$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: lO/aHP2eDx1gjy3jUOWkZvYedIth05oZSWrtFvwYl5M= Subject key identifier: 64:44:03:4D:58:32:96:21:99:2B:C2:EC:CC:86:67:D0:1A:18:9D:76 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 07D8 Signing time: Fri 24 Oct 2025 23:39:07 +0000 Manifest this update: Fri 24 Oct 2025 23:39:07 +0000 Manifest next update: Fri 31 Oct 2025 23:39:07 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: TU28i4ycplhQ48pmaeSHixaZIGWPsKHITYubwfSgnFg=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 23:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Oct 24 23:39:07 2025 GMT Not After : Oct 31 23:39:07 2025 GMT Subject: CN=68fc0e1b-9b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:7c:d7:1a:4c:59:29:92:60:5a:4c:c3:b7: 8d:e9:2b:7f:4d:5a:8a:fc:32:2a:91:67:b9:0f:0c: 40:25:0e:89:a8:c0:24:c1:85:6f:bf:2a:5e:3f:ae: e6:ce:1c:a6:94:83:4e:ac:5c:6f:1c:0d:71:c7:7d: e6:6a:02:5b:0a:a3:24:af:fd:31:8c:26:31:04:f7: a1:66:e7:b3:6d:4e:08:87:6b:53:70:bd:cb:8b:ee: a1:a3:12:b5:4d:8c:ba:a7:cb:64:c5:b4:81:44:12: 01:d3:1a:de:30:15:cb:f0:0d:3b:93:81:0f:47:e1: 75:d1:67:35:ba:20:1a:bd:ca:ac:4a:41:14:04:00: 49:b0:12:06:18:33:23:26:4a:00:14:a6:fb:0f:dd: 1c:65:ac:0e:a5:09:98:d1:5e:ba:74:2e:2a:18:1c: 7a:7e:e9:4d:95:7e:0f:b3:65:12:29:6a:63:6d:55: 54:1a:f4:a7:8f:63:8e:b0:86:e4:f3:19:b0:6e:20: 81:d7:69:e1:e3:c4:07:6a:f7:7f:f5:7b:fd:94:82: 1b:e7:5c:26:8b:51:00:bd:b3:96:55:e1:db:56:ea: 79:8d:b7:3f:9d:70:0d:dd:01:6d:98:e1:76:96:bb: 79:84:f8:43:ab:ef:4b:f5:5f:9e:3e:81:0c:c5:01: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:44:03:4D:58:32:96:21:99:2B:C2:EC:CC:86:67:D0:1A:18:9D:76 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:d9:ce:72:42:46:d0:81:7f:37:2d:f9:11:7d:81:0d:b3: cd:dd:34:b2:7f:0f:64:9a:c2:b6:31:d3:a3:83:ef:c2:a6:e1: e8:62:5a:cf:aa:c7:13:c7:7d:fd:6d:b1:94:50:68:7b:7e:84: a7:a4:66:a2:34:44:84:4c:54:93:60:74:85:50:0e:9c:96:1c: 69:7e:50:5d:e6:f0:40:50:80:e7:0f:ac:e1:f8:88:a4:83:7d: b4:36:95:3d:09:b5:bd:19:49:58:5d:9b:f0:fd:21:04:a4:a0: 8d:f4:eb:20:b4:e2:fc:c7:33:bb:2c:f4:99:e5:8b:19:06:3e: 57:a0:85:99:32:9e:60:11:2a:1f:75:ce:28:49:bf:7d:40:79: 1a:96:24:70:89:e0:6c:59:c7:68:7d:35:27:ff:55:53:b5:97: ca:f7:05:77:bf:f3:86:7f:b5:72:2e:8f:db:06:d6:65:32:31: 49:5f:88:c9:5d:fe:a1:5f:b2:9f:f8:99:53:0e:58:37:12:97: 08:c3:4f:5a:72:a7:5c:f5:66:dc:ca:a8:93:8b:19:1b:aa:d2: b6:b9:bc:6a:2b:9b:f0:bc:eb:3e:37:f3:a5:a0:62:5a:b1:08: 9e:20:cb:bf:20:d4:87:ef:c5:74:21:fd:01:5c:bc:45:ab:9a: 2c:f2:ce:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUxMDI0MjMzOTA3WhcNMjUxMDMxMjMzOTA3WjAYMRYwFAYD VQQDEw02OGZjMGUxYi05YjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8V81xpMWSmSYFpMw7eN6St/TVqK/DIqkWe5DwxAJQ6JqMAkwYVvvypeP67m zhymlINOrFxvHA1xx33magJbCqMkr/0xjCYxBPehZuezbU4Ih2tTcL3Li+6hoxK1 TYy6p8tkxbSBRBIB0xreMBXL8A07k4EPR+F10Wc1uiAavcqsSkEUBABJsBIGGDMj JkoAFKb7D90cZawOpQmY0V66dC4qGBx6fulNlX4Ps2USKWpjbVVUGvSnj2OOsIbk 8xmwbiCB12nh48QHavd/9Xv9lIIb51wmi1EAvbOWVeHbVup5jbc/nXAN3QFtmOF2 lrt5hPhDq+9L9V+ePoEMxQHJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGREA01Y MpYhmSvC7MyGZ9AaGJ12MB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZD9nOckJG0IF/Ny35EX2BDbPN3TSyfw9kmsK2MdOjg+/CpuHoYlrP qscTx339bbGUUGh7foSnpGaiNESETFSTYHSFUA6clhxpflBd5vBAUIDnD6zh+Iik g320NpU9CbW9GUlYXZvw/SEEpKCN9OsgtOL8xzO7LPSZ5YsZBj5XoIWZMp5gESof dc4oSb99QHkaliRwieBsWcdofTUn/1VTtZfK9wV3v/OGf7VyLo/bBtZlMjFJX4jJ Xf6hX7Kf+JlTDlg3EpcIw09acqdc9WbcyqiTixkbqtK2ubxqK5vwvOs+N/OloGJa sQieIMu/INSH78V0If0BXLxFq5os8s4Y -----END CERTIFICATE-----Generated at Sat Oct 25 20:04:24 2025 by rpki-client