$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: CV28sNIw3f3SjkuIfxWaM4gHktrmWVls3cGslO7TR9U= Subject key identifier: 84:80:B8:54:79:89:3A:74:C6:8E:0C:7C:07:50:25:90:8B:9B:C8:01 Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 02 Signing time: Fri 17 Oct 2025 10:39:47 +0000 Manifest this update: Fri 17 Oct 2025 10:39:47 +0000 Manifest next update: Fri 24 Oct 2025 10:39:47 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: ehnojMq35NyUked2r0i+bsfGOCnlzDikN0mk1mbnmtg=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Oct 17 10:39:47 2025 GMT Not After : Oct 24 10:39:47 2025 GMT Subject: CN=68f21cf3-d80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:a3:2e:f7:a9:1b:83:23:64:5d:76:36:bc: fc:46:77:13:92:2c:79:05:95:0b:83:f8:1f:b1:76: 19:46:5b:1f:e2:75:4a:a3:d1:72:7b:17:6c:b3:4e: 11:e7:c8:73:c8:58:b3:7b:e6:7b:c9:c6:82:ea:1e: 36:88:25:0f:c8:75:2d:06:6e:89:80:db:41:bf:1c: fa:54:3f:2f:84:14:ba:1a:17:57:2e:04:0f:a0:4a: f3:ba:a6:30:f1:0a:ea:83:4a:19:e8:8c:93:3f:08: 6b:00:f8:bf:eb:f4:85:e1:4b:04:e4:be:22:c2:7a: 56:ed:f1:f8:ea:d7:da:5b:81:9d:c3:82:3e:00:1c: ea:f3:e9:20:e9:55:ab:48:b0:25:9e:bd:ba:51:1b: 1b:e0:10:15:b1:71:fe:4e:da:b8:69:ca:4d:e0:ae: a0:4b:3e:44:c3:38:8c:d8:d6:18:5b:64:96:ca:a1: c6:09:11:12:75:f2:58:96:e7:d0:64:21:be:92:6a: 69:29:43:10:90:c2:44:c5:f1:51:58:16:fb:0f:ea: 58:10:7a:da:d1:ca:d4:6a:5b:d3:7c:a3:2e:8c:30: a1:cf:0b:36:9e:06:7c:ee:a1:fd:a2:84:f4:4d:0d: 42:54:14:c4:e2:59:c2:f1:74:c8:0d:14:fd:21:cd: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:80:B8:54:79:89:3A:74:C6:8E:0C:7C:07:50:25:90:8B:9B:C8:01 X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f9:cb:84:d2:a0:0a:56:01:db:45:cc:6b:0e:1c:09:f8:cc: d6:63:86:97:66:56:19:fa:a2:58:c1:23:54:9a:73:73:c7:34: 03:c8:40:1e:0e:ec:79:73:e8:f3:09:88:a6:88:e2:fc:3d:f8: 49:8b:c3:fd:90:f2:ec:09:9c:73:2e:0c:79:cb:b2:19:74:97: 42:84:77:14:f8:fe:13:cc:7f:55:1a:ff:d8:53:12:8e:88:74: 93:68:bf:1c:b2:01:c8:27:7a:1a:c2:e6:7d:a6:6c:7f:cb:ee: 8f:33:1c:61:5d:88:73:73:24:82:fc:46:42:98:03:0b:e7:ca: 71:f7:a7:d5:3b:bf:d7:86:e8:b2:47:7c:d4:22:d8:36:1f:ec: 27:29:c9:d0:4b:af:b1:7c:dd:fe:ae:7f:da:c4:73:05:74:86: 24:16:c8:99:96:8d:9a:46:73:47:dd:18:23:f3:15:0c:99:e4: f7:78:66:3a:e7:aa:c2:fd:f0:bc:8f:b9:8f:4a:3a:c2:96:99: 13:8f:8c:d4:9b:aa:a6:8d:3c:be:7c:b5:20:dc:b3:c0:3e:e6: e3:52:cc:4b:ef:d6:bc:b0:ad:41:82:79:43:2b:9c:d9:f0:b6: 2c:2c:35:c8:2c:b1:94:ad:da:96:25:a4:dc:21:c9:bc:c4:fa: 36:62:39:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNTEwMTcxMDM5NDdaFw0yNTEwMjQxMDM5NDdaMBgxFjAUBgNV BAMTDTY4ZjIxY2YzLWQ4MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUNKMu96kbgyNkXXY2vPxGdxOSLHkFlQuD+B+xdhlGWx/idUqj0XJ7F2yzThHn yHPIWLN75nvJxoLqHjaIJQ/IdS0GbomA20G/HPpUPy+EFLoaF1cuBA+gSvO6pjDx CuqDShnojJM/CGsA+L/r9IXhSwTkviLCelbt8fjq19pbgZ3Dgj4AHOrz6SDpVatI sCWevbpRGxvgEBWxcf5O2rhpyk3grqBLPkTDOIzY1hhbZJbKocYJERJ18liW59Bk Ib6SamkpQxCQwkTF8VFYFvsP6lgQetrRytRqW9N8oy6MMKHPCzaeBnzuof2ihPRN DUJUFMTiWcLxdMgNFP0hzVP9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhIC4VHmJ OnTGjgx8B1AlkIubyAEwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALz5y4TSoApWAdtFzGsOHAn4zNZjhpdmVhn6oljBI1Sac3PHNAPIQB4O 7Hlz6PMJiKaI4vw9+EmLw/2Q8uwJnHMuDHnLshl0l0KEdxT4/hPMf1Ua/9hTEo6I dJNovxyyAcgnehrC5n2mbH/L7o8zHGFdiHNzJIL8RkKYAwvnynH3p9U7v9eG6LJH fNQi2DYf7CcpydBLr7F83f6uf9rEcwV0hiQWyJmWjZpGc0fdGCPzFQyZ5Pd4Zjrn qsL98LyPuY9KOsKWmROPjNSbqqaNPL58tSDcs8A+5uNSzEvv1rywrUGCeUMrnNnw tiwsNcgssZSt2pYlpNwhybzE+jZiOfY= -----END CERTIFICATE-----Generated at Sat Oct 18 23:28:24 2025 by rpki-client