$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: /rbtlkeBG/sDP+Ucw3+D/3mBOI1A+4CDxk3Auu5pVo4= Subject key identifier: C0:2E:E8:C9:97:C1:F8:47:B7:9F:FC:C8:31:6E:A3:CE:AF:9C:2A:31 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 01ED Signing time: Sat 25 Oct 2025 05:51:19 +0000 Manifest this update: Sat 25 Oct 2025 05:51:18 +0000 Manifest next update: Sat 01 Nov 2025 05:51:18 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: QUNCaQEb5x2/igX6C/DbEanTJhJMW+P3+XBHAFioa04=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 285R3oYGxnsmMAJjm1+eYdJApQO5EQQ/gOWcq+lr5pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 05:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Oct 25 05:51:18 2025 GMT Not After : Nov 1 05:51:18 2025 GMT Subject: CN=68fc6556-b391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:3e:4a:4c:ab:b0:d8:39:d8:64:7d:d9:ba: 46:21:a4:e8:50:26:c6:66:2a:60:da:ae:7b:34:92: cc:98:6d:a0:81:aa:1b:1e:93:44:55:e0:80:ac:46: e2:a8:c3:c6:3b:8f:d4:31:96:46:92:f2:1c:66:57: 27:75:be:eb:be:76:52:7b:6b:8a:55:11:80:23:a3: 5a:be:73:62:e0:e1:1c:dc:69:cc:67:57:19:5c:35: a3:8a:ae:cc:a7:b0:73:5e:58:1a:c2:95:7d:d6:32: 65:a5:b6:3d:f2:db:4b:0b:80:d2:a5:c9:11:50:95: d6:63:14:38:ca:2e:af:22:af:20:14:d7:c4:05:68: 0c:dd:53:15:e9:05:8f:8c:bc:79:7a:e7:f1:ca:4e: 65:d8:a7:6f:f1:87:20:93:c8:4c:d8:ae:0f:6d:45: 99:eb:41:c6:d1:05:bf:8d:58:b6:84:18:89:3e:ae: 57:ec:38:18:12:b6:49:4c:77:64:37:9c:11:35:41: e5:26:ac:53:f7:9b:cc:76:7e:50:07:56:59:77:dd: e8:47:b9:8c:4d:f9:ac:9a:8a:5c:79:da:3f:9b:37: 37:bc:6d:3b:b6:17:26:b8:50:6a:c9:bd:96:c1:7e: 00:cd:83:bb:8d:ce:eb:0a:8e:fa:a6:fb:8c:07:01: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2E:E8:C9:97:C1:F8:47:B7:9F:FC:C8:31:6E:A3:CE:AF:9C:2A:31 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:1b:fa:b5:25:7c:48:bc:67:25:62:fb:4a:74:ca:9f:9c:e2: c5:09:7c:7b:66:34:dd:c9:dd:0f:00:83:01:54:c0:d9:1b:19: aa:48:14:25:c3:63:f0:61:15:88:59:0a:a9:1b:6c:32:0d:37: 7b:a0:5c:b2:ea:1e:a8:73:74:2f:1c:7d:c0:2e:01:8d:ae:ab: 14:aa:56:c8:24:ce:2c:d8:af:cc:21:c1:d0:fa:f4:b6:b2:6c: da:61:21:f1:7d:a1:36:6f:01:e5:f2:3a:8d:3c:75:ec:33:80: 80:2a:92:9e:6e:c1:e9:69:7a:67:10:4e:76:75:93:be:a9:b9: fe:21:10:ba:fb:ac:6d:e6:2b:89:15:0b:cb:db:5b:7b:e8:cf: 26:02:b9:d3:f3:bb:91:f6:ed:d5:af:07:60:0c:40:79:dd:ec: 83:eb:d8:fe:28:ab:70:82:ec:fa:7d:92:fa:ea:4d:74:13:ab: 66:12:77:44:90:2a:7e:b0:e7:fe:89:ba:71:83:8d:e3:b3:1b: f7:e9:b0:c5:b8:e4:2c:ca:b0:6c:96:f4:11:6e:57:0e:cc:a3: c8:32:d0:c6:f9:a6:55:c4:cb:8f:ed:ef:53:26:fe:e9:37:32: 50:88:8c:18:ad:36:24:18:d4:c4:f6:ef:3e:cc:9e:ba:55:18: 80:34:06:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjUxMDI1MDU1MTE4WhcNMjUxMTAxMDU1MTE4WjAYMRYwFAYD VQQDEw02OGZjNjU1Ni1iMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1II+SkyrsNg52GR92bpGIaToUCbGZipg2q57NJLMmG2ggaobHpNEVeCArEbi qMPGO4/UMZZGkvIcZlcndb7rvnZSe2uKVRGAI6NavnNi4OEc3GnMZ1cZXDWjiq7M p7BzXlgawpV91jJlpbY98ttLC4DSpckRUJXWYxQ4yi6vIq8gFNfEBWgM3VMV6QWP jLx5eufxyk5l2Kdv8Ycgk8hM2K4PbUWZ60HG0QW/jVi2hBiJPq5X7DgYErZJTHdk N5wRNUHlJqxT95vMdn5QB1ZZd93oR7mMTfmsmopcedo/mzc3vG07thcmuFBqyb2W wX4AzYO7jc7rCo76pvuMBwGyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAu6MmX wfhHt5/8yDFuo86vnCoxMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARG/q1JXxIvGclYvtKdMqfnOLFCXx7ZjTdyd0PAIMBVMDZGxmqSBQl w2PwYRWIWQqpG2wyDTd7oFyy6h6oc3QvHH3ALgGNrqsUqlbIJM4s2K/MIcHQ+vS2 smzaYSHxfaE2bwHl8jqNPHXsM4CAKpKebsHpaXpnEE52dZO+qbn+IRC6+6xt5iuJ FQvL21t76M8mArnT87uR9u3VrwdgDEB53eyD69j+KKtwguz6fZL66k10E6tmEndE kCp+sOf+ibpxg43jsxv36bDFuOQsyrBslvQRblcOzKPIMtDG+aZVxMuP7e9TJv7p NzJQiIwYrTYkGNTE9u8+zJ66VRiANAZa -----END CERTIFICATE-----Generated at Sat Oct 25 15:41:39 2025 by rpki-client