$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: ea6bS2uF7dT5m/V0dX6bxnZqm3Kb0Lhxm+WW3HC/WtU= Subject key identifier: 4A:4A:7A:6C:A2:82:55:D4:C5:13:2B:0F:E4:F2:FA:A9:A2:2E:CC:67 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 07:33:45 +0000 Manifest this update: Sun 19 Oct 2025 07:33:44 +0000 Manifest next update: Sun 26 Oct 2025 07:33:44 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: TtX32a8SjlPiY86oKm/fV8hefVc4PQn3xTo2iKuqaXM=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Oct 19 07:33:44 2025 GMT Not After : Oct 26 07:33:44 2025 GMT Subject: CN=68f49458-8ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:f9:6c:88:e0:66:24:4e:93:dc:42:b7:c7: 6d:9f:b2:9d:2a:0c:37:b6:a4:4c:dc:69:6c:b1:70: 9d:5d:d6:3f:ac:45:e1:a3:31:94:fb:68:ff:0d:90: 2c:45:50:ee:8b:4f:7e:f6:dd:7a:f1:50:a0:bc:7d: e8:75:d8:69:4f:dd:11:b8:ee:8d:19:56:54:4b:a5: 62:b3:e8:f8:e0:f9:27:1b:74:4d:bc:a2:48:eb:b0: 53:40:80:9f:fa:5a:e9:52:a4:5d:98:65:f1:81:ac: bd:6e:f9:ec:c0:b6:3c:5f:b2:3f:f9:0c:c4:7c:9f: 98:f1:a5:e9:79:88:44:76:ad:93:f4:06:38:b3:90: aa:cc:55:30:78:38:2e:99:df:a8:f7:ed:06:40:30: de:b8:bb:7b:9e:c0:36:23:dc:cb:48:15:09:d9:48: 53:91:9a:35:84:c9:a8:34:d7:06:c3:1e:a4:68:f8: 72:a1:a7:f4:84:48:a0:ee:06:2d:62:4c:fe:02:7c: 11:19:0d:b6:e2:af:9b:32:13:ec:9f:f0:92:e9:8e: 06:d7:d4:77:37:fa:66:71:c6:fb:5d:d9:fa:ec:3d: 47:53:d4:c4:61:3d:3a:42:42:1f:27:6b:3c:31:58: 13:13:4a:f5:9d:b0:71:ce:7b:fa:2d:6d:97:ae:04: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4A:7A:6C:A2:82:55:D4:C5:13:2B:0F:E4:F2:FA:A9:A2:2E:CC:67 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f2:7f:35:76:be:b2:3d:b7:54:4c:ca:e9:d8:75:32:1a:c1: 94:21:2c:55:95:b7:02:73:84:d0:7c:6c:b9:7e:79:06:85:e3: 28:4a:c9:bd:22:da:8f:af:04:f1:7e:1d:14:11:77:d8:99:ac: a8:aa:11:a4:e0:f1:e8:98:72:7a:46:06:df:99:fd:ff:3c:89: 1a:da:e7:54:8f:c7:17:d5:77:05:ad:b7:8c:de:07:d0:bf:14: d1:dd:5c:cf:37:49:4a:a0:ae:db:5f:22:1d:aa:3f:1b:e6:7e: 45:2c:53:b2:26:11:5d:26:1e:d9:61:03:1f:cd:bd:e7:19:86: bd:e4:08:63:3f:7e:33:d2:dc:e4:e3:cc:3f:5d:23:0f:2c:07: af:c2:d4:48:88:0a:49:6e:38:87:45:6a:5b:e6:17:0f:3a:b9: 98:42:55:fc:ec:42:4f:3c:c8:f6:a5:9f:76:29:b0:5a:cf:1a: 55:96:47:84:04:f1:98:0d:1d:2d:30:21:23:1e:c7:de:df:b2: 7e:5b:2c:6b:22:24:94:0e:19:f6:43:89:fc:5d:30:e9:a8:af: c6:29:51:e1:6b:18:bd:31:0e:de:60:d2:d9:80:10:ec:4c:12: b5:bd:ca:2f:30:b8:27:f0:3b:56:7c:bd:5c:7f:8e:a0:90:34: 48:27:2d:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUxMDE5MDczMzQ0WhcNMjUxMDI2MDczMzQ0WjAYMRYwFAYD VQQDEw02OGY0OTQ1OC04YWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3b5bIjgZiROk9xCt8dtn7KdKgw3tqRM3GlssXCdXdY/rEXhozGU+2j/DZAs RVDui09+9t168VCgvH3oddhpT90RuO6NGVZUS6Vis+j44PknG3RNvKJI67BTQICf +lrpUqRdmGXxgay9bvnswLY8X7I/+QzEfJ+Y8aXpeYhEdq2T9AY4s5CqzFUweDgu md+o9+0GQDDeuLt7nsA2I9zLSBUJ2UhTkZo1hMmoNNcGwx6kaPhyoaf0hEig7gYt Ykz+AnwRGQ224q+bMhPsn/CS6Y4G19R3N/pmccb7Xdn67D1HU9TEYT06QkIfJ2s8 MVgTE0r1nbBxznv6LW2XrgSg2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpKemyi glXUxRMrD+Ty+qmiLsxnMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT8n81dr6yPbdUTMrp2HUyGsGUISxVlbcCc4TQfGy5fnkGheMoSsm9 ItqPrwTxfh0UEXfYmayoqhGk4PHomHJ6Rgbfmf3/PIka2udUj8cX1XcFrbeM3gfQ vxTR3VzPN0lKoK7bXyIdqj8b5n5FLFOyJhFdJh7ZYQMfzb3nGYa95AhjP34z0tzk 48w/XSMPLAevwtRIiApJbjiHRWpb5hcPOrmYQlX87EJPPMj2pZ92KbBazxpVlkeE BPGYDR0tMCEjHsfe37J+WyxrIiSUDhn2Q4n8XTDpqK/GKVHhaxi9MQ7eYNLZgBDs TBK1vcovMLgn8DtWfL1cf46gkDRIJy3H -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:42 2025 by rpki-client