$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: IBOi7wVMVgaefmW7A81bD1B7hYVr9Pu2Tsp05X3gJVk= Subject key identifier: B1:67:E7:19:63:DB:63:6B:2D:D6:46:A9:4A:B3:17:F0:78:A4:67:37 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: EC Signing time: Sun 19 Oct 2025 08:36:23 +0000 Manifest this update: Sun 19 Oct 2025 08:36:22 +0000 Manifest next update: Sun 26 Oct 2025 08:36:22 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: PWgZwBBRNY53ZMf8WhrgUQN8uPiV/SuR+stZC2Cr4ZE=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Oct 19 08:36:22 2025 GMT Not After : Oct 26 08:36:22 2025 GMT Subject: CN=68f4a307-b9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:13:7e:81:e5:97:57:1f:0f:1c:98:54:d3: 67:db:7a:61:5d:d2:f6:3f:64:23:83:52:79:cd:a2: 94:1d:e6:39:6b:43:9e:6a:51:fd:de:3a:c4:2d:df: 32:21:a9:f6:58:a3:3b:b7:77:9f:8d:77:a6:ee:b2: e8:af:39:bb:42:f4:fd:b9:d4:a5:e4:f7:62:fa:cf: 21:32:d4:65:e3:b5:a2:f1:c5:75:e4:dd:fb:ac:86: 07:0d:1e:4c:e3:c8:d8:f7:79:f1:5f:2a:f6:c1:24: f9:27:7b:6b:48:3a:f0:4a:95:70:ed:e9:6b:17:17: 55:ed:f1:ee:d1:10:c4:ff:32:c0:40:20:53:fb:99: 3b:69:b6:50:07:7a:c2:82:2d:1f:4b:07:7d:3f:ff: b4:c4:9d:46:4f:62:19:00:e7:f1:7f:d7:6a:56:83: 51:e8:c9:0f:92:07:a9:5d:a0:c3:1f:04:1a:9a:6d: 24:73:0a:97:e1:f3:ff:00:08:55:d0:3c:75:80:59: 6f:4a:11:fa:3a:0c:d7:9c:d3:65:db:d6:6b:42:83: 87:e2:f8:06:16:77:a4:ff:d9:af:87:52:aa:83:71: 27:f8:92:60:7b:26:f9:94:cc:08:71:f0:c6:e7:69: d2:46:00:60:c7:18:8a:d0:fb:aa:ed:85:da:11:82: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:E7:19:63:DB:63:6B:2D:D6:46:A9:4A:B3:17:F0:78:A4:67:37 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3b:52:f4:50:4a:25:b9:2b:23:fe:41:5c:a2:20:b3:8f:eb: fd:40:86:e1:c6:bc:06:9d:1f:5f:03:17:bc:ca:b5:fd:39:b5: 0d:83:cf:f7:65:47:24:6a:d9:9e:15:70:a5:41:4f:ba:64:23: e8:df:0d:92:76:cb:5b:60:88:05:9d:41:94:a5:05:ec:bb:3c: 4a:17:4f:fb:5d:de:d6:f5:ba:7f:79:3f:31:75:1e:65:57:55: 7f:df:f2:d7:39:c9:02:9a:64:ea:43:f9:60:c0:9a:be:d6:90: ae:64:73:45:16:f6:fc:61:ae:d0:ee:f3:49:b5:44:de:95:37: 92:d2:9c:3a:a5:84:d5:94:bf:af:cb:15:59:00:a0:03:32:8d: 4e:15:3f:71:4e:ef:bf:61:07:c7:e5:e4:67:3f:d4:dc:f5:b4: 81:de:93:9d:0b:b6:6e:ce:37:02:37:cf:17:2a:a9:22:24:6b: 14:55:35:47:e4:f3:c2:55:17:15:e3:0a:92:0a:c2:27:fe:bb: 83:28:1f:85:96:50:b2:37:3e:bf:a6:bf:9c:c7:c2:8f:62:eb: fa:fa:9c:23:f1:3f:70:8e:8b:73:53:7d:ac:a6:58:78:8c:d0: 52:fb:5c:6b:e1:4e:82:29:37:a0:81:29:3d:3e:f5:63:e9:32: c9:10:1a:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUxMDE5MDgzNjIyWhcNMjUxMDI2MDgzNjIyWjAYMRYwFAYD VQQDEw02OGY0YTMwNy1iOWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhgTfoHll1cfDxyYVNNn23phXdL2P2Qjg1J5zaKUHeY5a0OealH93jrELd8y Ian2WKM7t3efjXem7rLorzm7QvT9udSl5Pdi+s8hMtRl47Wi8cV15N37rIYHDR5M 48jY93nxXyr2wST5J3trSDrwSpVw7elrFxdV7fHu0RDE/zLAQCBT+5k7abZQB3rC gi0fSwd9P/+0xJ1GT2IZAOfxf9dqVoNR6MkPkgepXaDDHwQamm0kcwqX4fP/AAhV 0Dx1gFlvShH6OgzXnNNl29ZrQoOH4vgGFnek/9mvh1Kqg3En+JJgeyb5lMwIcfDG 52nSRgBgxxiK0Puq7YXaEYKt3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFn5xlj 22NrLdZGqUqzF/B4pGc3MB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcO1L0UEoluSsj/kFcoiCzj+v9QIbhxrwGnR9fAxe8yrX9ObUNg8/3 ZUckatmeFXClQU+6ZCPo3w2SdstbYIgFnUGUpQXsuzxKF0/7Xd7W9bp/eT8xdR5l V1V/3/LXOckCmmTqQ/lgwJq+1pCuZHNFFvb8Ya7Q7vNJtUTelTeS0pw6pYTVlL+v yxVZAKADMo1OFT9xTu+/YQfH5eRnP9Tc9bSB3pOdC7ZuzjcCN88XKqkiJGsUVTVH 5PPCVRcV4wqSCsIn/ruDKB+FllCyNz6/pr+cx8KPYuv6+pwj8T9wjotzU32splh4 jNBS+1xr4U6CKTeggSk9PvVj6TLJEBqx -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:06 2025 by rpki-client