$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: Rht5/gyF+jGdIH2qnb431Rzkzed7DDpKOaMywX0zbtw= Subject key identifier: 5E:0F:43:25:A4:90:47:B5:D3:CA:E7:B6:DF:93:FE:7A:82:04:64:98 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1E07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1DE2 Signing time: Sat 18 Oct 2025 16:24:33 +0000 Manifest this update: Sat 18 Oct 2025 16:24:32 +0000 Manifest next update: Sat 25 Oct 2025 16:24:32 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: pW8UTnJI4oSbDPDKTn9nqNu3ZYQPtw3rhSzNb2u1bIo=) 2: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: b0wxpwf8/vaYEOZtGJIbQgPEprx6ejeXyxzSbeJ8WVc=) 3: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=) 4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7687 (0x1e07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Oct 18 16:24:32 2025 GMT Not After : Oct 25 16:24:32 2025 GMT Subject: CN=68f3bf41-7f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:3a:06:b3:a8:0c:a6:fb:6b:59:5f:2e:87: 50:b2:ef:5b:a7:3c:3e:8f:dd:75:d8:cf:d1:6c:9b: d4:cb:2f:b0:dc:ba:a3:d6:9d:63:fb:2f:7f:2a:a7: 1f:cc:2a:67:bf:22:3f:81:95:eb:41:87:eb:a5:d1: 4c:13:97:29:de:00:94:80:34:72:0a:43:e7:41:32: 3d:ff:3b:b1:70:32:bf:d7:48:a2:b6:6a:7e:de:b4: 36:c6:2b:79:88:57:e5:dc:03:d2:7b:24:10:f8:bd: 22:93:85:7f:be:97:b2:b8:72:a6:47:01:49:6c:30: 98:1a:e5:16:ab:b0:0b:90:06:d5:b9:a6:3e:bc:0b: 03:da:18:46:e2:d1:4c:53:f1:ca:10:df:f3:17:94: a6:1e:1e:fa:ff:5a:59:84:a7:2d:2c:bc:d3:8f:d6: d3:44:25:8b:63:b3:08:96:61:97:d6:78:9c:79:fa: 1b:94:35:7e:51:fc:94:51:90:be:82:4a:92:86:9f: 8f:d3:da:34:d7:6f:71:98:41:ca:00:12:94:8b:ae: 27:ad:80:f9:1b:f9:b8:9b:a5:de:17:0b:52:77:8c: 26:59:11:0a:43:e4:3a:c5:23:fa:e9:29:39:7f:2b: bc:de:48:fa:57:ed:5c:ca:b9:5c:c9:ff:0e:58:c6: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:43:25:A4:90:47:B5:D3:CA:E7:B6:DF:93:FE:7A:82:04:64:98 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:58:e1:e1:c4:b4:aa:44:2a:e5:94:c3:29:4f:58:6c:15:15: 1f:10:d2:de:6d:e7:ff:a6:0f:99:c2:62:c9:bc:28:0d:47:2f: e0:57:f3:75:7d:9c:64:3e:b7:ce:62:8f:a1:f5:af:53:90:bb: 7b:e7:18:99:51:3f:40:ef:22:7a:b8:d7:85:1a:1c:05:85:ad: b2:13:07:61:14:33:a0:21:f4:9c:b2:46:91:70:0c:c0:24:df: e0:a5:5c:da:a7:48:2e:d0:6c:b4:43:7e:e2:d2:5e:5a:50:9e: 16:05:37:3d:4b:3a:51:49:b9:5f:8a:d2:c3:47:e5:79:1d:ff: 26:2a:f1:80:23:88:13:5a:72:ee:5a:08:d8:d5:13:5b:78:e8: fe:54:70:ce:b6:a4:93:9c:d0:96:40:e7:49:52:20:f1:6b:fb: 23:4b:41:0d:23:39:56:03:3c:01:7f:fc:f4:1d:b3:50:70:69: ed:25:35:32:2b:62:e5:e0:a9:01:9f:85:69:b6:85:9d:0b:e2: 4a:25:59:0c:b3:a7:1d:34:db:46:f1:8a:df:23:e2:a2:2d:1a: 3d:3f:05:f3:a3:a8:8f:50:0d:6e:74:86:79:fd:45:b6:cf:71: 7d:33:0c:a4:9f:96:70:12:3e:24:bc:a3:13:f2:a7:8d:d4:76: e6:c8:99:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjUxMDE4MTYyNDMyWhcNMjUxMDI1MTYyNDMyWjAYMRYwFAYD VQQDEw02OGYzYmY0MS03Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNI6BrOoDKb7a1lfLodQsu9bpzw+j9112M/RbJvUyy+w3Lqj1p1j+y9/Kqcf zCpnvyI/gZXrQYfrpdFME5cp3gCUgDRyCkPnQTI9/zuxcDK/10iitmp+3rQ2xit5 iFfl3APSeyQQ+L0ik4V/vpeyuHKmRwFJbDCYGuUWq7ALkAbVuaY+vAsD2hhG4tFM U/HKEN/zF5SmHh76/1pZhKctLLzTj9bTRCWLY7MIlmGX1nicefoblDV+UfyUUZC+ gkqShp+P09o0129xmEHKABKUi64nrYD5G/m4m6XeFwtSd4wmWREKQ+Q6xSP66Sk5 fyu83kj6V+1cyrlcyf8OWMb8YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4PQyWk kEe108rntt+T/nqCBGSYMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfWOHhxLSqRCrllMMpT1hsFRUfENLebef/pg+ZwmLJvCgNRy/gV/N1 fZxkPrfOYo+h9a9TkLt75xiZUT9A7yJ6uNeFGhwFha2yEwdhFDOgIfScskaRcAzA JN/gpVzap0gu0Gy0Q37i0l5aUJ4WBTc9SzpRSblfitLDR+V5Hf8mKvGAI4gTWnLu WgjY1RNbeOj+VHDOtqSTnNCWQOdJUiDxa/sjS0ENIzlWAzwBf/z0HbNQcGntJTUy K2Ll4KkBn4VptoWdC+JKJVkMs6cdNNtG8YrfI+KiLRo9PwXzo6iPUA1udIZ5/UW2 z3F9Mwykn5ZwEj4kvKMT8qeN1HbmyJnC -----END CERTIFICATE-----Generated at Mon Oct 20 04:10:05 2025 by rpki-client