36:55:c8:2c:8c:89:26:94: 7a:84:80:3a:5c:37:a9:5c:3a:d5:56:12:c8:87:70:cd:13:34: b6:e8:32:a5:96:0f:3a:69:91:e5:ff:55:08:05:1d:c5:04:02: ff:66:9f:44:02:a1:c2:66:b5:f4:fa:2c:3b:89:81:e5:28:85: 55:46:d9:34:2f:27:6a:6b:2a:9c:bc:63:bd:f0:4d:7d:e3:ad: 99:12:f8:3d:e6:41:74:91:8b:c1:a2:55:6f:ba:6c:87:b3:81: e9:09:57:e9:15:c0:8f:00:cc:09:8d:6b:12:ac:1c:f0:7d:9f: 48:26:09:0f:75:73:36:8d:5c:2b:ef:ab:54:36:db:ae:f6:14: 35:07:15:ea:77:34:3a:3d:79:60:3c:82:9e:e5:3f:d9:c8:f9: d2:d1:db:5c:33:2d:31:77:39:01:8c:03:cf:e7:96:f9:56:c0: b9:ca:7a:06:dc:4b:ff:c2:05:d1:25:35:55:1e:df:2a:06:46: 28:ff:3a:a7:2a:7a:5c:ec:ef:c3:42:6f:08:f9:35:90:e3:44: f9:ce:ec:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUxMDE5MDYyNTA5WhcNMjUxMDI2MDYyNTA5WjAYMRYwFAYD VQQDEw02OGY0ODQ0NS1mNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4baRHL8GmgZTZBMGgZikrPI6pnAm9cgxE9ibs6PDHQ58lV4rKrhhz2sqFnIM zhYvmBRRxTAj8d3buCycjtRf/XwGdG4ZZu4nMW6yJ+20fiXn363IUf5wv+GXD8MX c6iEuS4sMaGZIvbioFbb7Chnh1iSIhDAVgThEe4a/R5tRKvsK1Kxr6ZxiroXUGZF 0Q/lzz2X5tOx4fnCIr0ToVm+Pptb0jZpEP29oGVJsZmflIHJvy1HrdHcwfu2Em/Q WYuaGd4pwHjBK6DmFlhYust57+98yB36ewjyu6hX9kcMb2RMPKgQ6d0Y+J0yHzUi YfFuXVkdILbdbL4bKANGBCSsRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/27JzN zgh26bT6RBZH2P/PXr6jMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUzAA4/nVrYuAbO2zc6DeuQTOr1fh+4k9FMnxGvEnyrqoAv6SFytzf s3avLuP6NlXILIyJJpR6hIA6XDepXDrVVhLIh3DNEzS26DKllg86aZHl/1UIBR3F BAL/Zp9EAqHCZrX0+iw7iYHlKIVVRtk0LydqayqcvGO98E19462ZEvg95kF0kYvB olVvumyHs4HpCVfpFcCPAMwJjWsSrBzwfZ9IJgkPdXM2jVwr76tUNtuu9hQ1BxXq dzQ6PXlgPIKe5T/ZyPnS0dtcMy0xdzkBjAPP55b5VsC5ynoG3Ev/wgXRJTVVHt8q BkYo/zqnKnpc7O/DQm8I+TWQ40T5zuzM -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:17 2025 by rpki-client