$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: FcBvFSjYe0VbNBs5m6mupJ4MOuxf4dx8C4xq/pfcV8Q= Subject key identifier: 43:71:65:2A:52:2D:2C:A4:79:12:DF:C8:F8:37:55:02:83:88:65:18 Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0C89 Signing time: Sat 18 Oct 2025 19:16:00 +0000 Manifest this update: Sat 18 Oct 2025 19:16:00 +0000 Manifest next update: Sat 25 Oct 2025 19:16:00 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: mTKz2y484xYgLJUfXk08B5m2UgGtBvE3BUQVeHITVsw=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: cegor5RnBc3HGGToc+6Lymvpp6wumcl5jw4jwYNABG8=) 3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: HGkfh3dEEIqv+3vFhSnMi2VsaDRfK/TUjKt6kaMeksE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: Oct 18 19:16:00 2025 GMT Not After : Oct 25 19:16:00 2025 GMT Subject: CN=68f3e770-69fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:0d:37:e8:c1:49:d8:1e:09:9a:62:2b:68: c5:a1:09:20:61:39:d1:81:9a:f7:ea:5d:17:48:be: 67:19:49:ea:e9:1b:0d:c0:f7:24:33:05:1b:77:be: 76:36:cb:e9:f9:b2:f7:57:57:7c:6a:a6:c7:c0:49: 26:02:d5:66:83:ff:2d:ae:8d:b4:83:9e:3e:f0:23: 1e:d6:63:db:e7:6b:f2:07:0d:06:4c:1a:85:3c:4e: ad:6b:4d:2f:9a:e8:8e:32:97:ac:2d:80:68:1f:0d: ab:45:72:d0:3e:c7:8d:46:57:62:45:08:33:5b:39: 0a:0d:16:3a:f0:f6:36:4c:0c:0d:85:d8:77:1c:25: 10:08:b0:0e:e6:ae:e6:e8:05:fa:d7:7c:72:d0:85: f7:f3:e1:2e:dd:e2:62:90:f1:18:fb:55:f0:76:2b: 09:7b:5d:9a:ad:8d:88:b9:a9:a6:7d:6b:b3:41:f1: 86:29:06:9c:e4:95:a2:28:67:e8:12:e8:27:30:07: 14:82:df:a6:ae:9e:fa:cd:a0:80:38:12:9d:fc:95: 94:f6:f9:5e:98:63:b4:ec:24:89:54:5f:52:3e:7d: 50:eb:3d:ae:82:21:45:3c:ea:0d:75:6f:f2:8a:7c: 6c:37:66:07:08:24:ee:7b:11:70:89:a0:e6:9a:82: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:71:65:2A:52:2D:2C:A4:79:12:DF:C8:F8:37:55:02:83:88:65:18 X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:b2:fc:fa:18:7c:36:ea:f1:df:c0:84:b8:22:31:1b:7c: 55:19:3b:17:f9:59:17:13:ca:5e:18:ec:7e:14:48:4f:8a:22: 16:63:3b:bf:76:2b:d4:7e:28:5c:74:6d:65:d2:10:e9:61:58: d6:39:b2:ea:fe:ef:84:d8:0a:b1:2d:24:54:ca:6b:d0:a5:b9: e8:ac:ed:a8:2b:44:d5:f0:ab:af:70:ae:b2:c4:e5:17:ef:c1: bd:c5:f1:ba:ad:99:7d:06:4b:2f:37:ed:91:9c:5f:89:50:62: c8:70:9c:2c:3b:53:dc:92:e5:b6:c4:55:c7:61:23:d0:0f:82: f3:16:6a:ef:75:13:f5:c2:fa:a5:ab:5d:b6:6a:08:79:57:d5: e6:99:ac:f8:bc:97:72:6e:0f:f0:16:3f:3e:01:18:53:3a:f4: 2e:a2:29:14:9b:91:ba:a4:76:b5:d1:d1:4a:f3:89:4f:60:a7: bd:4e:03:d4:ea:33:ee:a4:ba:01:43:70:2f:28:c1:70:70:38: b7:fe:b8:e0:de:45:d9:4d:a0:6b:d1:3b:f2:59:df:97:f8:15: f2:b7:65:05:e6:f3:fe:98:9b:32:2c:69:e9:30:9e:be:2c:0b: 86:24:d5:28:4e:c9:bc:26:e6:f8:d1:9f:6b:c6:40:4a:e4:d0: bb:a1:65:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUxMDE4MTkxNjAwWhcNMjUxMDI1MTkxNjAwWjAYMRYwFAYD VQQDEw02OGYzZTc3MC02OWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut8NN+jBSdgeCZpiK2jFoQkgYTnRgZr36l0XSL5nGUnq6RsNwPckMwUbd752 Nsvp+bL3V1d8aqbHwEkmAtVmg/8tro20g54+8CMe1mPb52vyBw0GTBqFPE6ta00v muiOMpesLYBoHw2rRXLQPseNRldiRQgzWzkKDRY68PY2TAwNhdh3HCUQCLAO5q7m 6AX613xy0IX38+Eu3eJikPEY+1XwdisJe12arY2IuammfWuzQfGGKQac5JWiKGfo EugnMAcUgt+mrp76zaCAOBKd/JWU9vlemGO07CSJVF9SPn1Q6z2ugiFFPOoNdW/y inxsN2YHCCTuexFwiaDmmoLV2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENxZSpS LSykeRLfyPg3VQKDiGUYMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5hbL8+hh8Nurx38CEuCIxG3xVGTsX+VkXE8peGOx+FEhPiiIWYzu/ divUfihcdG1l0hDpYVjWObLq/u+E2AqxLSRUymvQpbnorO2oK0TV8KuvcK6yxOUX 78G9xfG6rZl9BksvN+2RnF+JUGLIcJwsO1PckuW2xFXHYSPQD4LzFmrvdRP1wvql q122agh5V9Xmmaz4vJdybg/wFj8+ARhTOvQuoikUm5G6pHa10dFK84lPYKe9TgPU 6jPupLoBQ3AvKMFwcDi3/rjg3kXZTaBr0TvyWd+X+BXyt2UF5vP+mJsyLGnpMJ6+ LAuGJNUoTsm8Jub40Z9rxkBK5NC7oWUr -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:23 2025 by rpki-client