$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: LJFPYIVX24VMUjgdLRbGkqH9utuV1YTkMi3j+sqtEng= Subject key identifier: 2E:5F:C1:87:D2:79:78:CD:64:2A:5B:3F:F2:B8:F9:DC:F4:8D:95:D6 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 07A0 Signing time: Fri 24 Oct 2025 22:20:21 +0000 Manifest this update: Fri 24 Oct 2025 22:20:20 +0000 Manifest next update: Fri 31 Oct 2025 22:20:20 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: S6vv7l1IDNYRj/1mlufDGRgHcGFS+oAV3HGBXf4bpi0=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 22:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Oct 24 22:20:20 2025 GMT Not After : Oct 31 22:20:20 2025 GMT Subject: CN=68fbfba5-9861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:c9:15:ca:b5:06:e5:66:71:8d:4b:d3:1a: b1:cd:aa:d7:28:4e:80:a9:d3:25:aa:d2:8b:d4:d2: bf:d8:e9:ec:43:0c:4e:40:a1:61:07:6a:ba:28:4d: 08:b7:0f:ef:d3:8e:ac:0b:00:e9:0c:88:aa:60:69: 55:53:96:07:d5:b9:fa:1e:55:a1:35:8b:38:95:e8: e2:bb:23:d7:89:c5:76:00:c5:dd:0c:51:47:fa:7f: 15:a0:6d:4b:12:c0:73:19:f4:2f:37:c2:18:4f:02: 06:c5:83:55:c5:f7:73:4d:4e:29:a5:56:02:e3:78: 56:94:53:c7:2c:6e:f5:91:a3:84:33:84:8b:c9:52: 76:7b:51:91:c2:83:32:0d:b6:6f:fb:ca:d2:00:3d: 37:f3:52:62:97:14:2e:fc:97:9a:59:4b:ec:ee:a6: 4f:b3:2a:a9:52:0d:b0:ee:94:3d:ad:47:f4:c0:28: e5:3b:3b:8f:fe:34:48:ab:6e:8c:fe:34:76:22:24: 7d:f3:6a:b8:20:0a:05:78:a9:cb:d8:6c:d8:2d:e1: f5:f2:59:d9:19:87:04:38:64:6a:2c:08:8d:03:40: ac:8f:73:13:10:c2:bd:77:16:a4:5a:07:48:91:5a: 80:6b:67:c9:1d:4b:18:db:4c:d0:94:1a:18:1b:22: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5F:C1:87:D2:79:78:CD:64:2A:5B:3F:F2:B8:F9:DC:F4:8D:95:D6 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a9:f1:3d:b6:9c:28:38:5b:69:27:cd:4f:50:d1:a1:b8:bd: a3:dd:0a:c7:77:d0:98:f5:ae:b1:8d:a8:f1:01:5f:a9:06:48: ec:ab:3f:32:27:b7:ff:55:1d:49:28:80:37:74:d1:d4:0b:8f: b1:d5:33:b9:d5:7c:7c:66:6a:84:c0:39:d3:2f:8f:89:ce:15: 69:07:87:cd:cc:3c:ba:00:e2:7c:f4:9b:e2:2f:20:bf:1d:aa: 4f:80:64:0d:e7:7c:9e:58:51:ed:d2:3d:08:e1:46:33:df:f4: d7:d2:f4:4b:e6:c8:91:80:fc:fe:e9:91:89:c9:34:4d:70:07: 14:d7:ca:b6:66:eb:de:64:9e:64:2f:cd:e2:f1:4d:4a:a8:9c: 8d:28:f3:34:a4:75:1f:14:2c:33:2a:a4:b1:7f:3a:f8:ae:48: 6c:d0:0c:72:6c:97:c2:56:55:75:01:c7:b3:da:bf:9a:1e:c6: d3:28:8e:3c:d1:89:ef:ed:ed:71:cd:41:00:9b:a6:df:3d:b9: 93:a2:fd:4b:6c:a2:27:55:ed:c6:00:a1:1e:21:70:c6:8e:4c: 4c:42:5f:78:ee:d3:5a:37:c8:af:be:67:77:43:4d:ec:d3:81: 88:8c:51:da:0e:cd:9e:f4:1e:88:ef:7c:32:dc:d2:60:f8:d9: a9:08:76:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUxMDI0MjIyMDIwWhcNMjUxMDMxMjIyMDIwWjAYMRYwFAYD VQQDEw02OGZiZmJhNS05ODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBLJFcq1BuVmcY1L0xqxzarXKE6AqdMlqtKL1NK/2OnsQwxOQKFhB2q6KE0I tw/v046sCwDpDIiqYGlVU5YH1bn6HlWhNYs4lejiuyPXicV2AMXdDFFH+n8VoG1L EsBzGfQvN8IYTwIGxYNVxfdzTU4ppVYC43hWlFPHLG71kaOEM4SLyVJ2e1GRwoMy DbZv+8rSAD0381JilxQu/JeaWUvs7qZPsyqpUg2w7pQ9rUf0wCjlOzuP/jRIq26M /jR2IiR982q4IAoFeKnL2GzYLeH18lnZGYcEOGRqLAiNA0Csj3MTEMK9dxakWgdI kVqAa2fJHUsY20zQlBoYGyLgYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5fwYfS eXjNZCpbP/K4+dz0jZXWMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmqfE9tpwoOFtpJ81PUNGhuL2j3QrHd9CY9a6xjajxAV+pBkjsqz8y J7f/VR1JKIA3dNHUC4+x1TO51Xx8ZmqEwDnTL4+JzhVpB4fNzDy6AOJ89JviLyC/ HapPgGQN53yeWFHt0j0I4UYz3/TX0vRL5siRgPz+6ZGJyTRNcAcU18q2ZuveZJ5k L83i8U1KqJyNKPM0pHUfFCwzKqSxfzr4rkhs0AxybJfCVlV1Acez2r+aHsbTKI48 0Ynv7e1xzUEAm6bfPbmTov1LbKInVe3GAKEeIXDGjkxMQl947tNaN8ivvmd3Q03s 04GIjFHaDs2e9B6I73wy3NJg+NmpCHbt -----END CERTIFICATE-----Generated at Sun Oct 26 09:03:28 2025 by rpki-client