$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json) Hash identifier: CNWU2iieg6+2Fj7t/JK7ufg81YsAfd6shfrXxrjNeo4= Subject key identifier: 27:FC:E2:12:7E:CE:00:E7:95:30:30:29:3B:ED:AF:F3:1A:3E:43:F5 Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft Manifest number: 73 Signing time: Sat 25 Oct 2025 10:46:15 +0000 Manifest this update: Sat 25 Oct 2025 10:46:14 +0000 Manifest next update: Sat 01 Nov 2025 10:46:14 +0000 Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: GAWVp7SlvKPpaT9melgwdWxlQOueFR9FQX2Wib+aYBw=) 2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: wwcr+8+DOyZmloRteEL56x1j3vM+7vfdbP5INKVgy7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Validity Not Before: Oct 25 10:46:14 2025 GMT Not After : Nov 1 10:46:14 2025 GMT Subject: CN=68fcaa76-7968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:f8:c4:74:b7:18:89:a4:be:3b:88:8c:de: 95:af:0b:99:93:7d:1e:68:33:1d:ca:fe:bb:1d:5d: f8:8a:7e:96:b7:5c:32:c1:9a:b2:bc:5e:14:4c:67: 2e:bf:a8:b9:49:5a:aa:c2:3f:3b:21:be:23:01:88: b1:d7:1a:ae:61:bb:4b:50:66:44:e1:6b:00:dd:c8: 3d:a4:38:38:4f:0e:e1:15:44:ac:80:a5:14:da:51: 01:a9:62:72:8e:b7:a8:0f:66:54:26:6f:44:b5:1e: 70:60:b6:64:f5:66:75:fb:ed:d3:80:aa:1b:6b:55: ab:8d:e2:86:fc:44:d7:48:f3:ef:19:aa:b4:2d:ab: 71:e9:4f:5f:c6:af:99:e8:97:5a:35:1d:37:8d:4f: 5f:fc:a5:3e:59:f4:00:6e:d3:3b:4b:a6:cb:ea:9a: e1:41:1e:37:b7:5a:2d:b6:79:9e:86:fa:24:13:01: 46:4c:fa:8d:9d:9c:32:97:01:cf:00:86:e5:05:f3: 35:bf:44:7e:d4:2a:b0:56:64:38:ad:54:ff:b5:85: 13:b6:84:63:5b:4d:85:74:c2:ad:f8:8c:29:40:ff: 1d:b3:29:c5:8a:cf:57:6b:46:0d:e6:b5:f6:8c:ac: a8:ef:c6:1c:67:4a:66:5b:a4:ee:f6:b1:86:b0:a8: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:E2:12:7E:CE:00:E7:95:30:30:29:3B:ED:AF:F3:1A:3E:43:F5 X509v3 Authority Key Identifier: keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3e:3c:96:8d:d3:62:dd:5a:50:a1:b6:c8:2c:dd:46:24:13: 04:90:b0:13:6a:26:e8:42:ab:1c:57:66:2a:45:4b:0c:5b:e3: cb:37:00:fe:d9:a6:18:c9:d3:e4:80:02:4b:10:80:26:94:7f: 60:65:76:f1:c3:bf:7e:79:e0:63:d4:c0:53:f0:39:22:a0:60: 4d:f0:05:62:6f:ec:70:cd:04:05:09:45:e8:8a:0f:94:c3:cb: bf:2a:75:2b:7c:28:dc:89:a2:c8:33:9e:9a:2f:e3:8e:b5:28: e6:b0:9f:12:c0:a2:6c:da:ab:d8:ac:a9:61:40:db:ad:3f:77: ab:39:16:31:bb:b3:a0:20:e0:c8:1f:eb:e2:f5:2b:2d:e6:67: ae:5c:8c:86:37:2c:ed:fb:00:89:58:55:1b:e6:ce:dc:77:a2: da:9a:6f:82:71:17:50:5b:b0:31:8d:66:82:64:2f:24:28:64: ec:ef:62:d7:ea:69:69:7c:35:0b:51:71:7b:43:09:f7:1a:14: c3:df:40:fb:f6:89:b9:31:79:1d:00:8d:c4:1d:b3:dc:c3:ad: 18:24:22:4b:87:38:3c:c6:1f:bb:68:7b:b7:ff:65:29:d6:bb: 51:a9:bd:92:30:c6:54:ae:50:fa:b8:4c:73:9b:e8:7c:57:23: 71:31:34:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QThDMjExMC8GA1UEBRMoRDI0RkNDQUQzQUNFN0ZGRTVCRjAyQTZBOEY2OEMwNjAy RTFDMUI1MTAeFw0yNTEwMjUxMDQ2MTRaFw0yNTExMDExMDQ2MTRaMBgxFjAUBgNV BAMTDTY4ZmNhYTc2LTc5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4lfjEdLcYiaS+O4iM3pWvC5mTfR5oMx3K/rsdXfiKfpa3XDLBmrK8XhRMZy6/ qLlJWqrCPzshviMBiLHXGq5hu0tQZkThawDdyD2kODhPDuEVRKyApRTaUQGpYnKO t6gPZlQmb0S1HnBgtmT1ZnX77dOAqhtrVauN4ob8RNdI8+8ZqrQtq3HpT1/Gr5no l1o1HTeNT1/8pT5Z9ABu0ztLpsvqmuFBHje3Wi22eZ6G+iQTAUZM+o2dnDKXAc8A huUF8zW/RH7UKrBWZDitVP+1hRO2hGNbTYV0wq34jClA/x2zKcWKz1drRg3mtfaM rKjvxhxnSmZbpO72sYawqN/PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ/ziEn7O AOeVMDApO+2v8xo+Q/UwHwYDVR0jBBgwFoAU0k/MrTrOf/5b8Cpqj2jAYC4cG1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBOEMyLzk1QTY5QkUyMDA1 MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81YjhDcHFqMmpBWUM0Y0cx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGtfTXJUck9mXzViOENwcWoyakFZQzRjRzFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB OEMyLzk1QTY5QkUyMDA1MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81 YjhDcHFqMmpBWUM0Y0cxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQ+PJaN02LdWlChtsgs3UYkEwSQsBNqJuhCqxxXZipFSwxb48s3AP7Z phjJ0+SAAksQgCaUf2BldvHDv3554GPUwFPwOSKgYE3wBWJv7HDNBAUJReiKD5TD y78qdSt8KNyJosgznpov4461KOawnxLAomzaq9isqWFA260/d6s5FjG7s6Ag4Mgf 6+L1Ky3mZ65cjIY3LO37AIlYVRvmztx3otqab4JxF1BbsDGNZoJkLyQoZOzvYtfq aWl8NQtRcXtDCfcaFMPfQPv2ibkxeR0AjcQds9zDrRgkIkuHODzGH7toe7f/ZSnW u1GpvZIwxlSuUPq4THOb6HxXI3ExNCg= -----END CERTIFICATE-----Generated at Mon Oct 27 07:22:44 2025 by rpki-client