$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: dSbzk1hOR6dSGRAADtSl+vWyZtTvrw9KwCc0g/r15ZU= Subject key identifier: 51:5F:DC:F9:76:13:98:1B:68:97:76:99:FE:AD:34:EE:2C:88:0C:75 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: E4 Signing time: Sat 25 Oct 2025 09:07:50 +0000 Manifest this update: Sat 25 Oct 2025 09:07:49 +0000 Manifest next update: Sat 01 Nov 2025 09:07:49 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: d0K7Lt0jfX53J/FkZg7dPJK0lblrptxR3dpOEGQY7NE=) 2: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: IiAODbGIYOMBWeZoiflpOfPgoaf2U2xtxGkWne6R5WU=) 3: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: TRnNVoMiwQ6ZhiElb/0Y9VLIsehKNmu+1efnXTmukN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Oct 25 09:07:49 2025 GMT Not After : Nov 1 09:07:49 2025 GMT Subject: CN=68fc9365-6c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:44:d5:be:c9:02:67:5d:a1:2d:af:a1:d4: ad:ef:19:0c:01:f4:1f:27:e6:79:bb:27:4a:63:a1: a1:84:e1:64:d4:a6:8a:a3:02:23:95:ba:bf:ee:ca: b7:0f:5c:d9:fa:cf:a0:7f:d3:bb:42:52:fe:f0:af: b8:09:a3:4a:bd:5a:33:3e:7b:3a:24:62:43:d1:f5: 8f:72:91:46:b7:77:5f:97:ed:c2:99:c6:1b:c1:e3: 8d:ee:aa:7f:d9:ca:6b:96:f1:ab:e8:e8:29:6b:7c: 0c:a8:37:df:09:f0:cc:47:e5:92:0e:11:7a:dd:73: 2f:26:b1:05:56:97:59:27:3d:9c:ae:03:61:1b:57: 3c:b4:51:33:f6:1a:34:ce:5e:7e:f3:fb:53:0c:e7: 05:95:0b:9a:f1:e0:97:1e:4b:19:bf:9b:ee:ab:ea: 32:c1:ef:a8:ad:52:ff:6a:11:af:53:06:2f:4c:ea: 55:01:c0:ba:81:0b:ef:ee:d1:61:e6:32:60:47:6f: 7a:ac:13:8d:42:e7:21:f8:93:cb:ee:7a:ac:b9:5a: 53:4a:68:d1:46:f4:07:6b:7c:85:08:bf:8d:f9:a2: 64:12:86:12:c2:80:05:cf:b7:47:25:ae:26:bc:c7: a8:6c:5d:a6:f0:9c:94:42:d6:22:d2:8b:a3:7d:fb: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5F:DC:F9:76:13:98:1B:68:97:76:99:FE:AD:34:EE:2C:88:0C:75 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:60:74:b7:db:65:80:c2:2c:9e:95:ee:b5:06:15:0e:48:4d: cf:71:23:fd:ec:35:9c:67:a7:0f:d7:70:41:aa:20:8a:fc:0e: 70:fb:8e:53:a0:f7:28:7a:5a:22:54:8f:ed:93:fe:a3:4d:93: 25:a3:57:18:d9:d5:58:40:60:6e:f4:9c:b7:3e:4f:15:d1:c1: ce:66:f7:d6:82:54:de:00:02:f7:e9:62:57:cf:b3:95:64:39: 0c:0e:db:b2:e0:40:ac:3e:2d:92:de:02:8d:7a:97:15:90:c7: 36:a0:a7:32:88:37:7d:16:06:08:90:87:b0:30:f0:81:6a:d5: 83:2a:ea:87:92:42:ad:66:4f:93:6d:40:ff:68:34:41:75:1c: a8:56:ce:8d:4b:49:1e:95:69:74:6b:39:3c:c4:58:13:ff:f5: dc:da:3b:72:c5:45:69:e5:39:e3:8e:cb:57:f5:19:16:16:20: 8f:cc:23:52:98:12:f5:0f:0d:9d:fd:bf:b0:05:ff:09:a9:af: 31:1a:ea:7b:b9:c0:78:21:f0:11:8f:4e:18:3f:83:2d:81:02: 9d:08:9e:48:f4:9d:f0:83:fb:fa:3f:f2:46:37:c8:06:eb:a0: 57:72:f6:89:77:7f:19:9e:12:93:e9:4d:91:9a:6a:88:9f:02: b9:16:2a:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUxMDI1MDkwNzQ5WhcNMjUxMTAxMDkwNzQ5WjAYMRYwFAYD VQQDEw02OGZjOTM2NS02YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti1E1b7JAmddoS2vodSt7xkMAfQfJ+Z5uydKY6GhhOFk1KaKowIjlbq/7sq3 D1zZ+s+gf9O7QlL+8K+4CaNKvVozPns6JGJD0fWPcpFGt3dfl+3CmcYbweON7qp/ 2cprlvGr6Ogpa3wMqDffCfDMR+WSDhF63XMvJrEFVpdZJz2crgNhG1c8tFEz9ho0 zl5+8/tTDOcFlQua8eCXHksZv5vuq+oywe+orVL/ahGvUwYvTOpVAcC6gQvv7tFh 5jJgR296rBONQuch+JPL7nqsuVpTSmjRRvQHa3yFCL+N+aJkEoYSwoAFz7dHJa4m vMeobF2m8JyUQtYi0oujffsu7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFf3Pl2 E5gbaJd2mf6tNO4siAx1MB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxYHS322WAwiyele61BhUOSE3PcSP97DWcZ6cP13BBqiCK/A5w+45T oPcoeloiVI/tk/6jTZMlo1cY2dVYQGBu9Jy3Pk8V0cHOZvfWglTeAAL36WJXz7OV ZDkMDtuy4ECsPi2S3gKNepcVkMc2oKcyiDd9FgYIkIewMPCBatWDKuqHkkKtZk+T bUD/aDRBdRyoVs6NS0kelWl0azk8xFgT//Xc2jtyxUVp5TnjjstX9RkWFiCPzCNS mBL1Dw2d/b+wBf8Jqa8xGup7ucB4IfARj04YP4MtgQKdCJ5I9J3wg/v6P/JGN8gG 66BXcvaJd38ZnhKT6U2RmmqInwK5Fioo -----END CERTIFICATE-----Generated at Mon Oct 27 07:19:21 2025 by rpki-client