$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json) Hash identifier: 4wMObSzKuZ8vZk01LPI4YyW85exieLthiOz6G3MTczM= Subject key identifier: 6D:3C:E7:CC:F4:2F:44:1F:A6:F3:EC:67:D2:AF:5F:86:0E:C2:3B:07 Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 08:46:36 +0000 Manifest this update: Sun 19 Oct 2025 08:46:35 +0000 Manifest next update: Sun 26 Oct 2025 08:46:35 +0000 Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: Aae9h7iF/INVmS+tdnFXMvEAH7PN3M2Gb2mQj/2ekN4=) 2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: fujb24eQPYgPwcrZc8i7YcmXNyel+exUWMY7rJXI438=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Validity Not Before: Oct 19 08:46:35 2025 GMT Not After : Oct 26 08:46:35 2025 GMT Subject: CN=68f4a56b-370e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:72:d9:94:70:54:df:5d:16:48:0c:75:af: c5:d5:30:de:5f:d0:7c:19:81:ce:6e:53:5e:d3:fd: 70:79:d0:2f:f9:03:5a:b0:1c:05:22:9c:0b:b1:61: 1d:9f:b1:fa:7c:74:0f:b6:33:a6:d4:e3:ef:5f:77: d6:58:0b:9d:1e:4e:02:08:cd:49:83:92:71:ac:29: 75:d6:e2:c8:76:ad:70:65:3e:b6:74:d4:4b:16:fd: 3a:11:e3:be:09:12:e1:c7:a1:14:2c:4f:52:a7:52: 76:27:b0:ed:4f:ef:22:26:f4:93:9b:4d:e7:fc:93: a4:f6:f8:2e:4d:12:f1:30:7b:76:09:fa:e8:cf:3c: 21:14:9c:b9:98:17:3d:ca:19:1e:24:b6:f9:96:55: a9:04:98:10:6e:7c:7f:47:60:6e:6e:cb:88:ae:29: ab:92:fa:76:b7:22:6b:7e:38:48:fc:77:f6:9a:cd: ba:8e:e0:83:ef:88:c3:39:f1:a8:bc:cb:b0:59:61: b0:78:59:1f:ca:95:55:83:62:56:6b:c9:1f:e0:a3: 35:7f:b9:68:0b:ec:81:8c:85:94:0e:3a:2a:f4:4c: 4e:8f:91:28:54:2b:29:78:5f:c2:66:28:5e:c9:07: 40:48:08:06:55:a1:04:b8:79:87:b2:c8:fb:37:30: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3C:E7:CC:F4:2F:44:1F:A6:F3:EC:67:D2:AF:5F:86:0E:C2:3B:07 X509v3 Authority Key Identifier: keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ee:c1:2f:99:77:ac:06:36:5f:80:6d:c9:d4:21:63:37:87: 9a:4a:38:79:80:f3:5c:c5:56:cd:b1:00:68:2f:37:87:8c:35: 0b:a0:80:85:df:33:ac:de:fa:0e:24:7d:47:06:c0:57:29:8f: ac:69:cb:78:29:ad:7c:65:97:7b:fe:2b:f7:5b:ef:23:f5:8a: 41:03:0d:f0:2e:87:e9:11:69:3b:5d:69:9d:3f:0f:c2:5a:a8: 09:cb:ce:58:75:bc:20:e6:09:48:82:07:64:74:ae:d4:15:fd: 43:1b:ae:a6:16:a2:21:7d:9d:99:6d:04:03:66:3a:3a:86:10: 5e:7d:7f:56:bd:18:03:0e:dc:0d:2c:a0:70:f9:ec:66:8c:e5: 6c:e9:32:86:5c:20:5a:f0:c4:bf:70:c6:ff:e2:cf:e9:1f:6b: 52:91:8b:34:0e:3f:a6:63:42:bc:2b:21:1b:6f:b6:6f:41:37: a5:97:e2:2a:d2:ec:19:65:e8:8f:3c:0f:87:a8:b0:18:bd:d8: 02:2c:b3:9e:67:61:5c:9e:3b:d5:b3:c5:a2:79:66:7f:b3:f4: d5:f3:2d:39:f9:df:10:b4:b9:9f:e1:54:8b:e0:d9:d2:39:17: 04:d8:e5:97:2e:37:b7:cb:8a:de:55:2d:5b:57:36:b4:a8:85: 40:87:4f:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDE3NUQ0MjAyMkJGNTBCRDZDMjBGMzBCMUM1QUQ4Qzk0 RTA4NUJDNEUwHhcNMjUxMDE5MDg0NjM1WhcNMjUxMDI2MDg0NjM1WjAYMRYwFAYD VQQDEw02OGY0YTU2Yi0zNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqThy2ZRwVN9dFkgMda/F1TDeX9B8GYHOblNe0/1wedAv+QNasBwFIpwLsWEd n7H6fHQPtjOm1OPvX3fWWAudHk4CCM1Jg5JxrCl11uLIdq1wZT62dNRLFv06EeO+ CRLhx6EULE9Sp1J2J7DtT+8iJvSTm03n/JOk9vguTRLxMHt2CfrozzwhFJy5mBc9 yhkeJLb5llWpBJgQbnx/R2BubsuIrimrkvp2tyJrfjhI/Hf2ms26juCD74jDOfGo vMuwWWGweFkfypVVg2JWa8kf4KM1f7loC+yBjIWUDjoq9ExOj5EoVCspeF/CZihe yQdASAgGVaEEuHmHssj7NzDduQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0858z0 L0QfpvPsZ9KvX4YOwjsHMB8GA1UdIwQYMBaAFBddQgIr9QvWwg8wscWtjJTghbxO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9FQUJGRUJGMjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5YkNEekN4eGEyTWxPQ0Z2 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0YxMUNBaXYxQzliQ0R6Q3h4YTJNbE9DRnZFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9FQUJGRUJGMjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5 YkNEekN4eGEyTWxPQ0Z2RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc7sEvmXesBjZfgG3J1CFjN4eaSjh5gPNcxVbNsQBoLzeHjDULoICF 3zOs3voOJH1HBsBXKY+sact4Ka18ZZd7/iv3W+8j9YpBAw3wLofpEWk7XWmdPw/C WqgJy85Ydbwg5glIggdkdK7UFf1DG66mFqIhfZ2ZbQQDZjo6hhBefX9WvRgDDtwN LKBw+exmjOVs6TKGXCBa8MS/cMb/4s/pH2tSkYs0Dj+mY0K8KyEbb7ZvQTell+Iq 0uwZZeiPPA+HqLAYvdgCLLOeZ2FcnjvVs8WieWZ/s/TV8y05+d8QtLmf4VSL4NnS ORcE2OWXLje3y4reVS1bVza0qIVAh08C -----END CERTIFICATE-----Generated at Tue Oct 21 07:55:02 2025 by rpki-client