$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: XUq8YzKqT+ASJZT9heWkg1jkzI89eoDcDkWaTdSqy+E= Subject key identifier: AE:A1:20:58:7A:49:96:DB:B5:64:CC:FA:64:AE:76:81:D1:69:F8:9E Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0581 Signing time: Sat 25 Oct 2025 01:46:10 +0000 Manifest this update: Sat 25 Oct 2025 01:46:09 +0000 Manifest next update: Sat 01 Nov 2025 01:46:09 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: Bbhkb8FfsBl1neLBqipucPUaxKPh0LXjkHlJdA7cjiY=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 01:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Oct 25 01:46:09 2025 GMT Not After : Nov 1 01:46:09 2025 GMT Subject: CN=68fc2be1-669d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2d:d6:16:7b:9e:f9:59:c2:17:11:04:9e:e0: a5:bf:6e:39:f4:95:4d:17:fd:08:b8:2d:c7:26:90: 04:85:db:d3:a9:e1:a2:82:38:be:f1:6b:09:76:06: f1:0a:64:9c:53:11:7e:3f:da:3c:97:bc:f1:f2:cc: b3:cc:c2:01:57:1c:57:d3:0d:c0:5f:43:36:da:42: 7d:b4:46:86:6e:b0:b8:77:b1:a1:86:6c:a3:6e:ef: c8:a2:8d:4b:2b:42:a6:16:19:ae:75:be:a6:a1:37: 41:07:83:b9:52:a9:91:97:d8:00:e4:0e:41:b3:45: 70:bf:6e:da:ab:c9:95:d5:99:cd:70:70:33:91:97: e5:8e:6f:b0:b0:a3:71:2e:34:44:cb:99:9e:34:dd: e1:30:32:ae:80:ba:a8:70:20:82:64:3d:d1:27:5f: 8d:21:87:83:70:58:2b:28:a1:e4:45:86:dd:aa:c6: e2:da:b0:ae:66:a3:a7:a4:52:29:38:10:5b:e1:fe: a0:f1:86:23:02:ec:c4:1f:4a:a1:f2:8c:46:5c:a4: 59:59:14:0a:d2:d0:6e:e7:a4:46:cb:78:3e:e3:13: 60:30:49:04:16:b7:78:b3:63:1c:8e:58:ac:68:8a: 1f:24:47:25:58:b6:50:e9:1f:f3:ea:e3:2b:be:76: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A1:20:58:7A:49:96:DB:B5:64:CC:FA:64:AE:76:81:D1:69:F8:9E X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:dd:fd:e4:95:47:99:5d:87:ed:85:23:c4:3b:91:54:ee:05: be:15:33:02:b1:fb:35:f9:fc:ca:86:a6:4f:c7:e6:2b:51:19: 09:99:ca:ef:e7:af:af:6c:3f:a3:68:fd:de:c7:9f:29:bf:db: cc:46:c9:78:db:22:a0:20:11:8c:1e:b9:de:25:1c:13:92:4f: 78:83:23:15:cf:e2:8c:23:aa:1d:31:cf:2c:dd:b3:03:c0:e9: f4:61:a2:d3:34:19:4d:a0:6f:4e:81:fc:d0:bc:3b:9d:03:91: b1:dd:5b:40:68:56:3c:27:c3:fb:eb:df:b8:59:b9:c3:73:72: a2:24:b6:83:f7:4b:ee:c0:eb:be:10:3a:3c:0a:3f:29:20:66: 30:62:98:94:dc:2e:2b:19:0c:60:3a:d6:00:35:4f:28:c6:6b: 42:15:ef:41:b3:f6:43:f7:ae:3c:87:a1:24:d4:d9:3a:30:a0: 17:13:6b:0c:03:9f:bb:de:4e:1b:e1:3a:36:4e:4c:c0:06:fa: 7f:a8:31:18:37:cf:42:b6:12:00:64:3f:c8:fe:3c:9a:76:9b: 35:fe:7b:b3:36:e9:cb:da:f0:49:f1:2d:3d:d1:2c:9a:e7:b4: 12:98:0c:7d:e1:e3:b4:bb:3a:4e:8a:4b:bf:cc:86:b8:c5:9a: bc:68:4a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUxMDI1MDE0NjA5WhcNMjUxMTAxMDE0NjA5WjAYMRYwFAYD VQQDEw02OGZjMmJlMS02NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2S3WFnue+VnCFxEEnuClv2459JVNF/0IuC3HJpAEhdvTqeGigji+8WsJdgbx CmScUxF+P9o8l7zx8syzzMIBVxxX0w3AX0M22kJ9tEaGbrC4d7Ghhmyjbu/Ioo1L K0KmFhmudb6moTdBB4O5UqmRl9gA5A5Bs0Vwv27aq8mV1ZnNcHAzkZfljm+wsKNx LjREy5meNN3hMDKugLqocCCCZD3RJ1+NIYeDcFgrKKHkRYbdqsbi2rCuZqOnpFIp OBBb4f6g8YYjAuzEH0qh8oxGXKRZWRQK0tBu56RGy3g+4xNgMEkEFrd4s2Mcjlis aIofJEclWLZQ6R/z6uMrvnY7oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6hIFh6 SZbbtWTM+mSudoHRafieMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc3f3klUeZXYfthSPEO5FU7gW+FTMCsfs1+fzKhqZPx+YrURkJmcrv 56+vbD+jaP3ex58pv9vMRsl42yKgIBGMHrneJRwTkk94gyMVz+KMI6odMc8s3bMD wOn0YaLTNBlNoG9OgfzQvDudA5Gx3VtAaFY8J8P769+4WbnDc3KiJLaD90vuwOu+ EDo8Cj8pIGYwYpiU3C4rGQxgOtYANU8oxmtCFe9Bs/ZD9648h6Ek1Nk6MKAXE2sM A5+73k4b4To2TkzABvp/qDEYN89CthIAZD/I/jyadps1/nuzNunL2vBJ8S090Sya 57QSmAx94eO0uzpOiku/zIa4xZq8aEpq -----END CERTIFICATE-----Generated at Sun Oct 26 01:37:30 2025 by rpki-client