$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: ClhNUiQ8k+LQ25/E7HCcWuZraHIIphdlvvDYN+2dQQc= Subject key identifier: 9A:20:48:73:AD:35:46:01:68:C1:E9:15:FC:71:47:2C:9E:1B:BE:18 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: C2 Signing time: Sun 19 Oct 2025 09:04:32 +0000 Manifest this update: Sun 19 Oct 2025 09:04:31 +0000 Manifest next update: Sun 26 Oct 2025 09:04:31 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: dRyKRTo5FDDEKjZp3oAkeNFyzsLleqMjhCE2RGJZXV0=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: Ccx7SnGjPCxsvKUBeamLN1Oa9v9jyBTBtL74lgFdLHk=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: k2dEAv933yKqFgM4NCZBdb4Xn5r7WtBWqggONtm/gBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Oct 19 09:04:31 2025 GMT Not After : Oct 26 09:04:31 2025 GMT Subject: CN=68f4a99f-386f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:cb:c0:42:f6:61:b4:42:22:08:c8:d1:1b: 77:5a:88:65:28:c8:56:d9:a2:7c:24:01:28:73:8c: 61:ba:81:51:72:c2:4e:d5:06:be:44:f7:a7:07:43: 3a:c3:df:1e:54:ef:a8:af:da:bc:1e:a4:39:ee:dd: c0:d1:5b:3f:d5:7b:68:f7:9d:35:84:22:f0:3b:4f: 8d:ef:e8:24:ec:78:31:3d:43:18:bb:03:d0:e3:f7: 96:cf:29:2f:42:13:1e:fe:3f:ae:00:35:de:5f:f7: cb:b1:05:eb:19:08:02:0e:fb:17:67:bc:24:6a:74: 81:5c:72:b8:70:bb:3c:9e:9f:22:8e:7d:2e:12:c5: cc:14:04:49:31:9c:53:57:6f:ea:a3:af:7a:ce:39: 76:21:37:41:b7:d4:58:35:75:68:ef:f2:ea:8f:48: c9:21:ca:36:b0:64:2b:ff:58:89:6b:14:97:7c:b3: 6a:5c:9f:be:99:23:28:77:ba:9b:5b:af:aa:f1:64: 6d:91:0c:9a:e0:01:32:0b:47:f6:4a:2d:0f:36:d8: 64:ef:fa:a4:d4:11:14:16:21:b0:a7:61:b2:96:80: bd:d5:59:32:0b:62:77:a0:a6:37:39:f9:b3:68:29: 40:d9:7e:4c:83:36:4d:03:43:93:cd:cc:8a:87:46: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:48:73:AD:35:46:01:68:C1:E9:15:FC:71:47:2C:9E:1B:BE:18 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:be:eb:e6:d8:05:d4:83:14:64:e1:99:8d:53:1d:ba:3c:21: be:04:07:01:92:81:74:a3:58:fb:d3:13:a5:0c:26:49:bb:bd: bb:05:ba:cf:0f:ff:d8:47:d6:a0:d3:d3:32:d9:8f:e7:0d:01: 25:06:70:a6:e3:54:f8:3b:d0:14:13:97:f3:a8:2d:08:9f:b3: 6c:a6:37:5c:a4:81:0c:53:88:03:4f:9f:77:7d:40:04:07:74: 02:82:73:96:8f:f0:50:d2:e9:e3:cf:02:41:cc:41:32:ec:5c: 9c:30:a1:da:75:31:f4:1b:38:75:0e:f3:04:ad:27:89:d1:d3: 64:79:ae:53:68:23:64:cd:d6:51:96:c8:38:3f:a2:86:7e:af: e2:44:84:ba:70:37:d5:6a:c8:de:e6:85:e5:11:98:3d:2f:70: 7b:a8:d9:0f:dd:1c:c7:5b:93:ed:0c:b8:26:2f:26:61:9e:00: 6a:b0:c7:96:0b:7e:1f:c4:87:a1:4f:21:06:da:4d:8c:9c:52: 23:05:62:c6:e9:9e:cd:c8:5b:0c:f0:98:af:4c:86:b2:00:74: 81:f5:05:db:66:df:37:34:25:14:8f:b6:73:51:4c:b6:73:27: 19:a1:c7:88:54:e5:56:47:4b:3e:be:b9:34:8f:5a:36:96:f8: be:d9:1c:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjUxMDE5MDkwNDMxWhcNMjUxMDI2MDkwNDMxWjAYMRYwFAYD VQQDEw02OGY0YTk5Zi0zODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RTLwEL2YbRCIgjI0Rt3WohlKMhW2aJ8JAEoc4xhuoFRcsJO1Qa+RPenB0M6 w98eVO+or9q8HqQ57t3A0Vs/1Xto9501hCLwO0+N7+gk7HgxPUMYuwPQ4/eWzykv QhMe/j+uADXeX/fLsQXrGQgCDvsXZ7wkanSBXHK4cLs8np8ijn0uEsXMFARJMZxT V2/qo696zjl2ITdBt9RYNXVo7/Lqj0jJIco2sGQr/1iJaxSXfLNqXJ++mSMod7qb W6+q8WRtkQya4AEyC0f2Si0PNthk7/qk1BEUFiGwp2GyloC91VkyC2J3oKY3Ofmz aClA2X5MgzZNA0OTzcyKh0byzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJogSHOt NUYBaMHpFfxxRyyeG74YMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAavuvm2AXUgxRk4ZmNUx26PCG+BAcBkoF0o1j70xOlDCZJu727BbrP D//YR9ag09My2Y/nDQElBnCm41T4O9AUE5fzqC0In7NspjdcpIEMU4gDT593fUAE B3QCgnOWj/BQ0unjzwJBzEEy7FycMKHadTH0Gzh1DvMErSeJ0dNkea5TaCNkzdZR lsg4P6KGfq/iRIS6cDfVasje5oXlEZg9L3B7qNkP3RzHW5PtDLgmLyZhngBqsMeW C34fxIehTyEG2k2MnFIjBWLG6Z7NyFsM8JivTIayAHSB9QXbZt83NCUUj7ZzUUy2 cycZoceIVOVWR0s+vrk0j1o2lvi+2RyS -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:21 2025 by rpki-client