$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: P6SfperU3qQSZVMUDHKCfCi+8C0lLjfHWEdfhJOZ30s= Subject key identifier: DD:A8:F9:05:00:CF:42:46:CA:85:1B:6D:31:6C:B5:8A:21:B2:6B:8B Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: 0101 Signing time: Sun 19 Oct 2025 08:01:44 +0000 Manifest this update: Sun 19 Oct 2025 08:01:44 +0000 Manifest next update: Sun 26 Oct 2025 08:01:44 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: FykoFQmqe3q2n40F0OAMS0P1Os5bcJWdvnc56QbyNCM=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Oct 19 08:01:44 2025 GMT Not After : Oct 26 08:01:44 2025 GMT Subject: CN=68f49ae8-2168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:bf:7e:4a:49:fc:65:a9:6d:0f:14:20:d0: 4c:19:3f:6b:a9:00:6a:26:a0:e5:57:4d:0d:33:52: c8:a3:59:95:66:ae:97:5e:1b:68:d7:04:1c:31:6c: d1:2e:2e:9f:94:28:96:49:03:71:2e:55:20:5f:22: 8f:ad:ae:67:f4:68:a0:f6:51:20:14:f2:1e:42:3d: 9c:7a:ef:b2:be:4b:0d:15:c6:c5:d5:43:03:82:de: d4:b0:cb:80:52:e7:27:ec:c6:a1:71:ea:99:5d:36: e8:09:ff:78:40:b1:ca:79:26:32:9c:28:45:4a:db: 32:c4:63:60:91:4b:f5:32:f1:6a:7a:2b:1a:26:02: 7e:ef:74:1f:b5:5c:12:ab:48:60:bc:34:28:5d:d0: 26:31:fd:4d:8b:20:1a:81:63:a0:c8:a0:6e:92:17: 37:a7:ed:c4:89:9f:fb:09:80:af:cc:2a:6f:45:8d: 93:3b:77:f3:58:dc:50:0b:5a:38:6f:eb:4f:71:c2: d0:fb:de:68:01:9a:dd:bd:c8:17:32:79:be:57:92: 9b:09:18:76:8b:6f:5d:61:92:97:5e:4d:cc:bf:f9: 2e:17:f3:62:60:e6:71:2c:d3:f6:3a:a9:ba:e6:ee: 64:60:05:05:0c:0e:d8:d8:50:db:43:2a:c7:67:d0: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:F9:05:00:CF:42:46:CA:85:1B:6D:31:6C:B5:8A:21:B2:6B:8B X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:40:3c:4f:ae:ff:ee:34:e9:30:96:f8:53:18:26:6b:c1:23: dd:da:46:12:ad:26:79:54:d6:5e:a6:13:29:2a:e6:17:a0:5b: 3f:4c:bf:bc:ca:9f:0d:1e:f3:6f:6f:53:2e:b3:f2:bc:07:4d: 76:f7:f9:d4:eb:df:ac:c6:ec:3e:47:5c:e2:fa:2c:a2:b4:aa: ad:73:8c:e2:db:af:06:94:c5:f3:11:ef:4f:5d:4e:80:eb:2b: 3f:8d:cf:b4:41:ab:59:13:4c:e9:e2:80:d8:58:6c:6b:4b:7a: 68:0f:a9:ea:85:4a:a1:df:9d:a4:bb:a5:d5:2b:b0:fa:38:e0: 3c:b8:16:44:85:0f:32:06:66:6d:22:14:e5:0e:bb:8f:41:63: 1c:62:51:c0:1c:81:81:de:4a:f9:6a:e3:05:f2:59:36:5a:b9: c4:ca:4f:f2:46:8d:35:2b:c3:ac:ed:bf:15:71:cd:2d:59:33: e5:5a:ea:d4:81:0d:57:4e:29:c9:2d:3a:f2:dc:ef:d4:29:aa: 24:b5:03:ea:29:86:70:14:25:bb:7b:92:35:67:6f:a3:fa:ca: 1c:6b:90:49:8d:27:9f:14:59:e9:30:5a:03:c7:f8:50:36:76: 0b:b7:59:b9:f3:03:d5:ce:5f:85:dd:63:09:ff:71:5e:dd:6e: b6:30:53:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUxMDE5MDgwMTQ0WhcNMjUxMDI2MDgwMTQ0WjAYMRYwFAYD VQQDEw02OGY0OWFlOC0yMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0y/fkpJ/GWpbQ8UINBMGT9rqQBqJqDlV00NM1LIo1mVZq6XXhto1wQcMWzR Li6flCiWSQNxLlUgXyKPra5n9Gig9lEgFPIeQj2ceu+yvksNFcbF1UMDgt7UsMuA Uucn7MahceqZXTboCf94QLHKeSYynChFStsyxGNgkUv1MvFqeisaJgJ+73QftVwS q0hgvDQoXdAmMf1NiyAagWOgyKBukhc3p+3EiZ/7CYCvzCpvRY2TO3fzWNxQC1o4 b+tPccLQ+95oAZrdvcgXMnm+V5KbCRh2i29dYZKXXk3Mv/kuF/NiYOZxLNP2Oqm6 5u5kYAUFDA7Y2FDbQyrHZ9Da7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2o+QUA z0JGyoUbbTFstYohsmuLMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjQDxPrv/uNOkwlvhTGCZrwSPd2kYSrSZ5VNZephMpKuYXoFs/TL+8 yp8NHvNvb1Mus/K8B0129/nU69+sxuw+R1zi+iyitKqtc4zi268GlMXzEe9PXU6A 6ys/jc+0QatZE0zp4oDYWGxrS3poD6nqhUqh352ku6XVK7D6OOA8uBZEhQ8yBmZt IhTlDruPQWMcYlHAHIGB3kr5auMF8lk2WrnEyk/yRo01K8Os7b8Vcc0tWTPlWurU gQ1XTinJLTry3O/UKaoktQPqKYZwFCW7e5I1Z2+j+soca5BJjSefFFnpMFoDx/hQ NnYLt1m58wPVzl+F3WMJ/3Fe3W62MFPO -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:53 2025 by rpki-client