$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json) Hash identifier: v+QCZuMAA7sqjdhOc6eUcpZdDipFHehA3O489to5xgc= Subject key identifier: 8D:B2:2D:D7:36:C7:C5:8E:4D:82:EF:AD:A7:5F:6E:9D:69:30:8B:C0 Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft Manifest number: 080C Signing time: Fri 24 Oct 2025 21:47:34 +0000 Manifest this update: Fri 24 Oct 2025 21:47:33 +0000 Manifest next update: Fri 31 Oct 2025 21:47:33 +0000 Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: EpVqXL5kNM0qiJGTVOsEiL9f9spDscMiGk8jG92RL+w=) 2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: nZkvb14BrukF0xrl+mqOEwQXndGaGVD7etvG6n2ebqo=) 3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: aPoLWPstwsO+freisIa5/qBSIqgnIR7f63xsHuA2Fdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 21:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Oct 24 21:47:33 2025 GMT Not After : Oct 31 21:47:33 2025 GMT Subject: CN=68fbf3f6-b45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:0b:da:77:ca:90:1f:fe:a0:41:8e:f5:8e: 3e:7b:fc:c4:73:b6:9c:4d:e4:8d:be:7c:a9:7f:06: 7c:2a:fd:ff:de:1f:91:31:b8:3d:f0:18:bd:04:21: 77:f7:6e:e0:b0:38:9e:14:a4:b1:dd:50:da:d4:02: 9b:93:b9:6d:19:85:e0:39:60:0a:a8:f5:a4:66:11: e9:f9:f2:8d:72:16:0a:03:27:05:6a:06:ea:ff:cc: 82:4d:e6:d8:e2:6c:88:45:6b:f9:dd:cc:a1:d4:03: 2d:9f:35:63:75:74:35:ff:78:f5:c2:ca:26:a6:23: 81:83:e3:ee:b5:f5:dd:ba:81:b8:64:0b:f9:61:bb: fa:59:79:2b:e3:d4:29:d5:a0:65:00:a0:11:3a:e0: 71:ac:37:2c:69:04:f3:4d:58:a3:e7:fa:44:66:69: 12:84:0f:28:77:eb:25:13:b4:b7:a1:19:db:da:9e: 46:03:7c:8b:94:bb:6d:8e:e8:80:3f:b9:a2:03:1a: 47:d8:ba:8f:1b:73:4e:d3:57:3e:60:40:79:26:67: 99:ac:b5:31:0b:92:18:56:05:9e:80:78:e0:b0:ce: 9f:ee:e0:8d:af:7a:77:89:d4:91:90:b3:8a:c7:31: 10:05:76:61:4b:b2:33:7d:9a:8d:81:29:07:3a:13: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B2:2D:D7:36:C7:C5:8E:4D:82:EF:AD:A7:5F:6E:9D:69:30:8B:C0 X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fd:6d:ff:11:56:61:35:0a:45:6b:b8:11:0a:8b:58:46:ff: 56:5f:10:1d:57:96:69:34:2b:0d:44:d0:bb:3b:00:2b:ba:de: d4:7e:f5:d2:2d:3b:0f:31:ee:3f:47:6b:4a:80:16:0f:86:d6: 66:53:07:94:f4:aa:f2:dd:30:08:e7:d6:9f:6d:f6:db:38:87: 07:c4:47:1a:fe:66:f3:9e:18:69:28:60:dc:75:32:20:00:4c: 95:94:b7:42:49:0f:96:d0:e3:ba:ed:01:cc:0b:10:7e:db:75: 87:5d:c7:3b:8e:1b:e2:f8:d2:86:9f:bd:89:d2:5d:dc:be:be: 92:31:68:1b:6a:a2:e6:db:85:6c:67:97:8f:55:36:87:e2:61: ad:bc:1b:ac:53:0e:3e:07:46:5a:9d:9e:0d:d8:3e:51:58:fb: 38:22:8a:26:81:5d:e6:a5:ea:9d:06:42:80:76:7a:6e:c7:4c: 5b:3a:44:0b:4f:13:d3:09:a9:5e:18:e6:74:0e:ea:0d:db:25: 7a:39:c8:81:2d:3c:7c:81:1e:b7:23:c7:39:79:0c:92:03:34: 83:ec:73:a5:77:b8:46:4c:26:76:69:77:77:17:7a:24:28:71: 83:bf:57:24:3e:ef:23:e5:4d:d5:13:5f:e7:c9:24:62:9a:c8: 63:4c:ce:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjUxMDI0MjE0NzMzWhcNMjUxMDMxMjE0NzMzWjAYMRYwFAYD VQQDEw02OGZiZjNmNi1iNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv98L2nfKkB/+oEGO9Y4+e/zEc7acTeSNvnypfwZ8Kv3/3h+RMbg98Bi9BCF3 927gsDieFKSx3VDa1AKbk7ltGYXgOWAKqPWkZhHp+fKNchYKAycFagbq/8yCTebY 4myIRWv53cyh1AMtnzVjdXQ1/3j1wsompiOBg+PutfXduoG4ZAv5Ybv6WXkr49Qp 1aBlAKAROuBxrDcsaQTzTVij5/pEZmkShA8od+slE7S3oRnb2p5GA3yLlLttjuiA P7miAxpH2LqPG3NO01c+YEB5JmeZrLUxC5IYVgWegHjgsM6f7uCNr3p3idSRkLOK xzEQBXZhS7IzfZqNgSkHOhOlwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2yLdc2 x8WOTYLvradfbp1pMIvAMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTU5MC9BODk1MjQ5RUY3QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpI ai1oRG9sUExCSUN0ekZmdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/W3/EVZhNQpFa7gRCotYRv9WXxAdV5ZpNCsNRNC7OwArut7UfvXS LTsPMe4/R2tKgBYPhtZmUweU9Kry3TAI59afbfbbOIcHxEca/mbznhhpKGDcdTIg AEyVlLdCSQ+W0OO67QHMCxB+23WHXcc7jhvi+NKGn72J0l3cvr6SMWgbaqLm24Vs Z5ePVTaH4mGtvBusUw4+B0ZanZ4N2D5RWPs4IoomgV3mpeqdBkKAdnpux0xbOkQL TxPTCaleGOZ0DuoN2yV6OciBLTx8gR63I8c5eQySAzSD7HOld7hGTCZ2aXd3F3ok KHGDv1ckPu8j5U3VE1/nySRimshjTM5u -----END CERTIFICATE-----Generated at Sat Oct 25 08:07:21 2025 by rpki-client