$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json) Hash identifier: FP6T+Y1aRePVibfEqnGJm2uAWIzP4j3IAQecDx6hngo= Subject key identifier: 25:00:5F:60:6F:7D:68:40:C6:A0:04:87:DD:06:6F:6C:23:4B:61:7C Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Certificate serial: 0976 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft Manifest number: 0970 Signing time: Mon 20 Oct 2025 20:57:05 +0000 Manifest this update: Mon 20 Oct 2025 20:57:05 +0000 Manifest next update: Mon 27 Oct 2025 20:57:05 +0000 Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: opfI4/4x0pirxtpIA3cOOaJ7HCjzovJRfncdzD/9878=) 2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2422 (0x976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Validity Not Before: Oct 20 20:57:05 2025 GMT Not After : Oct 27 20:57:05 2025 GMT Subject: CN=68f6a221-951a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:63:73:40:f4:f9:1b:cb:a2:f7:b2:2f:c7: 02:b6:94:e4:9c:66:86:97:f5:a9:50:74:67:98:6a: f9:90:3b:02:20:b2:63:e8:67:e7:a3:05:0e:5e:34: d3:86:29:94:c6:7e:c5:7e:24:6e:51:c5:5e:1f:ee: 4e:30:aa:ce:fd:d4:77:62:d3:3d:aa:88:62:70:c9: f2:89:18:75:a5:e3:47:66:74:01:8a:8e:60:7f:b0: 1a:1e:b4:72:3a:1f:ee:d4:0f:27:dd:10:7b:77:c5: 3f:07:e7:52:ca:87:a7:1d:1c:62:61:54:c7:37:f3: 91:af:0a:58:df:eb:3c:8d:d0:04:54:17:f1:7a:25: 2b:6d:da:32:0c:52:74:f5:ef:06:83:99:26:22:3c: 52:4b:72:66:57:26:84:fd:b3:ff:bb:b4:a4:aa:f7: da:da:df:59:2e:92:5f:02:64:8f:13:7b:09:7a:b7: 8d:dc:65:b9:54:62:3c:fa:cf:5c:8f:00:1b:5b:71: db:b1:31:67:ad:4d:d2:37:16:37:19:ef:da:11:a0: f3:ea:7e:38:2a:8e:8e:dc:81:da:8c:5c:fc:b0:b1: c7:92:37:aa:78:e6:ea:95:b8:b9:20:cf:a3:c9:c1: 4f:ce:71:03:b9:d6:b9:f2:08:19:1e:58:92:72:5f: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:00:5F:60:6F:7D:68:40:C6:A0:04:87:DD:06:6F:6C:23:4B:61:7C X509v3 Authority Key Identifier: keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e0:30:79:80:e8:06:b3:80:19:b5:2e:73:c8:f0:3b:6f:1b: 5b:cd:1b:f1:65:81:c7:07:da:eb:67:82:ba:33:2c:d2:72:2f: ee:bb:58:69:31:2d:6e:41:5a:b3:84:bb:60:34:1a:62:78:7d: 1d:48:9b:12:6c:fe:6f:94:b0:b2:3e:29:be:02:73:b6:9a:02: 56:5b:25:cd:b4:b6:3e:62:e2:ff:ca:5b:f0:a7:cf:f5:f6:4e: 94:2d:13:2d:6c:ec:16:13:b8:a5:80:16:79:b8:dd:d7:b5:82: 85:63:e0:1e:93:01:ee:46:b0:27:7d:4b:cf:f9:ab:7d:61:ae: aa:bc:96:ba:4e:9b:af:81:4c:45:a4:5d:a3:8c:41:a0:60:45: 32:1b:31:8e:fb:5e:d1:3f:dc:40:9e:9b:24:55:a3:ab:51:b4: 3b:5d:b1:b2:5c:85:e1:8c:8d:02:74:8c:2b:ff:13:6b:af:21: 35:78:03:29:80:77:d3:a6:f7:67:32:a6:3f:b6:bb:9d:22:3f: 3f:9a:13:e1:3b:ed:11:ac:e4:db:7f:4c:6c:ed:25:c6:5d:6d: e4:63:bb:d2:42:7b:4d:02:e9:d3:de:9c:4e:a1:fc:90:60:4c: e1:29:4f:2f:57:b2:77:f0:10:78:a5:58:80:3f:88:fb:d4:60: 2a:1c:55:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0 Njg2NTVCMDYwHhcNMjUxMDIwMjA1NzA1WhcNMjUxMDI3MjA1NzA1WjAYMRYwFAYD VQQDEw02OGY2YTIyMS05NTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcljc0D0+RvLoveyL8cCtpTknGaGl/WpUHRnmGr5kDsCILJj6GfnowUOXjTT himUxn7FfiRuUcVeH+5OMKrO/dR3YtM9qohicMnyiRh1peNHZnQBio5gf7AaHrRy Oh/u1A8n3RB7d8U/B+dSyoenHRxiYVTHN/ORrwpY3+s8jdAEVBfxeiUrbdoyDFJ0 9e8Gg5kmIjxSS3JmVyaE/bP/u7Skqvfa2t9ZLpJfAmSPE3sJereN3GW5VGI8+s9c jwAbW3HbsTFnrU3SNxY3Ge/aEaDz6n44Ko6O3IHajFz8sLHHkjeqeObqlbi5IM+j ycFPznEDuda58ggZHliScl++wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUAX2Bv fWhAxqAEh90Gb2wjS2F8MB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY4DB5gOgGs4AZtS5zyPA7bxtbzRvxZYHHB9rrZ4K6MyzSci/uu1hp MS1uQVqzhLtgNBpieH0dSJsSbP5vlLCyPim+AnO2mgJWWyXNtLY+YuL/ylvwp8/1 9k6ULRMtbOwWE7ilgBZ5uN3XtYKFY+AekwHuRrAnfUvP+at9Ya6qvJa6TpuvgUxF pF2jjEGgYEUyGzGO+17RP9xAnpskVaOrUbQ7XbGyXIXhjI0CdIwr/xNrryE1eAMp gHfTpvdnMqY/trudIj8/mhPhO+0RrOTbf0xs7SXGXW3kY7vSQntNAunT3pxOofyQ YEzhKU8vV7J38BB4pViAP4j71GAqHFW4 -----END CERTIFICATE-----Generated at Tue Oct 21 04:55:05 2025 by rpki-client