$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json) Hash identifier: qcd5N6Iwx+hR7r/+U7B+EOSh2vQ9xdLUK3PajNXode8= Subject key identifier: B7:6A:D0:5E:7F:D7:5F:9B:F5:C8:59:8B:CD:C9:5A:99:C0:2C:94:B2 Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft Manifest number: 01B2 Signing time: Sun 19 Oct 2025 05:43:49 +0000 Manifest this update: Sun 19 Oct 2025 05:43:48 +0000 Manifest next update: Sun 26 Oct 2025 05:43:48 +0000 Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: 06uTBe26Eh+Bwg+KFm4yL+sI6BQJMHzVgkEMDJxPaN0=) 2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Validity Not Before: Oct 19 05:43:48 2025 GMT Not After : Oct 26 05:43:48 2025 GMT Subject: CN=68f47a95-5614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:38:40:ce:24:ae:77:d3:07:0a:dc:97:b7: ee:7c:4e:4e:bf:49:73:f8:d4:0b:06:0e:df:d6:b2: ce:36:8f:23:7d:b9:58:0a:43:13:41:b5:49:4c:71: 2a:a8:92:f7:34:1a:b9:85:01:71:36:2c:3f:01:b9: 27:a2:4a:62:85:f4:58:fe:20:99:ed:1a:9b:9d:3f: 08:6b:82:df:35:5b:c9:8b:d9:e2:3c:f3:20:1f:aa: a2:1c:28:1a:13:56:df:f8:ba:12:ec:7a:e4:98:6a: c1:00:39:eb:43:0e:35:f2:90:41:b8:cd:c6:90:72: ae:a5:03:34:03:8e:28:2b:d9:c5:9d:ea:72:75:74: 34:6b:be:1e:93:7e:eb:43:48:e9:bb:9a:e5:6c:b3: 59:2b:37:c7:07:14:28:f9:b7:2c:f2:8c:1b:fb:c2: f8:3c:99:31:c1:aa:51:6e:3f:26:a7:10:b4:c5:05: 23:d2:aa:b6:13:4b:08:f4:f5:06:57:1f:0c:eb:6d: 0a:a7:6c:24:24:73:27:4c:a5:18:95:ab:0c:89:53: 17:85:5f:51:5c:35:d6:95:5c:5e:64:a6:17:65:c0: a9:28:0b:2a:e0:2a:b5:ee:6a:09:ef:8c:41:57:5b: a6:76:bc:01:0e:2f:d0:3a:eb:6e:9e:6f:72:54:c6: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6A:D0:5E:7F:D7:5F:9B:F5:C8:59:8B:CD:C9:5A:99:C0:2C:94:B2 X509v3 Authority Key Identifier: keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e4:c7:6f:4c:0f:85:4f:91:0e:0e:c8:ee:4f:99:5c:3e:e5: b5:cd:d6:a3:36:cd:8d:33:e4:8c:d8:09:03:98:cc:5b:07:bd: 23:e9:3c:e7:b5:de:a6:27:1b:45:cd:c5:4d:90:f5:2c:1a:cf: 9f:2c:14:2b:13:66:b3:68:7a:e2:43:41:e0:69:65:c2:c7:d6: 70:ff:b2:3b:2b:c3:4a:33:58:50:24:eb:20:f6:a4:30:6d:7f: 15:76:43:1d:76:c4:20:f0:d9:bc:49:40:a6:c9:ea:fd:6c:32: 62:f3:89:f0:18:16:e1:92:7b:4c:3e:52:bf:ec:e9:1f:77:5e: ee:fd:31:b6:c7:79:f9:60:7c:27:08:4f:b4:f1:d5:df:8e:c8: 69:5e:d4:d9:ca:b2:95:f6:c3:5d:92:4e:11:c4:4d:4d:75:4d: bf:bd:83:2b:7a:99:e2:b5:71:b4:02:ab:a4:e0:1b:64:e1:70: 05:bf:29:53:79:ee:0f:92:8a:2a:29:98:b5:e1:3d:a5:e1:25: 8e:72:42:68:5a:a3:67:9a:e0:0f:2e:05:fe:20:6e:4f:d5:ea: 3a:27:36:0b:84:71:75:28:9d:d1:a6:84:e4:ad:94:9b:6d:59: 84:28:3b:b3:31:ac:f7:52:76:23:09:1e:ec:d2:ea:2f:09:ec: bb:15:2c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1 RTI5RkM0OEEwHhcNMjUxMDE5MDU0MzQ4WhcNMjUxMDI2MDU0MzQ4WjAYMRYwFAYD VQQDEw02OGY0N2E5NS01NjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYY4QM4krnfTBwrcl7fufE5Ov0lz+NQLBg7f1rLONo8jfblYCkMTQbVJTHEq qJL3NBq5hQFxNiw/AbknokpihfRY/iCZ7RqbnT8Ia4LfNVvJi9niPPMgH6qiHCga E1bf+LoS7HrkmGrBADnrQw418pBBuM3GkHKupQM0A44oK9nFnepydXQ0a74ek37r Q0jpu5rlbLNZKzfHBxQo+bcs8owb+8L4PJkxwapRbj8mpxC0xQUj0qq2E0sI9PUG Vx8M620Kp2wkJHMnTKUYlasMiVMXhV9RXDXWlVxeZKYXZcCpKAsq4Cq17moJ74xB V1umdrwBDi/QOutunm9yVMapuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdq0F5/ 11+b9chZi83JWpnALJSyMB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdBRC9DRTZDMjM3QTIwQTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVs bE1keUxUd2h0UkJlS2Z4SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA5MdvTA+FT5EODsjuT5lcPuW1zdajNs2NM+SM2AkDmMxbB70j6Tzn td6mJxtFzcVNkPUsGs+fLBQrE2azaHriQ0HgaWXCx9Zw/7I7K8NKM1hQJOsg9qQw bX8VdkMddsQg8Nm8SUCmyer9bDJi84nwGBbhkntMPlK/7Okfd17u/TG2x3n5YHwn CE+08dXfjshpXtTZyrKV9sNdkk4RxE1NdU2/vYMrepnitXG0Aquk4Btk4XAFvylT ee4PkooqKZi14T2l4SWOckJoWqNnmuAPLgX+IG5P1eo6JzYLhHF1KJ3RpoTkrZSb bVmEKDuzMaz3UnYjCR7s0uovCey7FSwQ -----END CERTIFICATE-----Generated at Tue Oct 21 01:01:27 2025 by rpki-client