$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: kgTadsvtWE4JvskwuIgRytigOVPnADPGSReV2bS6efE= Subject key identifier: 5C:0F:8A:5B:81:DF:E9:0A:FF:0A:B1:C4:85:2A:0F:F9:D8:10:BE:DA Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 04AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 04A3 Signing time: Sun 19 Oct 2025 01:47:18 +0000 Manifest this update: Sun 19 Oct 2025 01:47:17 +0000 Manifest next update: Sun 26 Oct 2025 01:47:17 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: gFZ4of0O4GEhF7DDf2Zn3oNxzAZgQvZM7BYdkHtFE9c=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C, serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: Oct 19 01:47:17 2025 GMT Not After : Oct 26 01:47:17 2025 GMT Subject: CN=68f44326-157c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:c4:62:fc:2a:88:e3:28:d4:39:20:22:1e: b2:ac:46:41:4f:41:12:81:4c:e7:7a:f6:f2:45:f6: 4f:11:e2:1c:3b:0f:aa:07:c3:c6:60:fd:94:0a:85: f4:c4:53:14:74:74:db:07:67:50:fe:92:1f:87:0c: aa:da:d0:98:56:f1:31:04:36:63:4d:f4:b9:de:6f: c8:bf:cd:2b:47:eb:d4:f0:4f:2c:5f:75:2e:6c:59: c6:d4:3b:fc:eb:b4:64:f0:2e:eb:cb:62:41:62:3f: a7:7e:ed:9c:d9:47:b9:d8:d5:fa:72:b3:13:94:7b: 7c:e0:33:99:5b:f2:6b:a6:86:1a:c6:00:86:3e:4d: 21:b6:f3:a8:38:a5:c6:1a:45:f1:82:1b:00:23:93: 5e:f8:ab:38:89:ef:bb:8b:6c:18:22:d8:1e:75:04: aa:ec:cf:72:da:94:d8:31:ad:4c:dc:b4:0b:f3:72: 6b:1b:b1:5b:0b:3c:48:18:76:b0:3e:50:86:92:2f: 86:fd:4e:dc:be:c6:2d:34:72:03:29:5e:07:66:d8: f2:97:fe:bf:17:d0:c7:1b:76:dd:28:69:04:52:60: e6:b8:d6:80:19:1a:59:4b:0e:24:db:12:65:d6:fd: 36:d2:47:e5:ba:8b:e7:2b:ca:55:00:52:c5:17:20: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:8A:5B:81:DF:E9:0A:FF:0A:B1:C4:85:2A:0F:F9:D8:10:BE:DA X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a7:5f:9b:f1:3e:c7:60:76:7d:68:12:59:0a:c6:47:70:5a: c1:a9:4a:f6:dd:b6:bb:33:2d:3a:f0:46:1f:a9:7b:61:ef:24: a8:a9:e0:f2:66:7d:d2:79:f7:26:2e:42:8c:d0:4f:b6:41:69: a3:8d:43:d0:d1:a0:1e:53:b2:bd:44:d4:5b:d2:ef:36:47:55: 8a:62:1d:8b:8c:1a:0e:31:3c:cf:4e:96:ea:e1:75:78:36:86: 50:87:fb:94:c7:e4:34:62:02:cc:c4:99:4e:28:ca:81:81:7b: cb:5a:2c:d3:d4:9e:31:c7:90:07:b5:da:13:a7:2d:4f:32:99: bf:a1:80:b1:70:65:ae:7b:44:23:97:51:3b:d6:98:76:40:f7: a4:90:50:d3:33:00:71:9c:d7:47:50:69:42:33:4e:87:8c:d1: ee:c9:b5:1f:7c:2f:07:00:44:6b:68:3a:b2:63:00:b2:b6:a3: 01:59:12:1c:3c:7f:31:0a:64:a0:37:9c:61:12:54:40:88:76: d5:94:a5:8e:ea:2a:5a:1f:04:f2:ab:a5:da:93:69:01:fd:99: 62:ce:da:c0:73:6d:d5:c5:77:e4:02:42:a0:66:4d:fb:cd:cb: b4:fb:4f:27:dc:76:f4:2e:71:2d:b6:4f:c4:22:b1:66:56:20: 8d:d0:35:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjUxMDE5MDE0NzE3WhcNMjUxMDI2MDE0NzE3WjAYMRYwFAYD VQQDEw02OGY0NDMyNi0xNTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYLEYvwqiOMo1DkgIh6yrEZBT0ESgUznevbyRfZPEeIcOw+qB8PGYP2UCoX0 xFMUdHTbB2dQ/pIfhwyq2tCYVvExBDZjTfS53m/Iv80rR+vU8E8sX3UubFnG1Dv8 67Rk8C7ry2JBYj+nfu2c2Ue52NX6crMTlHt84DOZW/JrpoYaxgCGPk0htvOoOKXG GkXxghsAI5Ne+Ks4ie+7i2wYItgedQSq7M9y2pTYMa1M3LQL83JrG7FbCzxIGHaw PlCGki+G/U7cvsYtNHIDKV4HZtjyl/6/F9DHG3bdKGkEUmDmuNaAGRpZSw4k2xJl 1v020kfluovnK8pVAFLFFyAo0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwPiluB 3+kK/wqxxIUqD/nYEL7aMB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHp1+b8T7HYHZ9aBJZCsZHcFrBqUr23ba7My068EYfqXth7ySoqeDy Zn3SefcmLkKM0E+2QWmjjUPQ0aAeU7K9RNRb0u82R1WKYh2LjBoOMTzPTpbq4XV4 NoZQh/uUx+Q0YgLMxJlOKMqBgXvLWizT1J4xx5AHtdoTpy1PMpm/oYCxcGWue0Qj l1E71ph2QPekkFDTMwBxnNdHUGlCM06HjNHuybUffC8HAERraDqyYwCytqMBWRIc PH8xCmSgN5xhElRAiHbVlKWO6ipaHwTyq6Xak2kB/ZliztrAc23VxXfkAkKgZk37 zcu0+08n3Hb0LnEttk/EIrFmViCN0DVm -----END CERTIFICATE-----Generated at Sun Oct 19 19:05:48 2025 by rpki-client