$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: bWeAO502E6OjiM+9YRd/+a/1lnErk7rfGVnJQ4PPheM= Subject key identifier: 19:2D:72:D8:40:4E:F7:FE:17:75:54:01:41:06:83:60:3B:B5:67:16 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 084B Signing time: Sat 18 Oct 2025 21:53:33 +0000 Manifest this update: Sat 18 Oct 2025 21:53:33 +0000 Manifest next update: Sat 25 Oct 2025 21:53:33 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: zOwugHCy0kGE+msWSPNQ9pioJLsylI17Femos6/RU+Y=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: y//kTgBCu8ds1cgaGUUv5fTwfVuBn5T3llDXWqV3GRs=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: Koez5aai5hyPFgaFmxx5YzeOBoMBdmjCYKXC5XMX7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Oct 18 21:53:33 2025 GMT Not After : Oct 25 21:53:33 2025 GMT Subject: CN=68f40c5d-1e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:9d:54:0c:91:5c:91:1f:cf:c4:54:8f:f9: ae:05:1e:21:cb:7e:d4:06:f9:a5:cb:3b:2d:ff:6b: de:14:24:75:66:70:9e:70:2f:f8:c7:54:13:c6:4a: a4:e7:66:fa:d5:a6:22:4a:69:11:46:74:53:43:8f: e1:98:fe:0a:f8:94:51:00:53:92:46:4d:af:4a:6c: fb:5c:a9:50:21:bf:f6:6f:29:f4:58:30:ae:86:28: e0:31:b0:5f:30:af:58:0b:fa:9e:3b:f7:6e:bb:ee: eb:8b:49:75:fe:08:26:8c:d3:24:72:48:cb:20:0d: 07:9a:b6:b4:8c:37:9a:70:95:d5:07:8f:ce:e4:d1: fb:f2:a1:bf:a1:13:16:b2:4f:ff:a9:aa:85:cd:22: 6a:9d:a7:3e:9e:4e:72:a4:a8:53:6f:a7:74:bb:e9: 29:59:69:be:f6:ca:25:6a:42:9b:1a:a1:4d:ee:be: b3:a7:ef:36:96:43:e5:83:4e:90:8a:ab:3a:1f:a0: 31:88:c8:3d:f9:02:4d:c6:c3:da:8c:31:36:d0:3d: d6:d9:72:35:80:22:fd:81:d9:7c:fd:fa:84:8f:22: 80:29:9e:b7:b1:6e:be:9c:b6:13:7b:35:db:1c:9c: 2b:9f:25:96:2f:a8:a3:f1:67:bd:40:2f:7d:93:bb: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2D:72:D8:40:4E:F7:FE:17:75:54:01:41:06:83:60:3B:B5:67:16 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:46:1b:e7:db:38:ec:be:05:e3:51:b0:40:6f:52:1c:dd:aa: 63:1b:be:81:61:ac:cd:7d:9c:ea:a1:5d:7b:e4:fc:12:f6:74: 8e:dd:07:31:e5:df:e4:b1:78:d3:07:46:35:72:57:a9:89:9a: c1:e2:b1:c7:e9:36:92:36:fa:20:dd:b1:55:93:cd:dc:93:60: 1c:ef:d5:32:b8:66:79:be:36:25:3d:c4:38:4f:a8:cc:e5:77: ca:95:05:5e:d5:2c:9b:73:6d:f3:28:af:25:a2:47:25:b8:a5: 6f:9b:22:67:4c:a0:48:fd:bd:85:b3:f4:42:73:9d:4d:b4:73: fb:87:45:85:25:5e:c1:ba:9b:c6:2d:57:1d:86:a0:47:90:16: 9a:5d:61:27:7d:68:8b:51:0f:8e:82:66:46:e1:b1:26:cb:53: 8a:92:d8:48:8e:77:0b:ce:63:1e:1f:41:27:c0:34:90:80:59: 64:40:8e:3d:45:f1:2b:d1:b9:b0:ce:12:a8:d2:5c:55:bd:e7: 09:ed:76:78:04:86:2a:4c:b4:ee:50:4d:f9:25:58:2b:de:77: f7:93:aa:db:7a:7e:ef:e1:8f:a3:e4:99:4e:ee:91:26:e3:6d: a5:5f:aa:b4:83:34:bc:96:d9:e2:eb:3e:16:b8:96:20:f2:af: c8:e7:f2:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjUxMDE4MjE1MzMzWhcNMjUxMDI1MjE1MzMzWjAYMRYwFAYD VQQDEw02OGY0MGM1ZC0xZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF+dVAyRXJEfz8RUj/muBR4hy37UBvmlyzst/2veFCR1ZnCecC/4x1QTxkqk 52b61aYiSmkRRnRTQ4/hmP4K+JRRAFOSRk2vSmz7XKlQIb/2byn0WDCuhijgMbBf MK9YC/qeO/duu+7ri0l1/ggmjNMkckjLIA0Hmra0jDeacJXVB4/O5NH78qG/oRMW sk//qaqFzSJqnac+nk5ypKhTb6d0u+kpWWm+9solakKbGqFN7r6zp+82lkPlg06Q iqs6H6AxiMg9+QJNxsPajDE20D3W2XI1gCL9gdl8/fqEjyKAKZ63sW6+nLYTezXb HJwrnyWWL6ij8We9QC99k7s/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBktcthA Tvf+F3VUAUEGg2A7tWcWMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzRhvn2zjsvgXjUbBAb1Ic3apjG76BYazNfZzqoV175PwS9nSO3Qcx 5d/ksXjTB0Y1clepiZrB4rHH6TaSNvog3bFVk83ck2Ac79UyuGZ5vjYlPcQ4T6jM 5XfKlQVe1Sybc23zKK8lokcluKVvmyJnTKBI/b2Fs/RCc51NtHP7h0WFJV7BupvG LVcdhqBHkBaaXWEnfWiLUQ+OgmZG4bEmy1OKkthIjncLzmMeH0EnwDSQgFlkQI49 RfEr0bmwzhKo0lxVvecJ7XZ4BIYqTLTuUE35JVgr3nf3k6rben7v4Y+j5JlO7pEm 422lX6q0gzS8ltni6z4WuJYg8q/I5/Ix -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:17 2025 by rpki-client