$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: WuZgpOx9P0CXFm6rBtk6waDHwcQM7ZWY3Ra9ClXh38c= Subject key identifier: 6D:A5:48:9F:37:9D:5A:87:28:86:F2:A8:43:6F:6B:41:0F:EA:B1:C4 Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 01AF Signing time: Sun 19 Oct 2025 05:39:28 +0000 Manifest this update: Sun 19 Oct 2025 05:39:27 +0000 Manifest next update: Sun 26 Oct 2025 05:39:27 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: nZ3N/ylDpoQ/3zrqrAgp+E3nHwMjK667aDuHsivsKLE=) 2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: 64T0QVyxSFq/Fdklobji66MEyYuHugmocsuY/nRlqQ0=) 3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: i/4qbq1olZ1yrHtpcck4H45nkVfaKLB8DIL2yG7lkLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Oct 19 05:39:27 2025 GMT Not After : Oct 26 05:39:27 2025 GMT Subject: CN=68f47990-a63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:57:a1:15:59:a2:e6:ca:92:ac:42:ed:90: 71:11:60:75:d7:78:3f:0f:51:a8:64:ff:b0:61:77: 15:c6:ab:85:3f:59:7c:d1:01:3c:3e:cb:f0:0e:da: 0a:f2:42:3f:54:c9:db:b4:03:96:e3:79:c6:9a:09: 49:93:ec:7e:90:78:50:88:f4:64:d3:97:7f:e0:78: d5:c0:c3:fe:ee:94:6f:7c:12:44:af:d9:69:f1:82: 76:eb:2f:96:8b:cd:8a:a4:47:09:32:0c:0f:8d:a1: b5:50:b0:5d:db:bd:34:43:2e:e7:f3:0b:6d:79:42: 7e:de:f2:d8:51:84:a2:c7:8c:23:9f:18:49:9c:ef: a8:7e:91:43:5a:71:c1:c6:d8:6d:71:5a:eb:06:51: 62:61:99:fa:17:b8:32:77:10:22:8e:d8:67:c2:57: 89:28:11:3f:de:5d:9c:bc:48:de:65:4e:56:33:b2: f3:62:9a:0c:77:51:0b:4d:ce:18:16:2a:c0:fc:59: b1:0e:e2:a5:a4:2b:b5:b9:ed:06:a0:95:a3:61:11: 4d:c6:ac:9d:47:51:cf:8f:19:07:a4:a7:ae:12:32: 05:13:73:f3:bc:ac:19:92:2a:24:d6:c3:6a:5b:39: 7e:80:96:6b:7b:7e:48:32:c4:94:3d:da:f4:60:ad: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:48:9F:37:9D:5A:87:28:86:F2:A8:43:6F:6B:41:0F:EA:B1:C4 X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:81:2a:82:ca:b7:15:c2:3a:3f:ac:39:51:89:42:1e:5e:30: ab:1c:3f:94:99:28:52:4a:08:b8:fe:a1:79:1f:7d:31:72:f2: 99:c2:b9:77:09:a6:8d:ae:da:6c:e9:71:a7:43:86:3f:79:9b: 0b:e8:dc:61:d6:c0:26:fd:0b:d7:a0:90:b9:c4:04:8b:f4:26: a1:08:69:7a:85:7b:a7:88:9a:42:e1:25:5f:4c:07:13:80:93: da:b3:79:92:bf:6b:b5:a3:56:44:5f:3d:77:15:e9:45:39:20: 5b:c2:4d:64:ee:17:c8:d5:77:c2:19:c4:52:c9:0a:f2:ef:3f: 55:0a:fd:67:53:12:02:0b:13:16:ef:45:cc:a8:34:03:34:e4: db:f5:f2:d3:8c:6c:48:71:77:11:c1:6a:fb:8f:31:65:3e:eb: 52:fc:cf:66:1d:b0:57:8e:cc:36:45:46:76:a8:8b:3b:b1:4d: be:89:88:4a:a8:1c:fd:73:72:3a:b5:22:d7:ea:dd:34:6d:e3: 14:8d:c0:da:3b:c0:48:48:b9:1f:d4:e3:c3:f1:8b:47:00:c6: 7d:54:b3:0a:9d:89:84:ce:38:16:8b:6c:64:b7:48:9a:46:3f: 51:f3:a4:d0:d3:f5:33:4d:72:20:ec:5d:6c:f3:1e:c6:b7:e6: 64:71:58:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjUxMDE5MDUzOTI3WhcNMjUxMDI2MDUzOTI3WjAYMRYwFAYD VQQDEw02OGY0Nzk5MC1hNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOBXoRVZoubKkqxC7ZBxEWB113g/D1GoZP+wYXcVxquFP1l80QE8PsvwDtoK 8kI/VMnbtAOW43nGmglJk+x+kHhQiPRk05d/4HjVwMP+7pRvfBJEr9lp8YJ26y+W i82KpEcJMgwPjaG1ULBd2700Qy7n8wtteUJ+3vLYUYSix4wjnxhJnO+ofpFDWnHB xthtcVrrBlFiYZn6F7gydxAijthnwleJKBE/3l2cvEjeZU5WM7LzYpoMd1ELTc4Y FirA/FmxDuKlpCu1ue0GoJWjYRFNxqydR1HPjxkHpKeuEjIFE3PzvKwZkiok1sNq Wzl+gJZre35IMsSUPdr0YK2DuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2lSJ83 nVqHKIbyqENva0EP6rHEMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArgSqCyrcVwjo/rDlRiUIeXjCrHD+UmShSSgi4/qF5H30xcvKZwrl3 CaaNrtps6XGnQ4Y/eZsL6Nxh1sAm/QvXoJC5xASL9CahCGl6hXuniJpC4SVfTAcT gJPas3mSv2u1o1ZEXz13FelFOSBbwk1k7hfI1XfCGcRSyQry7z9VCv1nUxICCxMW 70XMqDQDNOTb9fLTjGxIcXcRwWr7jzFlPutS/M9mHbBXjsw2RUZ2qIs7sU2+iYhK qBz9c3I6tSLX6t00beMUjcDaO8BISLkf1OPD8YtHAMZ9VLMKnYmEzjgWi2xkt0ia Rj9R86TQ0/UzTXIg7F1s8x7Gt+ZkcVjT -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:16 2025 by rpki-client