$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: tz0P4mk1o7YHKpkcsEg0L2YOiLa7ZdEYa4D+CiBg3xw= Subject key identifier: 62:46:D8:6D:BB:8F:6F:CB:F4:F5:C9:04:A1:77:4B:96:EA:9A:BA:9D Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1AA7 Signing time: Sat 18 Oct 2025 16:40:24 +0000 Manifest this update: Sat 18 Oct 2025 16:40:23 +0000 Manifest next update: Sat 25 Oct 2025 16:40:23 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: mcHJe3OCxW6sw9nZ05T5ZwxiNcmwXYfD41BemwwEt3w=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: JDbo72SPqBZERT5W0ydUMhl3jfbjfWwgaMjrsH1k1kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6834 (0x1ab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Oct 18 16:40:23 2025 GMT Not After : Oct 25 16:40:23 2025 GMT Subject: CN=68f3c2f8-e4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:3e:04:69:74:61:0b:35:fc:88:fc:8f:52: 73:e6:98:61:22:68:85:fa:c3:b5:80:db:99:70:41: 27:e2:96:27:d5:d2:c5:27:15:00:5e:92:70:f2:0f: 42:00:c7:24:8d:8a:4a:07:06:b3:82:e2:b8:25:84: 6f:94:28:9a:f0:1d:90:ad:35:7f:f6:28:f0:b7:45: 65:ba:2e:08:7f:1a:10:31:a6:6d:be:99:67:93:33: 8d:d3:98:55:dd:5c:96:04:c7:d9:24:a2:05:e8:99: 58:68:d0:ac:4b:bd:dc:87:1d:4d:26:be:cf:25:e1: 0a:75:46:5f:7a:7f:e8:07:c3:06:30:f1:38:12:6e: 9a:6c:30:ff:05:12:5a:6a:21:74:79:6a:31:bf:5b: 0a:8e:ba:58:17:c4:33:47:0c:25:df:cc:d4:a2:d6: 6d:94:53:9d:93:9f:75:b9:7b:99:90:10:70:cf:57: 2c:e0:a7:42:f0:41:b1:cc:b0:5a:73:cc:d6:98:ae: 79:60:8c:2a:e1:71:b2:d8:2f:87:13:1a:a7:c4:de: 90:60:16:a3:9a:ef:3c:83:08:8d:8c:10:6a:bf:e8: 54:83:4b:50:c5:cf:db:d3:1a:b7:0b:0c:a8:74:81: 0f:14:73:2f:83:e3:d5:cf:0a:8c:cf:b1:83:2a:34: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:46:D8:6D:BB:8F:6F:CB:F4:F5:C9:04:A1:77:4B:96:EA:9A:BA:9D X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:73:dd:54:54:f7:c8:1f:4c:3f:5c:85:fc:ce:fd:4d:8b:e8: 04:30:b1:d4:34:1e:99:69:31:8e:68:be:b5:3e:f5:e4:f3:14: 84:b8:72:48:65:65:9e:11:4c:af:a8:43:07:fb:90:b4:27:ea: ff:48:66:c5:29:c6:5a:50:da:58:d6:6f:48:58:f2:0d:67:81: 65:76:a2:7f:bc:ec:06:3e:ec:cd:ae:2e:87:c5:fd:64:16:ad: 60:53:85:ec:b6:da:2f:1d:46:89:aa:a3:2c:e2:46:af:bc:b6: 59:ea:77:40:e8:e9:e3:17:cb:c1:ca:70:fe:2d:96:1e:fc:3d: b5:4e:a3:34:b5:73:ab:cc:58:a4:c7:d7:1f:a3:02:82:c7:49: 33:e2:c4:c1:4b:17:09:eb:49:fe:1c:08:81:2d:6e:fa:af:1d: 74:64:72:dc:f7:d6:18:43:a7:98:bb:28:af:9e:38:3c:b3:1d: 0d:60:9e:33:78:01:52:1f:61:3e:5c:2d:37:b0:5d:ec:da:3e: 8f:2f:de:88:e8:25:3f:4c:ec:6c:2d:c4:3a:63:da:ac:dd:c0: fa:e9:2e:5b:10:86:20:40:0e:c4:16:75:4d:d3:b9:85:a4:18: 87:4e:f6:a4:f1:57:4c:66:70:b0:a5:16:c2:1b:be:48:b3:f6: 8a:94:4c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUxMDE4MTY0MDIzWhcNMjUxMDI1MTY0MDIzWjAYMRYwFAYD VQQDEw02OGYzYzJmOC1lNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuw+BGl0YQs1/Ij8j1Jz5phhImiF+sO1gNuZcEEn4pYn1dLFJxUAXpJw8g9C AMckjYpKBwazguK4JYRvlCia8B2QrTV/9ijwt0Vlui4IfxoQMaZtvplnkzON05hV 3VyWBMfZJKIF6JlYaNCsS73chx1NJr7PJeEKdUZfen/oB8MGMPE4Em6abDD/BRJa aiF0eWoxv1sKjrpYF8QzRwwl38zUotZtlFOdk591uXuZkBBwz1cs4KdC8EGxzLBa c8zWmK55YIwq4XGy2C+HExqnxN6QYBajmu88gwiNjBBqv+hUg0tQxc/b0xq3Cwyo dIEPFHMvg+PVzwqMz7GDKjRgBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJG2G27 j2/L9PXJBKF3S5bqmrqdMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5c91UVPfIH0w/XIX8zv1Ni+gEMLHUNB6ZaTGOaL61PvXk8xSEuHJI ZWWeEUyvqEMH+5C0J+r/SGbFKcZaUNpY1m9IWPINZ4FldqJ/vOwGPuzNri6Hxf1k Fq1gU4XsttovHUaJqqMs4kavvLZZ6ndA6OnjF8vBynD+LZYe/D21TqM0tXOrzFik x9cfowKCx0kz4sTBSxcJ60n+HAiBLW76rx10ZHLc99YYQ6eYuyivnjg8sx0NYJ4z eAFSH2E+XC03sF3s2j6PL96I6CU/TOxsLcQ6Y9qs3cD66S5bEIYgQA7EFnVN07mF pBiHTvak8VdMZnCwpRbCG75Is/aKlExp -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:07 2025 by rpki-client