$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: EobFk16HeW7+D1x4+Ecm0VZ+A4MMCyBMgcMtYsjUDsw= Subject key identifier: 5C:3C:6F:68:01:8C:8F:8B:86:9F:80:CA:F6:A4:5B:B4:70:8F:11:5E Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 09:26:39 +0000 Manifest this update: Sun 19 Oct 2025 09:26:38 +0000 Manifest next update: Sun 26 Oct 2025 09:26:38 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: r7kB3Qrq30SbVfdyXkToVHsLsXWAqefW0J7T3Kphpc4=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Oct 19 09:26:38 2025 GMT Not After : Oct 26 09:26:38 2025 GMT Subject: CN=68f4aece-bfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:37:db:cd:3e:d9:68:3d:1e:88:67:d9:38: 7b:2f:76:b0:b5:91:93:92:b1:d0:c4:5c:3d:16:4d: fe:4d:48:e7:08:41:98:5a:52:cb:77:cf:e9:c8:35: aa:d6:6d:b8:d8:8b:72:49:c9:c9:81:c1:7c:2d:1f: 26:89:b9:8a:1d:95:d5:26:d5:16:eb:a9:7f:64:cc: 2c:d8:da:7b:25:91:f0:6c:13:82:05:5f:ae:bf:e6: f5:7f:3d:63:d4:dc:8a:19:dd:08:f2:38:92:6e:7b: 81:18:bf:71:0c:e3:a0:3a:7a:77:1e:7c:4d:f8:18: d8:2c:c1:54:c6:bf:0f:96:bd:a1:ae:bf:dc:b6:42: 71:7d:fa:49:03:01:94:db:3a:5e:77:38:31:2d:56: f2:40:3a:92:74:6a:64:ff:19:b1:d1:da:9c:6b:e5: db:94:c1:db:95:08:7a:1a:50:d2:91:a0:08:50:79: 3b:4b:fe:b5:d7:e6:42:61:6c:3f:58:61:53:46:6e: 04:98:04:75:e9:08:10:a1:a3:dd:97:d2:14:8b:b7: 2c:ac:35:b1:33:46:5b:c4:1d:dc:93:ec:94:f1:ed: 3d:d5:1c:05:cc:8e:61:01:bf:f4:cb:69:02:6b:f2: e0:ed:d5:0f:af:59:dd:f6:ad:b1:8c:6f:93:af:79: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3C:6F:68:01:8C:8F:8B:86:9F:80:CA:F6:A4:5B:B4:70:8F:11:5E X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:12:f5:27:15:d0:e8:fb:87:54:ab:c0:c2:94:64:22:b8:6d: 8a:91:76:13:20:8c:a5:99:a3:0f:ea:4a:f7:11:57:d1:b9:6f: f0:61:29:0a:c8:71:51:9d:d0:51:13:91:eb:5c:5b:8f:16:10: 10:d6:cc:80:92:9a:52:38:c9:24:5d:6e:43:69:28:6d:94:c9: 4e:3c:80:f4:1a:4e:24:aa:21:c9:62:03:8e:52:6a:56:51:32: 2b:39:87:4d:ee:74:72:d8:5a:cd:30:e9:45:02:f0:51:7a:30: dd:b7:06:af:cf:55:20:c8:bf:2c:b9:d5:d7:29:68:2b:96:9b: 91:aa:2d:fd:29:9c:ff:3e:83:46:fe:33:bf:94:15:f2:99:9c: 25:52:93:73:d7:73:ba:c8:9a:a2:80:b2:86:a6:fd:e0:61:22: a6:e2:95:02:bd:37:d5:ef:92:71:3b:3f:ba:0b:dc:76:8f:52: c0:c6:80:a2:c9:03:74:f2:bf:18:04:3d:28:18:a9:54:70:89: b0:8c:67:40:21:18:bf:d4:d5:25:8e:6a:0a:a9:e6:18:b4:52: e4:de:82:de:6d:0b:d9:bf:96:83:90:f2:c4:98:fc:3b:73:bc: de:42:44:fd:8e:f1:e9:36:72:c7:f9:58:f0:ac:18:40:c2:f2: d2:e9:33:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKDY5MjM2RTU5OTYzMDBBMkZENzg1RUY4NTc4M0M1QzI5 QzVCNEU4NzQwHhcNMjUxMDE5MDkyNjM4WhcNMjUxMDI2MDkyNjM4WjAYMRYwFAYD VQQDEw02OGY0YWVjZS1iZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ew3280+2Wg9Hohn2Th7L3awtZGTkrHQxFw9Fk3+TUjnCEGYWlLLd8/pyDWq 1m242ItyScnJgcF8LR8mibmKHZXVJtUW66l/ZMws2Np7JZHwbBOCBV+uv+b1fz1j 1NyKGd0I8jiSbnuBGL9xDOOgOnp3HnxN+BjYLMFUxr8Plr2hrr/ctkJxffpJAwGU 2zpedzgxLVbyQDqSdGpk/xmx0dqca+XblMHblQh6GlDSkaAIUHk7S/611+ZCYWw/ WGFTRm4EmAR16QgQoaPdl9IUi7csrDWxM0ZbxB3ck+yU8e091RwFzI5hAb/0y2kC a/Lg7dUPr1nd9q2xjG+Tr3lCyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw8b2gB jI+Lhp+AyvakW7RwjxFeMB8GA1UdIwQYMBaAFGkjblmWMAov14XvhXg8XCnFtOh0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GMEU3NkUxMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0NpX1hoZS1GZUR4Y0tjVzA2 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GMEU3NkUxMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0Np X1hoZS1GZUR4Y0tjVzA2SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHEvUnFdDo+4dUq8DClGQiuG2KkXYTIIylmaMP6kr3EVfRuW/wYSkK yHFRndBRE5HrXFuPFhAQ1syAkppSOMkkXW5DaShtlMlOPID0Gk4kqiHJYgOOUmpW UTIrOYdN7nRy2FrNMOlFAvBRejDdtwavz1UgyL8sudXXKWgrlpuRqi39KZz/PoNG /jO/lBXymZwlUpNz13O6yJqigLKGpv3gYSKm4pUCvTfV75JxOz+6C9x2j1LAxoCi yQN08r8YBD0oGKlUcImwjGdAIRi/1NUljmoKqeYYtFLk3oLebQvZv5aDkPLEmPw7 c7zeQkT9jvHpNnLH+VjwrBhAwvLS6TOD -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:47 2025 by rpki-client