$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: lsJssjFWDqTcf5KCgOxkGtAMjbhrNVU6WMgYG/tlPo8= Subject key identifier: EB:6C:A5:E8:10:96:51:83:5B:2E:C0:62:78:28:06:F0:EB:4B:C3:91 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 34D9 Signing time: Sun 12 Oct 2025 15:28:46 +0000 Manifest this update: Sun 12 Oct 2025 15:28:46 +0000 Manifest next update: Sun 19 Oct 2025 15:28:46 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: OmWlt30GR+IPDhlIvHDSVvQrAJeg+cPJVtyb75ujwj8=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 15:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Oct 12 15:28:46 2025 GMT Not After : Oct 19 15:28:46 2025 GMT Subject: CN=68ebc92e-2294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:c1:d0:c7:e7:12:1f:bb:0b:d8:fd:b5:4e: a4:a3:47:34:97:9f:ff:88:68:2a:68:04:34:21:ba: bd:ee:00:2b:d7:1e:81:86:1f:d4:3d:23:2c:53:c0: 7e:68:ef:d5:5b:3e:1b:70:98:2b:be:4d:70:0e:1e: c7:2a:68:af:7c:31:18:f0:4a:de:c9:df:4a:54:f3: 5d:1d:e3:c7:61:9d:f8:b8:47:d1:ab:e1:77:7f:2f: e4:b0:f9:fb:b1:ac:81:4c:08:94:4e:a5:a9:98:6b: 75:0c:96:f4:bb:64:77:ab:a7:5d:ff:ef:f0:cb:66: 39:89:64:89:0f:98:8b:77:1c:ef:fe:f8:ef:43:1c: da:1f:b3:3a:34:32:05:a8:8f:a0:82:db:0f:78:3e: a2:23:d4:22:b9:3f:81:90:5d:3b:79:37:46:8c:c9: 71:eb:ed:8c:04:a8:86:4c:7e:35:ec:0f:3f:6e:da: b4:e6:b9:5a:1d:ae:c7:1f:ec:7f:a3:e2:e6:72:69: b8:cc:6a:a5:37:e0:72:ff:b3:fd:30:76:b0:d9:f9: 3c:15:6e:58:d5:c8:74:f8:7e:60:0d:e7:14:63:a2: ee:06:69:26:cb:50:56:be:41:32:ea:26:98:20:d6: 9b:62:96:28:75:d9:03:61:49:d0:73:3d:d1:dc:5a: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6C:A5:E8:10:96:51:83:5B:2E:C0:62:78:28:06:F0:EB:4B:C3:91 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:11:13:cc:4d:d0:23:b5:22:39:8b:1b:60:d4:3a:25:c1:58: 71:6e:d4:76:d6:b0:58:69:9f:71:8a:50:8f:3d:3d:51:7c:76: 62:a7:b0:de:17:74:4b:70:78:e7:d2:c6:98:7e:47:9f:8a:a2: 10:64:8d:52:88:0c:91:cf:e5:13:75:3c:3c:9f:99:25:ae:b9: 12:a3:bd:03:26:ba:59:67:5e:86:ae:48:56:09:eb:9c:b6:51: 51:46:a6:c6:11:ef:26:25:8a:5e:fc:f3:12:1b:97:0c:84:3f: 7d:3a:1f:c5:90:bc:f1:73:34:6b:5b:27:30:69:72:ae:9f:c4: f3:af:9f:9d:31:2f:e6:14:65:81:98:6d:ab:70:de:cc:24:7e: 11:ca:0d:73:6f:b7:85:fe:69:15:7f:30:03:e7:df:08:71:e3: 79:d4:87:eb:26:eb:0a:b3:b0:0d:bb:70:be:11:31:32:72:db: ae:a0:69:61:ae:a9:07:a3:a4:4c:bb:67:b7:2c:79:bb:37:ff: 58:07:00:86:28:3e:05:f8:f8:53:a7:ef:71:1c:1e:2b:91:6f: bf:96:c7:14:40:a2:42:09:3c:c1:25:b2:45:d6:b0:b1:cd:72: 59:77:fa:04:51:81:61:58:9f:9b:b9:d8:11:c5:78:bf:78:8a: 64:27:8a:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUxMDEyMTUyODQ2WhcNMjUxMDE5MTUyODQ2WjAYMRYwFAYD VQQDEw02OGViYzkyZS0yMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjDB0MfnEh+7C9j9tU6ko0c0l5//iGgqaAQ0Ibq97gAr1x6Bhh/UPSMsU8B+ aO/VWz4bcJgrvk1wDh7HKmivfDEY8Ereyd9KVPNdHePHYZ34uEfRq+F3fy/ksPn7 sayBTAiUTqWpmGt1DJb0u2R3q6dd/+/wy2Y5iWSJD5iLdxzv/vjvQxzaH7M6NDIF qI+ggtsPeD6iI9QiuT+BkF07eTdGjMlx6+2MBKiGTH417A8/btq05rlaHa7HH+x/ o+Lmcmm4zGqlN+By/7P9MHaw2fk8FW5Y1ch0+H5gDecUY6LuBmkmy1BWvkEy6iaY INabYpYoddkDYUnQcz3R3FqCewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtspegQ llGDWy7AYngoBvDrS8ORMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0ERPMTdAjtSI5ixtg1DolwVhxbtR21rBYaZ9xilCPPT1RfHZip7De F3RLcHjn0saYfkefiqIQZI1SiAyRz+UTdTw8n5klrrkSo70DJrpZZ16GrkhWCeuc tlFRRqbGEe8mJYpe/PMSG5cMhD99Oh/FkLzxczRrWycwaXKun8Tzr5+dMS/mFGWB mG2rcN7MJH4Ryg1zb7eF/mkVfzAD598IceN51IfrJusKs7ANu3C+ETEyctuuoGlh rqkHo6RMu2e3LHm7N/9YBwCGKD4F+PhTp+9xHB4rkW+/lscUQKJCCTzBJbJF1rCx zXJZd/oEUYFhWJ+budgRxXi/eIpkJ4pe -----END CERTIFICATE-----Generated at Tue Oct 14 00:54:37 2025 by rpki-client