$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json) Hash identifier: UloI4Od2wGElVHOBCwtvIhm8esmRvhkM9bykk15kjDM= Subject key identifier: 1F:4A:D8:36:03:FC:CB:BA:14:D7:FA:7E:AF:AA:C6:51:1C:DC:F6:97 Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft Manifest number: 09 Signing time: Sun 19 Oct 2025 11:37:33 +0000 Manifest this update: Sun 19 Oct 2025 11:37:32 +0000 Manifest next update: Sun 26 Oct 2025 11:37:32 +0000 Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: EGLBoW1qh0w9uN/ehvtIZXRdNdXVyG3X1g6HmbgB4is=) 2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: gfhnOPzDyM+Fg9J0TvNJzwIQWU3jT5AWtZ4rTSQDxgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Oct 19 11:37:32 2025 GMT Not After : Oct 26 11:37:32 2025 GMT Subject: CN=68f4cd7c-5b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:04:2f:d0:1b:3a:1a:60:b5:c5:fc:de:0c: b5:64:8a:8d:97:9b:c9:fe:7b:06:22:91:86:5a:76: 08:25:07:be:38:26:87:ad:98:89:ee:81:94:f7:d7: e1:6c:5b:61:8f:e7:8a:39:1e:20:95:d0:1c:9f:23: 8e:65:47:f2:fb:7f:d2:34:00:42:91:ba:a3:c7:75: bd:28:95:e1:34:1b:af:39:92:da:01:5b:10:e3:3e: f4:78:ab:46:ec:64:39:4f:d7:cb:cf:c1:43:93:e4: 92:c8:36:5f:5f:ea:e7:46:88:50:17:8f:e2:7d:83: df:c4:3c:13:a3:10:c3:05:74:0f:f7:aa:6b:a7:7e: 99:d8:79:aa:81:02:63:51:e7:3f:7d:ad:74:1a:ec: 93:91:03:85:28:de:03:47:c9:4e:38:4d:09:17:b8: 6b:51:01:0f:fd:14:95:ec:ca:8e:97:3d:a2:21:d3: d9:18:a6:2b:f8:3d:a9:49:1e:37:23:1e:3a:b9:90: fd:03:35:e4:8b:2d:37:e4:ee:6e:ec:e4:c4:27:99: 65:3b:d4:35:74:3a:c5:9b:53:23:88:b1:80:c6:aa: 87:37:e0:61:db:9e:7e:31:89:fe:00:96:ac:4b:da: 1e:a3:7e:df:1e:a7:04:e1:8c:e1:8c:52:ee:d1:29: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4A:D8:36:03:FC:CB:BA:14:D7:FA:7E:AF:AA:C6:51:1C:DC:F6:97 X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:14:83:fc:29:87:a2:e2:68:47:e7:c9:35:33:f1:96:69:30: 59:71:80:14:2b:d4:3c:a9:32:e4:57:dc:b4:0e:36:78:5e:5e: ac:ab:fb:37:d2:43:ee:60:49:9b:7c:9c:69:c9:f2:6c:ee:65: 43:57:d6:94:12:c9:a2:b6:84:74:15:e2:9f:63:79:5b:ba:ec: ca:78:6a:f1:aa:5d:b3:12:2f:89:18:b0:ee:a4:b2:c3:ff:8d: 01:3f:7e:f6:d7:66:71:b9:30:73:ff:86:be:e1:c8:83:af:72: f4:19:a7:8f:ba:a9:a5:dd:16:6a:ee:6d:94:38:83:0e:d6:fc: 07:29:d3:ae:69:f5:d8:de:62:1e:d6:29:30:e8:ec:84:95:20: c3:f5:4f:14:a4:7c:d5:9f:f6:38:6b:2a:db:37:34:f6:3b:30: ff:5a:c5:14:ae:30:6c:6e:65:f0:16:a0:bd:bd:b5:bc:76:7f: b0:e8:5e:60:ee:b5:4e:72:cd:00:1c:7f:30:17:85:34:a4:6e: 5e:a7:f3:7d:58:79:da:97:92:5c:0d:1a:a5:69:77:ae:ac:a8: 33:d2:78:d9:36:2b:10:a5:02:18:24:ac:15:d1:71:e7:1b:50: 22:6b:83:b8:da:04:9d:6f:6e:30:00:52:df:39:04:89:1f:8f: 57:5f:5c:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzI1RjExMC8GA1UEBRMoNDg2Q0I4MTZCRTNBNUUwM0NCNzI3NzI5ODhBMERFMEVB OTcyQ0RBQTAeFw0yNTEwMTkxMTM3MzJaFw0yNTEwMjYxMTM3MzJaMBgxFjAUBgNV BAMTDTY4ZjRjZDdjLTViMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSvAQv0Bs6GmC1xfzeDLVkio2Xm8n+ewYikYZadgglB744JoetmInugZT31+Fs W2GP54o5HiCV0ByfI45lR/L7f9I0AEKRuqPHdb0oleE0G685ktoBWxDjPvR4q0bs ZDlP18vPwUOT5JLINl9f6udGiFAXj+J9g9/EPBOjEMMFdA/3qmunfpnYeaqBAmNR 5z99rXQa7JORA4Uo3gNHyU44TQkXuGtRAQ/9FJXsyo6XPaIh09kYpiv4PalJHjcj Hjq5kP0DNeSLLTfk7m7s5MQnmWU71DV0OsWbUyOIsYDGqoc34GHbnn4xif4AlqxL 2h6jft8epwThjOGMUu7RKVPVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH0rYNgP8 y7oU1/p+r6rGURzc9pcwHwYDVR0jBBgwFoAUSGy4Fr46XgPLcncpiKDeDqlyzaow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMjVGL0ZDMUZCRTkyQTI3 NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXph by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0d5NEZyNDZYZ1BMY25jcGlLRGVEcWx5emFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MjVGL0ZDMUZCRTkyQTI3NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQ TGNuY3BpS0RlRHFseXphby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIUg/wph6LiaEfnyTUz8ZZpMFlxgBQr1DypMuRX3LQONnheXqyr+zfS Q+5gSZt8nGnJ8mzuZUNX1pQSyaK2hHQV4p9jeVu67Mp4avGqXbMSL4kYsO6kssP/ jQE/fvbXZnG5MHP/hr7hyIOvcvQZp4+6qaXdFmrubZQ4gw7W/Acp065p9djeYh7W KTDo7ISVIMP1TxSkfNWf9jhrKts3NPY7MP9axRSuMGxuZfAWoL29tbx2f7DoXmDu tU5yzQAcfzAXhTSkbl6n831YedqXklwNGqVpd66sqDPSeNk2KxClAhgkrBXRcecb UCJrg7jaBJ1vbjAAUt85BIkfj1dfXKc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:09:07 2025 by rpki-client