$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: EWRCF7+bQjn4xm0bk9xLA6xUg935tpmBtCAi9PKNwGw= Subject key identifier: 90:BA:36:E1:B6:8C:AE:AF:1D:36:C4:A9:89:07:AC:9C:AB:A2:28:CC Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0557 Signing time: Wed 08 Oct 2025 23:19:11 +0000 Manifest this update: Wed 08 Oct 2025 23:19:10 +0000 Manifest next update: Wed 15 Oct 2025 23:19:10 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: XzNFZwLwt1vcMG6wbrRgpshfq7cBGeqqNZqpQzQHs3Y=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: oVtoN+E5ZyRj5IanIEy9OruScApwiNCgt2Cj41NAG60=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 0vZEihrEiMOTrqZx3qCnY1CqP36ZOjzC0GFn4Q1L7IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 23:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Oct 8 23:19:10 2025 GMT Not After : Oct 15 23:19:10 2025 GMT Subject: CN=68e6f16e-705c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:41:a8:d8:5d:03:d3:be:31:f5:82:f4:f1: 93:1e:38:03:39:67:5d:6c:92:7b:e9:e8:5a:44:76: 21:11:4d:b2:39:4c:a3:93:95:40:dd:02:47:04:ca: 76:20:57:18:b0:1a:27:a8:2d:0b:fe:ef:e6:b7:86: c6:91:55:d1:ee:c3:e4:db:52:a9:00:4b:55:e4:bb: 19:65:f9:74:91:fd:4c:28:0b:44:7c:86:3b:ec:4e: b9:01:de:93:c8:cc:0e:60:c2:a2:ef:e1:e1:a6:6f: a2:56:25:5f:1c:32:15:44:22:93:f3:36:d0:b9:69: ae:d8:f3:79:ea:11:8c:80:1f:32:c9:1e:3a:bd:d3: b6:ec:af:9b:6b:df:fe:72:3f:eb:f1:3b:98:62:7c: 27:e3:fd:73:8d:be:17:31:0a:43:d9:90:86:df:5b: c2:dc:ac:ac:06:d8:ae:47:a4:80:df:fe:a4:cd:e1: 26:b8:45:2a:38:7d:50:c4:dd:3a:58:1f:f9:82:87: e5:b9:5c:18:2d:c6:b0:53:47:73:97:03:d6:c7:59: a8:2a:7c:c8:3c:dd:e5:a5:c9:4f:a6:b5:41:d7:9a: 66:db:55:9a:55:36:89:74:f2:21:42:3d:ca:75:ae: 84:27:9f:d7:e0:8b:c6:8d:d9:de:8a:e1:27:de:4a: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BA:36:E1:B6:8C:AE:AF:1D:36:C4:A9:89:07:AC:9C:AB:A2:28:CC X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3d:f1:c9:10:94:30:e1:27:7d:a2:47:d7:cc:d6:7e:71:37: 99:0f:19:dc:4b:39:57:0e:83:dc:d0:f8:77:36:0a:4e:5f:72: 01:e7:2c:e2:0d:51:23:21:47:f1:55:1f:e2:3a:14:94:cb:e2: 0b:70:bf:a2:f3:c5:1d:1d:15:1f:42:7f:13:84:69:b3:e2:6c: b6:25:29:78:29:30:2a:fd:54:09:ac:0d:5d:46:05:e3:15:00: f9:01:45:c1:ed:21:f4:c7:4e:22:fd:bc:92:04:fc:69:85:a4: 6f:91:3c:32:20:1e:40:f6:0f:8b:62:01:59:40:93:96:d7:e9: 81:25:7c:63:4c:9e:82:03:9d:76:8a:db:0a:b8:a6:01:62:66: f9:01:57:47:eb:cf:a9:d6:fe:bc:13:0e:6e:b8:d3:14:fd:48: 1e:12:77:ee:94:59:f3:ca:49:10:6e:7f:73:67:1b:1f:3a:87: 2f:52:28:87:4d:25:ba:ac:7a:66:93:59:f3:6f:22:f0:b5:88: b6:37:11:a3:e5:50:95:f7:b9:a4:e2:f2:7d:40:2b:e5:98:67: 8d:00:ca:b1:c9:a3:77:67:9d:fe:b6:c8:d1:75:6c:6d:be:70: 3a:79:f3:3f:19:88:4a:8d:6a:f0:77:1a:00:8b:cd:76:9a:41: 8f:00:d3:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUxMDA4MjMxOTEwWhcNMjUxMDE1MjMxOTEwWjAYMRYwFAYD VQQDEw02OGU2ZjE2ZS03MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tZBqNhdA9O+MfWC9PGTHjgDOWddbJJ76ehaRHYhEU2yOUyjk5VA3QJHBMp2 IFcYsBonqC0L/u/mt4bGkVXR7sPk21KpAEtV5LsZZfl0kf1MKAtEfIY77E65Ad6T yMwOYMKi7+Hhpm+iViVfHDIVRCKT8zbQuWmu2PN56hGMgB8yyR46vdO27K+ba9/+ cj/r8TuYYnwn4/1zjb4XMQpD2ZCG31vC3KysBtiuR6SA3/6kzeEmuEUqOH1QxN06 WB/5gofluVwYLcawU0dzlwPWx1moKnzIPN3lpclPprVB15pm21WaVTaJdPIhQj3K da6EJ5/X4IvGjdneiuEn3krGWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC6NuG2 jK6vHTbEqYkHrJyroijMMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiPfHJEJQw4Sd9okfXzNZ+cTeZDxncSzlXDoPc0Ph3NgpOX3IB5yzi DVEjIUfxVR/iOhSUy+ILcL+i88UdHRUfQn8ThGmz4my2JSl4KTAq/VQJrA1dRgXj FQD5AUXB7SH0x04i/bySBPxphaRvkTwyIB5A9g+LYgFZQJOW1+mBJXxjTJ6CA512 itsKuKYBYmb5AVdH68+p1v68Ew5uuNMU/UgeEnfulFnzykkQbn9zZxsfOocvUiiH TSW6rHpmk1nzbyLwtYi2NxGj5VCV97mk4vJ9QCvlmGeNAMqxyaN3Z53+tsjRdWxt vnA6efM/GYhKjWrwdxoAi812mkGPANN2 -----END CERTIFICATE-----Generated at Thu Oct 9 01:25:23 2025 by rpki-client