$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: hKIETozy0ZVn2f31yJdV5ftUjVwNCoTgGHO7fcFV9fY= Subject key identifier: 64:47:AD:98:2D:79:99:83:59:43:E7:81:3C:32:CC:9A:D2:DA:60:16 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 3503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 34EC Signing time: Mon 20 Oct 2025 14:16:26 +0000 Manifest this update: Mon 20 Oct 2025 14:16:25 +0000 Manifest next update: Mon 27 Oct 2025 14:16:25 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: qzQuxnU7JPxsOMSuE+WK13L6yurJCL4r/FfNs/DyJB0=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13571 (0x3503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Oct 20 14:16:25 2025 GMT Not After : Oct 27 14:16:25 2025 GMT Subject: CN=68f6443a-c1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:95:aa:dc:75:0c:c7:a4:ed:d3:61:e9:18: a3:fd:87:a7:6a:69:04:a0:ef:16:a4:fa:1c:ac:d2: 58:ed:e5:1f:8d:0c:b6:3a:8a:4e:5c:7b:88:25:fd: 44:f7:40:51:ff:91:0a:b8:c2:6d:0c:b2:4f:b4:d8: e0:b3:a8:96:83:a2:16:09:51:8b:22:f3:38:0f:a2: 5e:82:19:57:6e:22:4b:54:ce:82:ad:6b:d0:d3:68: 42:34:02:b1:e7:cb:4f:5b:f5:24:0f:5a:55:ce:a2: 04:8f:45:fe:92:c1:fd:a7:4e:f9:4a:6a:71:b9:92: cb:47:6b:72:f2:ba:3a:33:3f:f2:7e:12:15:99:9c: 86:90:9d:70:91:6e:b1:d1:02:58:01:76:5b:8c:ea: c4:83:b5:c5:22:15:55:7a:90:98:3f:b1:a8:ed:f4: aa:cb:e4:9c:39:39:65:ce:ff:08:f3:09:ab:98:60: d1:fc:aa:9e:d3:e3:1b:fc:ad:cb:ce:ea:d4:96:de: c2:80:62:a5:33:1c:e4:f4:cf:92:a4:56:0b:03:34: 53:07:9b:0b:c7:d7:88:5e:3e:10:d2:f2:52:fc:3e: 88:07:a9:8c:76:5c:f3:54:f2:a0:36:c5:a4:c1:a0: fd:d1:e0:ea:15:07:28:6c:27:a2:51:6b:70:b5:82: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:47:AD:98:2D:79:99:83:59:43:E7:81:3C:32:CC:9A:D2:DA:60:16 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:27:17:04:d5:65:a0:4f:6a:1b:b9:43:e7:b9:ef:d1:b2:94: a0:06:72:46:75:e6:36:18:74:58:90:45:fb:e7:0c:87:2e:0f: 1b:0e:16:7f:5b:6b:cd:21:36:ae:02:ea:b5:cf:2f:f0:d9:2e: 75:2b:a0:ec:e9:e3:21:d1:5b:5f:a3:d2:f7:db:0d:30:4a:46: b7:94:76:47:ee:4a:55:e9:47:c9:e2:09:57:a1:3f:35:68:ec: 5d:f8:59:b7:9d:75:fd:5c:8a:f1:b3:29:b6:a3:8b:75:52:0f: f9:de:23:6c:79:08:75:79:23:c3:fc:8d:df:d5:a2:05:eb:02: 08:47:ef:2b:99:0a:f2:33:8b:f9:a1:e0:a2:f7:55:22:48:6b: af:40:b7:49:92:a8:16:39:67:8a:ab:8d:91:2e:2f:e1:6e:12: 76:77:be:9d:9d:00:9f:08:1b:7a:36:b6:cf:15:dc:87:8f:9a: 1e:36:1e:c4:0b:f9:93:e1:01:51:f9:bd:05:0c:a9:3f:46:55: 4a:02:9a:f7:18:06:83:8f:9f:db:ab:a6:3b:ba:56:ae:c8:d5: 1c:a8:e5:9e:23:58:39:fd:96:35:f9:89:c3:9e:ae:47:a3:b0: c5:f3:e5:a9:a0:9a:68:7d:3e:7c:b5:86:93:48:40:85:b2:47: f2:36:e8:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUxMDIwMTQxNjI1WhcNMjUxMDI3MTQxNjI1WjAYMRYwFAYD VQQDEw02OGY2NDQzYS1jMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2WVqtx1DMek7dNh6Rij/YenamkEoO8WpPocrNJY7eUfjQy2OopOXHuIJf1E 90BR/5EKuMJtDLJPtNjgs6iWg6IWCVGLIvM4D6JeghlXbiJLVM6CrWvQ02hCNAKx 58tPW/UkD1pVzqIEj0X+ksH9p075SmpxuZLLR2ty8ro6Mz/yfhIVmZyGkJ1wkW6x 0QJYAXZbjOrEg7XFIhVVepCYP7Go7fSqy+ScOTllzv8I8wmrmGDR/Kqe0+Mb/K3L zurUlt7CgGKlMxzk9M+SpFYLAzRTB5sLx9eIXj4Q0vJS/D6IB6mMdlzzVPKgNsWk waD90eDqFQcobCeiUWtwtYJB1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRHrZgt eZmDWUPngTwyzJrS2mAWMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyJxcE1WWgT2obuUPnue/RspSgBnJGdeY2GHRYkEX75wyHLg8bDhZ/ W2vNITauAuq1zy/w2S51K6Ds6eMh0Vtfo9L32w0wSka3lHZH7kpV6UfJ4glXoT81 aOxd+Fm3nXX9XIrxsym2o4t1Ug/53iNseQh1eSPD/I3f1aIF6wIIR+8rmQryM4v5 oeCi91UiSGuvQLdJkqgWOWeKq42RLi/hbhJ2d76dnQCfCBt6NrbPFdyHj5oeNh7E C/mT4QFR+b0FDKk/RlVKApr3GAaDj5/bq6Y7ulauyNUcqOWeI1g5/ZY1+YnDnq5H o7DF8+WpoJpofT58tYaTSECFskfyNuhE -----END CERTIFICATE-----Generated at Wed Oct 22 12:13:37 2025 by rpki-client