$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft File: sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json) Hash identifier: 36OkpH2jJayXSqKkfhYVZKefsXg7gmOKNKNym7wiLQ0= Subject key identifier: 28:5F:6C:76:7B:DA:D4:67:C9:62:2D:FF:A7:A7:74:DB:C3:CD:4B:65 Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 Certificate issuer: /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft Manifest number: 46 Signing time: Thu 23 Oct 2025 09:36:43 +0000 Manifest this update: Thu 23 Oct 2025 09:36:43 +0000 Manifest next update: Thu 30 Oct 2025 09:36:43 +0000 Files and hashes: 1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: WZ1kktWqRPLwXHSblq73eCRPjBZQ2pjfMS7NEjuDCXU=) 2: D6E8451C889611F0B5CFE458C4F9AE02.roa (hash: o6qskbuLkzt0B6DeqPyqMtn3vK2zO8Pni4GeYykc/7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Validity Not Before: Oct 23 09:36:43 2025 GMT Not After : Oct 30 09:36:43 2025 GMT Subject: CN=68f9f72b-dd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2d:c8:1a:93:30:34:49:d4:96:a6:6e:6c:80: 50:76:5c:70:84:af:3b:77:4c:f5:5d:b0:9a:7f:cc: 12:0c:c0:c0:81:9e:5a:6a:71:82:0e:2f:20:4c:4c: 1f:ef:90:ba:7f:ab:18:64:22:c5:94:3f:11:e5:84: 3c:7e:32:dc:f4:53:4b:f3:57:d3:2d:6a:f6:45:fe: 02:95:8d:8e:57:3e:59:f4:9f:cc:e9:60:0a:6d:cb: 6a:d6:1b:7a:94:44:d9:5b:d9:2d:77:1b:df:14:1e: 48:98:e0:20:e7:27:e9:a8:fc:f4:5f:62:fb:b5:8e: e5:48:33:7d:b5:4d:3e:de:89:9a:4e:aa:e0:a4:3d: ba:30:e1:68:6c:cf:f5:9b:b1:ee:cf:f1:6d:6d:24: 05:21:e9:ab:b2:7b:30:ef:51:ae:13:8d:c3:46:f4: d0:73:0a:98:28:91:3d:28:8c:06:74:5a:a6:53:dc: e2:57:37:37:e8:19:1b:fc:2c:02:35:04:71:99:35: c2:6b:3d:c4:58:86:f4:bd:52:b9:ec:11:c3:65:25: db:c7:f8:67:ea:5c:8c:2c:4b:38:7a:91:02:ca:9c: 14:c8:b3:f4:e3:f7:19:7b:78:86:b9:5d:ea:21:38: 90:8e:db:b5:bb:5a:e1:54:ed:36:22:5f:16:36:e2: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:6C:76:7B:DA:D4:67:C9:62:2D:FF:A7:A7:74:DB:C3:CD:4B:65 X509v3 Authority Key Identifier: keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f1:38:af:47:44:bd:63:81:a9:e6:60:7a:13:00:fe:51:b5: 12:9c:8b:40:52:27:3a:5c:0d:64:5a:cb:b3:53:f3:93:2f:41: 53:9d:d1:06:b2:e0:27:16:9b:28:77:64:1a:e5:80:72:3f:34: cf:d9:de:2e:2a:f4:dd:48:6d:9d:44:da:e7:47:13:64:b9:46: 08:cb:6a:7a:ea:99:23:8e:fc:f6:b1:0a:48:a8:8a:d5:a8:f0: 0c:8e:3d:75:26:ea:5d:52:1b:fa:cf:85:99:d2:31:b7:5e:84: 85:25:c3:0e:28:0a:ae:35:76:41:97:df:4e:fc:d5:44:c9:ae: c1:fc:70:e4:84:79:7b:bf:b7:c0:0e:f1:61:c1:d5:4e:fc:81: 19:8a:87:93:1f:ca:2c:f1:99:96:c2:96:fd:3f:5b:38:cc:04: 5a:bc:2b:13:d7:76:ee:e5:ed:c2:90:9d:a8:40:28:0a:f3:51: 9f:6b:91:45:7e:c3:3d:4a:a8:fb:2c:04:fc:63:03:dc:03:b1: f3:1b:0c:45:e1:42:dc:c0:58:5a:11:70:c4:6f:db:63:c8:9a: 0d:18:22:b2:66:92:9c:c2:a8:eb:dd:23:5a:e7:1f:97:d6:e9: f2:88:2a:d9:6e:dc:2b:95:93:a9:13:63:2f:0f:d6:e5:03:97: 4e:f3:60:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoQjE1QjQwNTdBQjUwOTZCMzI0QUJDQjFDN0YwMjdCNkZB MzY2QzhENTAeFw0yNTEwMjMwOTM2NDNaFw0yNTEwMzAwOTM2NDNaMBgxFjAUBgNV BAMTDTY4ZjlmNzJiLWRkOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkLcgakzA0SdSWpm5sgFB2XHCErzt3TPVdsJp/zBIMwMCBnlpqcYIOLyBMTB/v kLp/qxhkIsWUPxHlhDx+Mtz0U0vzV9MtavZF/gKVjY5XPln0n8zpYApty2rWG3qU RNlb2S13G98UHkiY4CDnJ+mo/PRfYvu1juVIM321TT7eiZpOquCkPbow4Whsz/Wb se7P8W1tJAUh6auyezDvUa4TjcNG9NBzCpgokT0ojAZ0WqZT3OJXNzfoGRv8LAI1 BHGZNcJrPcRYhvS9UrnsEcNlJdvH+GfqXIwsSzh6kQLKnBTIs/Tj9xl7eIa5Xeoh OJCO27W7WuFU7TYiXxY24m0/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKF9sdnva 1GfJYi3/p6d028PNS2UwHwYDVR0jBBgwFoAUsVtAV6tQlrMkq8scfwJ7b6NmyNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0MyN0UzNzk2NEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJNa3E4c2Nmd0o3YjZObXlO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1Z0QVY2dFFsck1rcThzY2Z3SjdiNk5teU5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QThCL0MyN0UzNzk2NEI4MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJN a3E4c2Nmd0o3YjZObXlOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvxOK9HRL1jganmYHoTAP5RtRKci0BSJzpcDWRay7NT85MvQVOd0Qay 4CcWmyh3ZBrlgHI/NM/Z3i4q9N1IbZ1E2udHE2S5RgjLanrqmSOO/PaxCkioitWo 8AyOPXUm6l1SG/rPhZnSMbdehIUlww4oCq41dkGX30781UTJrsH8cOSEeXu/t8AO 8WHB1U78gRmKh5MfyizxmZbClv0/WzjMBFq8KxPXdu7l7cKQnahAKArzUZ9rkUV+ wz1KqPssBPxjA9wDsfMbDEXhQtzAWFoRcMRv22PImg0YIrJmkpzCqOvdI1rnH5fW 6fKIKtlu3CuVk6kTYy8P1uUDl07zYLs= -----END CERTIFICATE-----Generated at Fri Oct 24 00:33:40 2025 by rpki-client