$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: 0inQ/B2NLga2EAtiGDUn7hd0KY2hcn5pjCTZ1u3t/lQ= Subject key identifier: 05:16:12:C6:DD:54:F9:47:BD:D4:CC:B0:83:40:E2:3A:27:60:4E:1C Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: B8 Signing time: Sun 19 Oct 2025 09:09:30 +0000 Manifest this update: Sun 19 Oct 2025 09:09:29 +0000 Manifest next update: Sun 26 Oct 2025 09:09:29 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: UAtjA9e0ZjzX4YVguC/y5aWSRSzjbgZYIG4Tm+nogLc=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: Oct 19 09:09:29 2025 GMT Not After : Oct 26 09:09:29 2025 GMT Subject: CN=68f4aac9-58fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:7f:fe:34:d5:69:29:e0:5f:45:8e:e7:a4: ec:2d:9e:e2:a6:81:d3:6d:cf:6f:44:70:4d:4a:f5: f1:61:d8:cd:81:a0:7a:5e:a7:c6:38:4d:40:9b:5a: 14:63:a0:ef:8e:23:81:0d:6e:82:06:95:e8:e9:27: 8f:23:0e:98:10:1a:07:99:da:1a:2f:ff:1d:5b:15: be:9b:f6:e7:fa:94:dc:75:b7:64:6c:f2:83:63:52: 33:96:04:7d:9e:56:e6:35:4c:7c:0b:7a:40:c0:61: 03:14:53:bf:73:27:eb:76:da:cb:3f:58:26:59:b5: d8:06:2e:09:16:2d:6e:98:6b:d9:73:9d:15:9f:ac: 69:a2:e4:5c:9a:ef:e1:e7:f8:a6:b6:20:57:48:a1: b6:7f:f4:27:4d:ff:fe:d1:ff:2a:f9:73:80:c9:2d: 57:8e:bc:42:8a:81:6a:10:7e:7a:37:fd:62:ef:07: 53:48:8b:ba:d6:15:df:a7:56:fb:50:5e:2f:96:31: ce:43:97:e0:7c:ec:7b:e2:6b:21:2a:8a:b8:d1:f3: 02:5b:dd:0c:4d:ae:6e:85:7e:00:e1:1c:02:96:fd: 54:6f:db:02:a7:5a:19:17:39:e2:62:08:48:44:9f: 9b:c5:db:6e:0b:ce:8d:19:42:7a:2b:86:17:09:fb: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:16:12:C6:DD:54:F9:47:BD:D4:CC:B0:83:40:E2:3A:27:60:4E:1C X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:95:08:3f:cc:08:f0:45:55:e5:d0:e1:a4:3b:ef:29:31:71: 2b:f4:a8:05:d9:0a:8d:9a:ac:fd:71:df:49:9c:c6:94:1b:0d: c8:87:48:2a:84:62:3a:e2:ed:21:05:48:75:a9:e0:9a:ec:c9: 06:59:46:18:b5:b6:08:9e:0e:14:94:d5:54:50:0d:2f:bd:ac: 4e:57:72:56:b6:cc:01:27:a5:da:0c:ee:5e:cc:3b:2e:88:8c: a9:16:a0:26:a6:0a:03:21:d6:c6:93:f4:f3:bf:f3:27:e0:d6: 15:c4:9f:13:a3:da:07:7b:e0:f6:23:ba:8e:fb:18:1c:fc:0e: d6:05:ce:7f:bd:31:06:a6:d6:59:55:7f:d3:ae:9b:ab:b6:1a: d2:6a:9f:5a:51:50:c1:76:ed:9a:e7:07:96:9a:ec:85:36:07: 86:eb:b2:06:09:73:d9:aa:3b:41:ee:75:87:b1:2b:a3:49:dd: 7f:d3:70:dd:fd:31:86:26:65:03:d7:de:93:95:a6:63:1a:64: dc:87:b2:65:20:3e:ad:0a:68:b6:46:23:38:5b:47:1c:e1:84: 74:a3:64:23:c1:84:d7:f8:37:b9:f1:5a:e5:2c:87:08:4d:50: 24:25:93:aa:cd:ff:af:81:fc:2a:d9:aa:24:15:bf:72:4a:f9: ae:4a:42:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEyMTMxRTNEOUE4 N0MyOTQ1QzAwHhcNMjUxMDE5MDkwOTI5WhcNMjUxMDI2MDkwOTI5WjAYMRYwFAYD VQQDEw02OGY0YWFjOS01OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhJ//jTVaSngX0WO56TsLZ7ipoHTbc9vRHBNSvXxYdjNgaB6XqfGOE1Am1oU Y6DvjiOBDW6CBpXo6SePIw6YEBoHmdoaL/8dWxW+m/bn+pTcdbdkbPKDY1IzlgR9 nlbmNUx8C3pAwGEDFFO/cyfrdtrLP1gmWbXYBi4JFi1umGvZc50Vn6xpouRcmu/h 5/imtiBXSKG2f/QnTf/+0f8q+XOAyS1XjrxCioFqEH56N/1i7wdTSIu61hXfp1b7 UF4vljHOQ5fgfOx74mshKoq40fMCW90MTa5uhX4A4RwClv1Ub9sCp1oZFzniYghI RJ+bxdtuC86NGUJ6K4YXCfsccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUWEsbd VPlHvdTMsINA4jonYE4cMB8GA1UdIwQYMBaAFKy3AlHrFbddQimqITHj2ah8KUXA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9CMTQ0OUM0RTk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQxMUNLYW9oTWVQWnFId3BS Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQx MUNLYW9oTWVQWnFId3BSY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHlQg/zAjwRVXl0OGkO+8pMXEr9KgF2QqNmqz9cd9JnMaUGw3Ih0gq hGI64u0hBUh1qeCa7MkGWUYYtbYIng4UlNVUUA0vvaxOV3JWtswBJ6XaDO5ezDsu iIypFqAmpgoDIdbGk/Tzv/Mn4NYVxJ8To9oHe+D2I7qO+xgc/A7WBc5/vTEGptZZ VX/TrpurthrSap9aUVDBdu2a5weWmuyFNgeG67IGCXPZqjtB7nWHsSujSd1/03Dd /TGGJmUD196TlaZjGmTch7JlID6tCmi2RiM4W0cc4YR0o2QjwYTX+De58VrlLIcI TVAkJZOqzf+vgfwq2aokFb9ySvmuSkJK -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:59 2025 by rpki-client