$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: z3xiseoY6r3uqS/ZlvEsQHJzmIMcgeafEJ90vKYITN8= Subject key identifier: 8B:7E:37:12:C3:67:6E:3C:14:A5:53:79:E2:5B:B8:F7:DC:B2:7A:2E Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 0407 Signing time: Thu 23 Oct 2025 01:43:08 +0000 Manifest this update: Thu 23 Oct 2025 01:43:08 +0000 Manifest next update: Thu 30 Oct 2025 01:43:08 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: EtZyclja7WZ/OFMeuJxpWaF5IYVCjngJvjl0QWZe4GU=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Oct 23 01:43:08 2025 GMT Not After : Oct 30 01:43:08 2025 GMT Subject: CN=68f9882c-afcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:1b:20:fa:e2:77:43:c8:ef:25:54:10:8d: b0:b5:f2:4c:63:d6:44:fe:a1:29:88:c6:c3:de:8a: 0f:94:98:0a:04:73:7c:d0:9f:48:39:12:0c:31:89: 83:84:0c:7e:45:80:31:b0:d7:0f:2f:ba:61:e7:ee: db:29:fc:b2:82:d5:c6:19:8b:bd:6d:c7:14:5c:e5: f6:f2:93:6a:cb:24:af:5d:09:ac:7a:fc:da:02:61: 4b:ef:06:e3:25:1b:46:2d:e8:95:90:ab:95:11:e3: be:4f:74:a6:e2:d6:e2:c2:67:7e:0f:84:20:73:97: e5:7c:9e:16:26:30:70:1c:11:3b:a9:1a:41:ec:2c: cc:b7:17:00:ac:c8:e2:71:38:29:2e:5e:85:39:1c: 00:ae:6f:4b:da:a9:8a:16:0b:5a:32:65:8a:13:80: 6b:ca:02:e7:97:98:c3:33:5f:67:a3:97:1f:33:90: 21:c8:de:5b:4f:9b:dd:7d:86:1c:7b:3c:7c:d2:35: e4:98:78:8e:61:22:37:7a:61:0e:7c:49:2b:cc:a5: f4:1d:35:af:01:ec:cc:f1:c0:a9:55:ee:4a:92:ee: 79:a5:b2:33:90:28:5c:b2:93:84:de:62:c9:74:0f: 34:38:f9:7b:25:b7:a9:3a:08:e1:c7:b1:11:e9:95: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:37:12:C3:67:6E:3C:14:A5:53:79:E2:5B:B8:F7:DC:B2:7A:2E X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f2:8f:37:eb:29:1e:72:dc:7c:90:15:9e:3a:07:46:5a:99:cc: 47:ec:c9:0c:9b:97:2a:97:99:a9:17:e1:87:b5:77:42:2e:78: 74:db:e8:f4:27:85:7e:2a:e6:17:72:4c:29:ec:aa:f7:ef:e7: 9a:e6:5b:a0:32:1d:ed:19:66:4b:9a:1a:5c:d3:a1:06:38:96: 08:68:dd:fe:56:df:47:b3:02:58:60:cd:28:59:a8:49:9e:8d: 6e:c7:48:fa:a7:66:57:f3:3c:26:2e:86:19:e1:59:7d:0e:62: 7f:bd:f0:bb:cc:45:eb:ae:ba:0b:60:61:6c:e5:87:00:a2:84: ff:8c:42:b6:8c:ec:6a:bf:05:1c:dc:af:45:32:03:e1:dc:b3: 66:61:71:19:9f:c1:3c:16:89:e9:6d:9e:36:87:06:40:59:ae: 34:91:24:02:83:b9:66:1f:27:3f:62:83:69:bb:cd:f6:00:4d: ce:1b:01:84:50:d9:b6:b8:d1:1f:28:6b:b2:31:ef:9e:6a:61: 36:a3:55:86:8c:8c:e8:75:25:b5:dd:3a:67:16:e1:3b:0c:56: 09:5b:18:f6:7a:0e:5d:97:82:2d:e6:bc:23:61:0e:86:b7:4c: e3:61:2c:7e:a3:5a:67:eb:17:6d:be:ee:34:b8:a5:a2:b9:59: 36:97:b9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjUxMDIzMDE0MzA4WhcNMjUxMDMwMDE0MzA4WjAYMRYwFAYD VQQDEw02OGY5ODgyYy1hZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVIbIPrid0PI7yVUEI2wtfJMY9ZE/qEpiMbD3ooPlJgKBHN80J9IORIMMYmD hAx+RYAxsNcPL7ph5+7bKfyygtXGGYu9bccUXOX28pNqyySvXQmsevzaAmFL7wbj JRtGLeiVkKuVEeO+T3Sm4tbiwmd+D4Qgc5flfJ4WJjBwHBE7qRpB7CzMtxcArMji cTgpLl6FORwArm9L2qmKFgtaMmWKE4BrygLnl5jDM19no5cfM5AhyN5bT5vdfYYc ezx80jXkmHiOYSI3emEOfEkrzKX0HTWvAezM8cCpVe5Kku55pbIzkChcspOE3mLJ dA80OPl7JbepOgjhx7ER6ZXUFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt+NxLD Z248FKVTeeJbuPfcsnouMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDyjzfrKR5y3HyQFZ46B0ZamcxH7MkMm5cql5mpF+GHtXdCLnh02+j0 J4V+KuYXckwp7Kr37+ea5lugMh3tGWZLmhpc06EGOJYIaN3+Vt9HswJYYM0oWahJ no1ux0j6p2ZX8zwmLoYZ4Vl9DmJ/vfC7zEXrrroLYGFs5YcAooT/jEK2jOxqvwUc 3K9FMgPh3LNmYXEZn8E8FonpbZ42hwZAWa40kSQCg7lmHyc/YoNpu832AE3OGwGE UNm2uNEfKGuyMe+eamE2o1WGjIzodSW13TpnFuE7DFYJWxj2eg5dl4It5rwjYQ6G t0zjYSx+o1pn6xdtvu40uKWiuVk2l7m0 -----END CERTIFICATE-----Generated at Thu Oct 23 10:00:11 2025 by rpki-client