$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: 5CAc9mowo2Y6j/UxV2OwW6W9ErYqxYjwxMDV/tv0zOY= Subject key identifier: FC:CF:0B:FD:61:24:57:91:AF:25:7C:DC:5B:80:CF:10:14:F8:0E:EC Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0D24 Signing time: Wed 22 Oct 2025 18:31:57 +0000 Manifest this update: Wed 22 Oct 2025 18:31:56 +0000 Manifest next update: Wed 29 Oct 2025 18:31:56 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: tXw/L08HEcSEthHJHLJBSPsSB2p8L0OaKIvb2zYOOeA=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: eWcvHOUT67GedsanEfBHjHteAl5xPcgw0p372As4/K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Oct 22 18:31:56 2025 GMT Not After : Oct 29 18:31:56 2025 GMT Subject: CN=68f9231d-1ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:41:65:c7:8c:e1:b5:93:0e:84:da:8f:55:d9: cd:1e:f9:e0:0f:66:b3:f6:1a:1b:ed:62:1c:74:65: 0e:09:86:f5:f8:16:7a:47:b3:9f:11:f6:7c:4e:92: 95:01:99:29:a6:b8:93:60:f0:9c:32:3f:15:d8:9b: 2c:15:a1:9d:5e:89:c9:90:18:18:c9:5f:e1:5d:c4: 83:01:79:3d:ce:ab:58:e3:3f:5a:41:09:38:03:1d: 9e:83:d4:2c:64:94:2a:45:d9:d9:eb:3a:b4:8a:ac: 65:69:67:0b:60:ff:af:08:76:ed:75:cc:84:a7:52: 71:61:50:6f:98:af:ef:bd:f1:3c:6e:a1:74:41:c3: 9b:f5:84:aa:81:a7:48:4a:f8:8a:f1:4e:3e:35:46: 1b:9f:64:68:8d:34:30:b7:4a:68:62:af:f4:4b:3b: e6:c0:fe:8f:45:e8:19:6c:2d:e9:2e:ed:2c:1a:cd: d3:f5:be:49:92:38:c9:ba:69:bf:32:7a:ea:b4:9a: 0b:84:e3:d7:fd:d3:6b:24:78:a2:44:e7:74:59:79: 95:fc:19:f8:e3:10:68:0c:37:77:90:94:e4:85:57: 7a:c3:9b:ce:32:4f:a5:f6:58:c6:10:d3:da:a8:a2: 20:0c:d3:c3:03:07:29:65:f7:6a:a4:00:bf:e5:2b: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CF:0B:FD:61:24:57:91:AF:25:7C:DC:5B:80:CF:10:14:F8:0E:EC X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:35:be:a6:30:ed:ed:93:b6:db:92:ce:82:4a:91:40:90:18: f6:85:a6:ac:18:8c:2a:f9:46:3c:57:39:b3:3e:60:5e:fe:e8: 68:ab:6c:a9:69:c2:69:1a:f3:7a:b4:6f:68:3c:42:fb:b6:ce: 37:cb:b0:38:56:ac:c7:04:33:c5:9b:80:e5:28:9d:42:ab:b1: 28:cd:10:f5:cf:e6:44:2e:87:53:e3:1e:ca:54:fb:39:d8:9b: 33:a5:16:11:14:e3:b8:2f:1f:fd:e2:69:9b:ef:14:76:5d:fe: 0a:3e:57:ca:26:3e:26:1e:57:c4:4f:a8:35:7c:54:c7:d8:7c: c6:b2:69:f6:cf:98:c2:d5:16:3e:21:53:e3:41:78:66:52:a2: 6c:42:ef:83:66:42:7f:fb:7e:06:22:b8:0d:a8:77:96:47:f5: db:0d:20:28:68:be:31:8e:5c:90:00:3a:c4:75:0c:c9:69:fb: d7:2a:ae:95:c6:52:ae:ea:c4:fb:ac:ed:21:9a:a6:97:62:0a: 12:6e:3f:91:77:fe:7a:fa:74:c4:56:14:63:39:26:8d:7b:27: 6c:21:2f:cb:8a:64:6d:69:e2:bd:88:30:4f:fb:ea:1a:0b:3e: 18:b1:f9:ea:62:63:65:13:ae:a4:9d:c0:10:90:d4:7e:70:d5: e6:10:0a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUxMDIyMTgzMTU2WhcNMjUxMDI5MTgzMTU2WjAYMRYwFAYD VQQDEw02OGY5MjMxZC0xZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kFlx4zhtZMOhNqPVdnNHvngD2az9hob7WIcdGUOCYb1+BZ6R7OfEfZ8TpKV AZkppriTYPCcMj8V2JssFaGdXonJkBgYyV/hXcSDAXk9zqtY4z9aQQk4Ax2eg9Qs ZJQqRdnZ6zq0iqxlaWcLYP+vCHbtdcyEp1JxYVBvmK/vvfE8bqF0QcOb9YSqgadI SviK8U4+NUYbn2RojTQwt0poYq/0SzvmwP6PRegZbC3pLu0sGs3T9b5JkjjJumm/ MnrqtJoLhOPX/dNrJHiiROd0WXmV/Bn44xBoDDd3kJTkhVd6w5vOMk+l9ljGENPa qKIgDNPDAwcpZfdqpAC/5SvetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzPC/1h JFeRryV83FuAzxAU+A7sMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Nb6mMO3tk7bbks6CSpFAkBj2haasGIwq+UY8VzmzPmBe/uhoq2yp acJpGvN6tG9oPEL7ts43y7A4VqzHBDPFm4DlKJ1Cq7EozRD1z+ZELodT4x7KVPs5 2JszpRYRFOO4Lx/94mmb7xR2Xf4KPlfKJj4mHlfET6g1fFTH2HzGsmn2z5jC1RY+ IVPjQXhmUqJsQu+DZkJ/+34GIrgNqHeWR/XbDSAoaL4xjlyQADrEdQzJafvXKq6V xlKu6sT7rO0hmqaXYgoSbj+Rd/56+nTEVhRjOSaNeydsIS/LimRtaeK9iDBP++oa Cz4YsfnqYmNlE66kncAQkNR+cNXmEAob -----END CERTIFICATE-----Generated at Fri Oct 24 06:15:06 2025 by rpki-client