$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: 8pCdzfYvrBAPLwYnOEPUzIrZPmIfzL2bbf0nK4BWx6A= Subject key identifier: A4:CE:56:AF:C6:F2:9C:7C:4A:E9:90:A6:E4:9B:43:28:C6:C6:F8:A8 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 01D8 Signing time: Sun 19 Oct 2025 06:08:52 +0000 Manifest this update: Sun 19 Oct 2025 06:08:51 +0000 Manifest next update: Sun 26 Oct 2025 06:08:51 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: GeRG4gxDrDW3SSteQhRyQtF3KjhVEKXAzTXiSC5Rf6w=) 2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: QNh4Gp3kB3GNMrEGFFxhGCwWm4t5z9f8382iFUZwPZ0=) 3: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: oh7ui7LK3WMunAv1J2fHvn2kFRTi6Zr/uzSPr1lq2oo=) 4: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: Kl6m9JQHHfBeMqk1Tlm1MbQi4JjMBE2qeSJnrNub/g4=) 5: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: EN9le6O09Kb0iq4iN/kD7cySPcZbryI877AWUndMCII=) 6: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=) 7: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: QdChkVX5/kDffpKHFjUpYMXDKAHSdfijGoyZP5SONNo=) 8: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: iRjjH0VL4+7PEhkSOx43L1Sne21LW5Me4PTZp36WaZY=) 9: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: PdzatKQUNncHpwKWYwWLFeCXI+EXj5VrdThfE8iLC8o=) 10: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: DXd58lVKAvc2UPgiS5Dl9wenDfuBudEt81twiJtKSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Oct 19 06:08:51 2025 GMT Not After : Oct 26 06:08:51 2025 GMT Subject: CN=68f48074-ff4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:f4:f1:93:18:a4:6e:28:86:bd:e9:de:67: 75:78:98:9f:be:28:46:90:11:51:42:ed:d7:d4:e6: c3:88:68:a7:75:75:3d:73:2d:1c:fc:5f:f4:47:eb: 97:38:79:5f:b9:35:24:59:d5:d3:07:82:cc:8a:29: 42:8b:f9:80:61:9d:38:e1:e7:3a:50:7a:39:bf:ef: 98:43:a1:3d:df:fe:e4:df:d2:1c:9b:e4:cd:30:c6: bc:e5:54:b0:7f:f0:b3:6e:a2:44:da:d5:ec:36:58: 84:42:47:51:41:7b:76:51:de:e3:e3:41:e5:c6:0d: b4:c1:e9:3a:87:9e:ce:d6:6d:18:b9:27:4d:98:00: c7:f4:cc:fa:7d:57:21:59:1d:c3:46:d4:67:38:38: 03:6e:55:a8:06:74:11:4c:9f:fa:5d:fa:17:54:83: 56:5e:87:09:f3:fc:2b:25:45:26:64:dc:20:f4:fd: 53:a0:0f:a1:fc:53:ff:2c:41:87:a0:cc:cb:7f:71: 93:d1:ba:2d:32:1c:97:cf:6e:a4:21:43:2a:83:43: 5e:9d:f0:ff:73:c0:03:ad:01:00:32:1b:2d:6e:aa: 8e:0b:44:a7:21:51:31:71:a7:66:f4:7c:0c:99:0e: 99:05:45:af:d9:c4:73:fd:73:e2:35:42:7d:89:4c: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CE:56:AF:C6:F2:9C:7C:4A:E9:90:A6:E4:9B:43:28:C6:C6:F8:A8 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:07:c5:5f:30:7c:56:0a:05:4c:f7:82:b3:f0:2c:5b:dd:9c: 18:bb:fc:6a:ac:bc:8e:65:3d:cb:5d:04:bf:22:a1:29:1a:9c: 3d:96:04:b8:f8:aa:cb:59:9d:d2:76:f7:73:df:58:6f:eb:02: 94:2c:71:eb:32:f1:aa:a3:22:ac:c3:ed:c7:bc:79:d1:a7:60: 2f:4a:92:0c:d5:e0:ba:f0:b4:9a:17:1e:14:69:22:d2:7b:86: bd:bf:2d:a8:e2:5f:58:37:ec:b6:4d:a5:4d:e5:ec:1d:db:82: 2a:40:1c:6e:5a:1b:ba:33:a8:d7:3d:4b:96:85:23:11:2d:f8: b6:76:5d:0e:ec:44:0b:55:67:d3:f5:b7:80:9e:d2:03:5f:5f: 65:8c:1e:cd:91:4a:35:bc:c7:09:9a:b8:57:73:50:3c:18:18: d5:de:55:d1:f0:3b:84:e9:64:45:83:f4:d6:00:db:e9:51:9f: fb:d9:7c:07:e7:ba:c1:50:a6:d0:f9:a8:dd:d4:96:3a:f6:65: 20:88:79:82:46:39:fc:f6:d7:56:de:90:38:20:d5:ef:56:cc: 0d:43:ec:2d:c2:41:18:88:ef:56:71:b7:a6:cf:8a:5d:e2:f1: 1e:a6:c6:86:00:1a:32:8b:4e:20:95:4d:94:69:50:42:b2:b6: 30:bb:ef:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUxMDE5MDYwODUxWhcNMjUxMDI2MDYwODUxWjAYMRYwFAYD VQQDEw02OGY0ODA3NC1mZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5708ZMYpG4ohr3p3md1eJifvihGkBFRQu3X1ObDiGindXU9cy0c/F/0R+uX OHlfuTUkWdXTB4LMiilCi/mAYZ044ec6UHo5v++YQ6E93/7k39Icm+TNMMa85VSw f/CzbqJE2tXsNliEQkdRQXt2Ud7j40Hlxg20wek6h57O1m0YuSdNmADH9Mz6fVch WR3DRtRnODgDblWoBnQRTJ/6XfoXVINWXocJ8/wrJUUmZNwg9P1ToA+h/FP/LEGH oMzLf3GT0botMhyXz26kIUMqg0NenfD/c8ADrQEAMhstbqqOC0SnIVExcadm9HwM mQ6ZBUWv2cRz/XPiNUJ9iUy91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTOVq/G 8px8SumQpuSbQyjGxvioMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8B8VfMHxWCgVM94Kz8Cxb3ZwYu/xqrLyOZT3LXQS/IqEpGpw9lgS4 +KrLWZ3Sdvdz31hv6wKULHHrMvGqoyKsw+3HvHnRp2AvSpIM1eC68LSaFx4UaSLS e4a9vy2o4l9YN+y2TaVN5ewd24IqQBxuWhu6M6jXPUuWhSMRLfi2dl0O7EQLVWfT 9beAntIDX19ljB7NkUo1vMcJmrhXc1A8GBjV3lXR8DuE6WRFg/TWANvpUZ/72XwH 57rBUKbQ+ajd1JY69mUgiHmCRjn89tdW3pA4INXvVswNQ+wtwkEYiO9Wcbemz4pd 4vEepsaGABoyi04glU2UaVBCsrYwu+8C -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:33 2025 by rpki-client