$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: 3GkoEQDB9Bxult7XcppERp8aBXVHzXnWtOsqoywJlls= Subject key identifier: 3F:9B:AC:8E:25:EE:CB:05:85:4E:2A:8E:A0:7B:83:4F:98:F6:16:EF Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: 4F Signing time: Sun 19 Oct 2025 10:42:48 +0000 Manifest this update: Sun 19 Oct 2025 10:42:47 +0000 Manifest next update: Sun 26 Oct 2025 10:42:47 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: YWdqzWhs7gJP3jAAukb1Lns2S0M5PsX2VBjdHe/tE68=) 2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Oct 19 10:42:47 2025 GMT Not After : Oct 26 10:42:47 2025 GMT Subject: CN=68f4c0a8-e574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:43:6e:45:52:6d:2e:94:dd:76:36:c0:ee: b8:08:30:5e:c2:5a:8e:0f:49:11:e6:c8:b7:34:61: 78:3d:f9:de:47:1c:97:9e:b1:1f:1b:77:0a:34:96: 15:93:cc:82:a2:f1:64:c8:32:69:80:2a:a6:72:5d: 6d:c6:24:63:b6:c0:b2:fd:d4:8b:02:82:7e:33:f3: 06:9c:63:11:ca:d7:03:b6:af:2c:1a:e7:ba:dc:45: 3e:0b:6d:bd:d3:59:fc:4c:98:9f:cf:17:ea:49:03: 0e:eb:6d:4d:69:9e:d0:30:d2:91:df:09:b5:2b:7c: be:05:a7:5e:ab:02:38:9b:9e:41:17:62:91:fa:65: 1e:06:d6:3a:68:ca:3a:e5:4f:7b:80:f7:88:69:99: f1:af:c5:98:b9:cb:f5:de:68:2b:f2:7b:3b:7e:29: 24:a2:a0:da:de:57:10:d2:67:34:4c:8f:f2:f8:0c: 75:fc:0a:c8:b5:e8:39:49:a5:5f:f7:16:74:ba:00: 83:85:e4:1b:e3:79:6c:bd:8a:d7:4c:a3:90:36:56: de:70:ee:84:b7:43:b0:54:f9:a5:41:fc:55:c0:2a: ea:2c:4b:6e:a8:1e:46:7d:3b:ea:86:79:67:0c:5a: c3:0a:b2:e3:26:b8:df:f5:a2:61:71:70:fa:12:dc: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9B:AC:8E:25:EE:CB:05:85:4E:2A:8E:A0:7B:83:4F:98:F6:16:EF X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:35:63:9f:65:ff:37:e7:14:4e:32:fa:14:a6:7a:8a:d7:7f: 55:35:41:5b:76:09:e3:c7:11:6b:ea:b0:f6:01:68:18:29:8a: 65:a6:0b:71:9e:bf:fb:3d:32:1b:1f:a5:e9:f6:ff:ee:34:73: d5:04:4c:16:31:eb:19:b8:61:cc:00:d5:e4:b3:de:9e:22:bb: fe:f2:f7:4c:db:c9:0b:30:1f:ca:78:be:33:35:ab:f4:bc:39: 35:74:6d:db:24:18:f3:d8:2e:4a:1e:a5:74:6f:86:b2:c1:3f: bd:d1:a8:06:3d:35:fa:9d:fa:40:aa:ef:03:54:f1:a7:8a:e9: cd:bb:ff:86:1f:c9:34:bb:3d:f2:50:14:80:5d:a2:33:82:72: 12:e8:01:53:56:52:fa:f8:17:e4:d0:51:08:8e:c5:c6:6f:b5: da:c2:81:99:d7:da:25:59:13:13:ec:15:75:08:aa:51:46:09: 1b:ca:78:85:fc:db:2c:db:c1:d2:3b:27:8d:0f:c9:76:81:63: 90:f0:1b:4b:6a:18:b5:82:11:59:6a:88:be:79:38:3b:42:0e: da:f3:01:5c:12:91:a5:5e:14:ca:22:d4:0f:66:6f:39:c1:25: 84:aa:a7:9b:93:98:e2:04:f1:c4:36:b0:4a:a6:99:15:c4:29: 22:c3:6b:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy MUYwN0JBMzAeFw0yNTEwMTkxMDQyNDdaFw0yNTEwMjYxMDQyNDdaMBgxFjAUBgNV BAMTDTY4ZjRjMGE4LWU1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZhkNuRVJtLpTddjbA7rgIMF7CWo4PSRHmyLc0YXg9+d5HHJeesR8bdwo0lhWT zIKi8WTIMmmAKqZyXW3GJGO2wLL91IsCgn4z8wacYxHK1wO2rywa57rcRT4Lbb3T WfxMmJ/PF+pJAw7rbU1pntAw0pHfCbUrfL4Fp16rAjibnkEXYpH6ZR4G1jpoyjrl T3uA94hpmfGvxZi5y/XeaCvyezt+KSSioNreVxDSZzRMj/L4DHX8Csi16DlJpV/3 FnS6AIOF5BvjeWy9itdMo5A2Vt5w7oS3Q7BU+aVB/FXAKuosS26oHkZ9O+qGeWcM WsMKsuMmuN/1omFxcPoS3DYVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP5usjiXu ywWFTiqOoHuDT5j2Fu8wHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4 bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD81Y59l/zfnFE4y+hSmeorXf1U1QVt2CePHEWvqsPYBaBgpimWmC3Ge v/s9Mhsfpen2/+40c9UETBYx6xm4YcwA1eSz3p4iu/7y90zbyQswH8p4vjM1q/S8 OTV0bdskGPPYLkoepXRvhrLBP73RqAY9Nfqd+kCq7wNU8aeK6c27/4YfyTS7PfJQ FIBdojOCchLoAVNWUvr4F+TQUQiOxcZvtdrCgZnX2iVZExPsFXUIqlFGCRvKeIX8 2yzbwdI7J40PyXaBY5DwG0tqGLWCEVlqiL55ODtCDtrzAVwSkaVeFMoi1A9mbznB JYSqp5uTmOIE8cQ2sEqmmRXEKSLDazo= -----END CERTIFICATE-----Generated at Tue Oct 21 15:10:01 2025 by rpki-client