$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json) Hash identifier: vMcVFyUbJM8KZ/QHJTmiCu4S81lbLe1Wga68f7IRJaI= Subject key identifier: 41:81:5A:35:1C:E4:27:51:FE:E0:99:6E:49:1E:48:7B:14:D9:45:61 Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft Manifest number: 1D Signing time: Tue 07 Oct 2025 08:08:31 +0000 Manifest this update: Tue 07 Oct 2025 08:08:30 +0000 Manifest next update: Tue 14 Oct 2025 08:08:30 +0000 Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: MXczwpnIH0ab0aq9UfOyur638I7KlIR+4kOaCQVI49U=) 2: BAC878D0799511F098E98265C4F9AE02.roa (hash: DOKXlcoim3mGT1/5T41gtrSkQeSIUWzOdLmQqGxlYWw=) 3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: ENyfebcRoladpIqoDMvyVSOny2O0G7/P5ahmxQmU81s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 08:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Oct 7 08:08:30 2025 GMT Not After : Oct 14 08:08:30 2025 GMT Subject: CN=68e4ca7f-f189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:8e:ba:78:aa:d1:b2:7e:31:11:a5:48:73: b6:75:c3:da:9b:38:2c:cf:54:d5:c0:76:f8:3f:0c: 66:04:0c:7b:19:13:bf:0d:39:87:0e:89:b3:a5:15: e1:38:b0:43:ce:fa:67:ce:e1:ce:2a:24:e0:b5:67: 47:ef:23:89:30:fd:15:c9:ba:ef:42:75:c9:82:f4: 0f:3d:04:04:75:16:b8:00:4a:db:6b:6e:72:a3:19: 44:10:3d:00:6c:67:cf:ea:05:a8:dc:d1:3e:2e:ab: 21:56:3b:17:94:33:fb:78:b6:1a:09:c4:1a:56:12: ee:2e:25:18:44:4e:c3:f5:4d:9b:83:2d:5c:52:75: 3e:9b:ce:28:81:43:cb:88:d2:ef:0a:b2:57:32:a1: 49:55:fd:77:e4:ce:36:be:3a:43:20:95:27:8d:d8: e3:e2:5d:08:68:73:03:7d:84:8d:95:0d:23:ae:57: 53:21:22:e9:6c:15:cc:bf:3f:ee:30:79:6c:45:26: 8c:36:ad:33:be:0a:22:59:cd:a0:08:50:c5:ac:e0: 8c:de:fa:3f:cf:a1:64:9b:4c:9b:38:bc:20:0e:f9: 25:bd:a0:b1:35:85:1d:63:8f:f8:8b:53:02:a7:c5: fb:83:b8:05:a4:2b:28:a9:b3:16:d1:c7:db:38:65: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:5A:35:1C:E4:27:51:FE:E0:99:6E:49:1E:48:7B:14:D9:45:61 X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c9:11:f0:3b:b7:bd:6b:de:be:25:4f:4d:45:2d:b7:b2:62: 55:55:a4:23:76:ef:45:95:36:ca:b8:89:ba:1a:2a:82:a4:bc: b2:25:d5:65:da:16:43:49:32:08:81:ea:a6:68:93:99:c3:15: 0e:cf:61:fd:f0:25:b9:94:8e:47:69:63:30:80:aa:6b:e7:99: 5c:87:ed:4d:aa:5c:54:f6:46:be:7d:4f:0a:0a:12:64:8f:c4: 28:b7:08:8e:aa:51:e0:1b:0d:32:8b:44:ba:9c:e8:2a:16:a5: 2e:c3:13:11:3c:42:b4:dd:68:0d:12:9c:c2:05:d7:c2:18:c8: e2:38:fd:ba:3e:4d:2e:8e:b5:61:da:63:20:25:38:3a:1e:5a: af:b7:26:ac:c4:b8:3a:a7:ac:3f:42:cc:59:c8:26:f9:d5:4a: 51:25:d3:32:bd:94:dd:68:f2:f6:14:34:97:a2:5f:d2:0d:d5: 75:5d:14:19:d5:08:5d:be:65:23:1f:ce:ed:ce:12:fc:c1:23: 06:a9:d8:d0:bb:c4:9d:62:04:89:49:47:42:10:9a:42:40:4c: 28:38:ec:c6:f2:7a:b5:b5:66:33:ed:34:14:ef:d8:dc:e4:d9: 80:b6:0c:ff:34:ee:53:16:43:21:48:8d:89:de:42:96:33:b5: a4:92:7a:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3 N0M0REIzNzAeFw0yNTEwMDcwODA4MzBaFw0yNTEwMTQwODA4MzBaMBgxFjAUBgNV BAMTDTY4ZTRjYTdmLWYxODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAw466eKrRsn4xEaVIc7Z1w9qbOCzPVNXAdvg/DGYEDHsZE78NOYcOibOlFeE4 sEPO+mfO4c4qJOC1Z0fvI4kw/RXJuu9CdcmC9A89BAR1FrgASttrbnKjGUQQPQBs Z8/qBajc0T4uqyFWOxeUM/t4thoJxBpWEu4uJRhETsP1TZuDLVxSdT6bziiBQ8uI 0u8KslcyoUlV/Xfkzja+OkMglSeN2OPiXQhocwN9hI2VDSOuV1MhIulsFcy/P+4w eWxFJow2rTO+CiJZzaAIUMWs4Ize+j/PoWSbTJs4vCAO+SW9oLE1hR1jj/iLUwKn xfuDuAWkKyipsxbRx9s4ZVIFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQYFaNRzk J1H+4JluSR5IexTZRWEwHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5 NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NjRGLzM2MENBMTdBNzk5NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNL UXNSQWpJMWlKVEhmRTJ6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHJEfA7t71r3r4lT01FLbeyYlVVpCN270WVNsq4iboaKoKkvLIl1WXa FkNJMgiB6qZok5nDFQ7PYf3wJbmUjkdpYzCAqmvnmVyH7U2qXFT2Rr59TwoKEmSP xCi3CI6qUeAbDTKLRLqc6CoWpS7DExE8QrTdaA0SnMIF18IYyOI4/bo+TS6OtWHa YyAlODoeWq+3JqzEuDqnrD9CzFnIJvnVSlEl0zK9lN1o8vYUNJeiX9IN1XVdFBnV CF2+ZSMfzu3OEvzBIwap2NC7xJ1iBIlJR0IQmkJATCg47MbyerW1ZjPtNBTv2Nzk 2YC2DP807lMWQyFIjYneQpYztaSSeos= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:54 2025 by rpki-client