$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json) Hash identifier: g5Dct2Nt9Y0dZFBs57TEiAQQ6Ake4FdkCF2DMAkZoLY= Subject key identifier: 1E:45:9F:D7:1E:0F:9C:75:CB:B0:F2:B6:1A:F1:60:F7:A3:62:85:24 Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 0B00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft Manifest number: 0AF1 Signing time: Sun 26 Oct 2025 19:55:44 +0000 Manifest this update: Sun 26 Oct 2025 19:55:44 +0000 Manifest next update: Sun 02 Nov 2025 19:55:44 +0000 Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: kvMepTGRgo35Z/OjZISzzd6vWNvxCSiIb257ivv3Y+4=) 2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 19:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: Oct 26 19:55:44 2025 GMT Not After : Nov 2 19:55:44 2025 GMT Subject: CN=68fe7cc0-a65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:f1:90:b6:8f:c4:b9:14:ce:67:d5:eb:fc: c4:2c:ce:aa:a0:1c:a2:f3:1f:16:2b:53:e9:02:fd: 9e:47:14:33:96:07:de:7b:27:06:23:df:4c:b2:0c: d8:79:f8:f0:ab:0e:4d:5e:7e:f2:43:40:66:32:58: 1d:e0:cd:b9:23:35:a2:ac:34:55:10:ff:51:cc:f9: db:c6:08:39:bd:ed:fc:d1:58:05:23:06:80:d6:1b: ff:ec:67:b6:54:c9:be:4d:75:45:15:27:48:2e:e4: 83:ab:3a:69:a1:53:97:fb:ad:98:c7:52:44:9a:4a: de:41:b4:65:7e:55:82:3c:0c:28:55:6c:5d:d7:fa: ef:d0:d0:5b:de:31:0a:54:56:d6:6a:bd:65:42:1f: c7:6c:db:7c:5e:c1:f9:08:04:d1:ad:85:be:73:41: 9d:cb:fb:44:10:b1:2d:03:bb:e0:dd:21:18:5a:ab: ce:24:77:33:3f:7f:e3:26:07:c3:12:93:13:df:47: d3:88:92:92:ce:c3:a6:b8:57:72:d3:d8:1c:b7:0b: f4:41:35:51:8f:7f:59:bd:96:1e:e6:f5:0b:c6:e4: 2b:b0:ce:90:74:6f:55:74:9e:ce:1d:4e:73:65:0f: 5b:fe:e5:9a:85:64:77:81:1c:28:cd:6e:a8:14:64: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:9F:D7:1E:0F:9C:75:CB:B0:F2:B6:1A:F1:60:F7:A3:62:85:24 X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4d:28:ec:67:d9:ca:76:ce:5e:b9:59:d1:52:02:20:69:d9: 2f:fe:71:59:a9:02:f5:93:81:bd:ce:bd:15:b1:a2:cc:f3:de: 0a:0e:72:9b:10:e1:d3:4d:ca:4d:1c:39:79:7f:a1:40:f8:98: e6:f9:fe:f6:8a:b3:89:01:a8:59:e8:da:87:b8:45:96:76:8c: d4:02:c8:3e:6d:35:db:e1:3a:dc:9b:82:c5:d9:db:eb:15:d2: 61:9d:cb:a7:0c:91:d3:ba:91:ce:6f:54:6b:10:c4:86:87:cb: 83:27:b6:c4:ad:8d:75:b0:2d:77:6f:41:65:a1:d3:76:4c:55: 4a:40:d0:b7:d3:fd:db:eb:0f:a6:0e:88:68:ab:65:d4:a1:69: d5:2e:13:41:5b:79:19:5b:bf:e8:8f:62:01:d9:a2:e4:41:a5: 73:d5:b4:3a:71:66:1c:ce:71:17:a2:0d:30:fc:b2:1f:df:5d: 6a:96:72:ef:ae:a8:cf:9a:77:0b:60:e4:53:9f:d8:4f:4d:87: 8b:f4:98:b7:e5:dc:d9:fc:15:df:85:3b:08:e7:28:3e:98:85: f0:52:55:10:ca:92:c1:1c:fa:ec:46:3d:e6:50:41:e8:e1:e9: 3b:2c:78:63:b9:65:ca:73:de:a3:d3:40:b8:fe:0c:ac:90:93: 5a:ca:b1:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjUxMDI2MTk1NTQ0WhcNMjUxMTAyMTk1NTQ0WjAYMRYwFAYD VQQDEw02OGZlN2NjMC1hNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FvxkLaPxLkUzmfV6/zELM6qoByi8x8WK1PpAv2eRxQzlgfeeycGI99MsgzY efjwqw5NXn7yQ0BmMlgd4M25IzWirDRVEP9RzPnbxgg5ve380VgFIwaA1hv/7Ge2 VMm+TXVFFSdILuSDqzppoVOX+62Yx1JEmkreQbRlflWCPAwoVWxd1/rv0NBb3jEK VFbWar1lQh/HbNt8XsH5CATRrYW+c0Gdy/tEELEtA7vg3SEYWqvOJHczP3/jJgfD EpMT30fTiJKSzsOmuFdy09gctwv0QTVRj39ZvZYe5vULxuQrsM6QdG9VdJ7OHU5z ZQ9b/uWahWR3gRwozW6oFGQzhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5Fn9ce D5x1y7DythrxYPejYoUkMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXTSjsZ9nKds5euVnRUgIgadkv/nFZqQL1k4G9zr0VsaLM894KDnKb EOHTTcpNHDl5f6FA+Jjm+f72irOJAahZ6NqHuEWWdozUAsg+bTXb4Trcm4LF2dvr FdJhncunDJHTupHOb1RrEMSGh8uDJ7bErY11sC13b0FlodN2TFVKQNC30/3b6w+m Dohoq2XUoWnVLhNBW3kZW7/oj2IB2aLkQaVz1bQ6cWYcznEXog0w/LIf311qlnLv rqjPmncLYORTn9hPTYeL9Ji35dzZ/BXfhTsI5yg+mIXwUlUQypLBHPrsRj3mUEHo 4ek7LHhjuWXKc96j00C4/gyskJNayrGk -----END CERTIFICATE-----Generated at Tue Oct 28 18:28:42 2025 by rpki-client