$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: xC3CGoCn9wI+jv15488xuExMTY8g9w6bVhQ6wPaRM9g= Subject key identifier: 68:B1:9D:D7:78:0E:F8:79:06:9B:3D:0C:B9:F9:98:65:8A:07:69:5D Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 02A9 Signing time: Sun 19 Oct 2025 03:42:36 +0000 Manifest this update: Sun 19 Oct 2025 03:42:34 +0000 Manifest next update: Sun 26 Oct 2025 03:42:34 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: uSD8firTyApYpH1ze+MifCRrbQHhc/w88I6clGwnu0c=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Oct 19 03:42:34 2025 GMT Not After : Oct 26 03:42:34 2025 GMT Subject: CN=68f45e2b-0c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:df:e9:02:f0:b1:b8:0c:d8:d2:30:9f:dd:c0: 73:4a:e8:41:84:0e:da:ff:61:1d:c2:8f:8f:6f:bd: a6:ab:91:fd:94:23:6f:2d:6a:b4:2f:d1:bb:7e:c1: 81:69:7b:9e:a6:30:4e:b2:a8:c2:3d:5a:3e:dd:17: f9:36:b7:89:f8:ed:bf:3a:eb:6c:e3:fe:de:c5:a4: 8f:79:a5:77:2c:1c:03:b6:9b:09:a8:fb:0b:f9:ba: 6f:64:b7:00:b5:96:6b:e4:66:e3:cb:56:c6:a8:ee: 6e:3b:26:20:50:8a:99:5c:2f:ab:82:3b:3c:35:28: 61:0a:1e:c1:ec:f3:90:38:1a:49:3f:62:0f:27:12: c5:bc:cd:54:66:70:13:6d:05:b9:f6:cf:6d:cc:bc: 21:17:c7:c2:a5:ce:d5:d8:59:dc:69:4a:37:f7:7e: d1:2e:02:62:59:b6:16:b8:cb:61:17:3e:45:55:d6: ef:49:5d:bd:89:ff:de:de:93:b3:63:ed:6c:02:b6: e2:b3:d8:4b:a9:f3:05:8c:90:61:08:6a:51:07:3f: f1:f3:03:0c:c1:92:34:12:9f:bf:b3:b5:68:fa:96: b9:af:3f:08:9f:81:f7:6c:2f:68:a4:28:46:e6:f7: 50:4a:61:c8:8a:f2:6b:0b:90:7b:2f:63:40:39:1b: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:9D:D7:78:0E:F8:79:06:9B:3D:0C:B9:F9:98:65:8A:07:69:5D X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ac:63:36:93:1b:ec:00:e1:d5:02:b9:0c:1d:0e:28:44:ec: 33:47:10:db:db:69:ea:68:49:31:fc:22:c5:f4:8b:e2:27:c9: 16:a9:6c:c2:9d:62:ad:a5:d1:dc:92:b2:91:18:02:3f:7d:f4: 37:06:42:22:31:93:2a:0d:fd:8e:97:95:db:a5:20:f5:70:58: 0c:36:4d:58:f1:2a:09:5f:c6:2e:82:b7:be:1f:c8:9c:17:48: 97:f8:6f:b4:07:2a:5a:73:a0:15:34:09:8c:ce:89:51:a3:9c: 72:5b:ce:fd:18:af:6a:df:75:dd:9c:2e:c1:34:e6:94:5d:58: 84:dc:e9:60:41:45:5b:50:c7:62:6d:3e:9e:1b:5e:8d:0e:3e: 44:45:16:0d:97:c7:7f:6b:88:25:29:d3:1c:31:5f:5c:b1:4a: bc:76:8e:15:e3:c3:ac:87:89:4c:c3:ab:91:14:99:7f:97:b8: cd:03:54:db:79:25:be:3b:26:e9:70:f8:29:b5:97:92:71:19: 2e:52:77:4e:c9:89:93:ce:e6:5f:18:f3:c3:a4:dc:08:f3:26: 6b:10:91:75:8d:60:a7:0a:47:27:8a:16:a9:4b:ef:34:36:9b: 46:74:bf:5e:53:53:f2:f3:c5:41:06:b6:82:9d:5f:f7:74:d1: f5:2c:52:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUxMDE5MDM0MjM0WhcNMjUxMDI2MDM0MjM0WjAYMRYwFAYD VQQDEw02OGY0NWUyYi0wYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4t/pAvCxuAzY0jCf3cBzSuhBhA7a/2Edwo+Pb72mq5H9lCNvLWq0L9G7fsGB aXuepjBOsqjCPVo+3Rf5NreJ+O2/Outs4/7exaSPeaV3LBwDtpsJqPsL+bpvZLcA tZZr5Gbjy1bGqO5uOyYgUIqZXC+rgjs8NShhCh7B7POQOBpJP2IPJxLFvM1UZnAT bQW59s9tzLwhF8fCpc7V2FncaUo3937RLgJiWbYWuMthFz5FVdbvSV29if/e3pOz Y+1sArbis9hLqfMFjJBhCGpRBz/x8wMMwZI0Ep+/s7Vo+pa5rz8In4H3bC9opChG 5vdQSmHIivJrC5B7L2NAORsB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGixndd4 Dvh5Bps9DLn5mGWKB2ldMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqrGM2kxvsAOHVArkMHQ4oROwzRxDb22nqaEkx/CLF9IviJ8kWqWzC nWKtpdHckrKRGAI/ffQ3BkIiMZMqDf2Ol5XbpSD1cFgMNk1Y8SoJX8Yugre+H8ic F0iX+G+0Bypac6AVNAmMzolRo5xyW879GK9q33XdnC7BNOaUXViE3OlgQUVbUMdi bT6eG16NDj5ERRYNl8d/a4glKdMcMV9csUq8do4V48Osh4lMw6uRFJl/l7jNA1Tb eSW+OybpcPgptZeScRkuUndOyYmTzuZfGPPDpNwI8yZrEJF1jWCnCkcnihapS+80 NptGdL9eU1Py88VBBraCnV/3dNH1LFKJ -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:56 2025 by rpki-client