$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: umdbgmxvg+W2ghMpaUJ5i77hLQJ0k0m5KS9jGP7l2js= Subject key identifier: 32:95:48:26:4F:C0:72:AC:A1:B5:FF:82:82:DE:F8:B8:96:90:AF:49 Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: C1 Signing time: Thu 23 Oct 2025 07:57:30 +0000 Manifest this update: Thu 23 Oct 2025 07:57:29 +0000 Manifest next update: Thu 30 Oct 2025 07:57:29 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: l1A8FE7CFhrm4px3+y5eYM1C3M2HgoXyTW1KUKSEtTM=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Oct 23 07:57:29 2025 GMT Not After : Oct 30 07:57:29 2025 GMT Subject: CN=68f9dfe9-160d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:68:9c:93:73:94:24:a5:26:b7:40:17:53: 2b:b4:ef:6c:b7:46:40:f2:21:f4:71:b3:02:59:13: 11:a0:ef:b6:a3:ec:68:9a:27:5c:e9:0c:4f:7c:32: ae:29:ff:bc:da:fd:8b:d6:d2:5e:8a:be:41:b4:6d: 02:a5:72:fc:bb:0b:c6:86:9c:72:e9:31:2f:08:11: 81:9c:f5:8b:f1:3b:b7:11:9d:4a:38:b3:3f:09:db: 49:c4:5f:d2:f3:e5:79:85:8c:d7:4c:d6:a4:32:63: 35:fe:c3:c0:2a:6c:cc:69:f7:3e:13:57:9d:97:df: 37:81:e7:db:4b:18:6a:d5:5b:0c:25:f8:3d:15:b6: de:4e:1c:a9:3f:56:72:77:74:6c:22:cf:4b:5b:ff: 52:1c:97:ff:6f:c3:df:4b:f5:2b:da:db:62:cc:10: d8:76:7d:53:d9:f4:e3:79:43:bb:65:de:c3:77:74: 71:77:e6:60:65:f9:4d:2a:f4:f3:02:6c:d0:db:5b: e3:1a:4b:de:98:7a:e2:f8:42:ce:f9:51:28:4b:98: 99:d0:b8:1e:2e:74:20:ef:7f:3c:6a:4d:c7:e7:43: 1e:22:9d:7c:79:96:4a:36:b0:da:6d:50:bd:dc:b3: 88:26:3d:89:5d:49:69:55:59:cb:76:ba:19:47:5b: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:95:48:26:4F:C0:72:AC:A1:B5:FF:82:82:DE:F8:B8:96:90:AF:49 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:49:9d:57:8a:1c:db:97:f3:b1:52:d5:9f:a0:e7:d5:9c:7e: a7:7f:fb:f1:6f:62:6a:2c:1d:38:1a:e1:be:bd:41:d2:c6:8d: a8:8f:d9:3f:d0:de:f6:31:16:d8:91:b3:d1:be:7c:27:d7:d9: a7:32:97:59:0c:17:69:c6:97:d5:5c:25:35:44:8c:5b:5b:ea: b3:b5:74:cb:e5:61:03:ed:95:64:fc:49:fd:d5:e2:70:5f:54: 7b:cb:db:95:95:3c:82:98:be:11:18:43:6b:56:07:73:b8:f3: ba:b7:fd:cc:cb:c9:4b:cc:d7:33:41:45:c2:62:be:f7:77:35: 52:a6:35:9f:64:dc:36:28:dd:ca:2b:99:9f:30:07:e1:08:6f: 29:a1:69:fc:9d:0d:92:d7:7e:93:4f:dc:52:9d:dc:33:dc:8d: 73:44:28:8d:11:d7:02:39:03:f7:2f:27:06:5c:3f:02:8a:d8: 27:92:d6:22:89:6b:29:81:4a:0f:03:6c:0b:85:32:b8:b0:c2: f5:13:95:e7:92:03:2a:88:26:39:d6:5c:f2:54:02:ef:c9:17: ad:4c:84:19:fd:b0:81:05:35:9b:2f:2b:31:52:ec:2b:52:c1: c8:50:c1:36:3b:62:fc:c8:04:0a:5d:bd:73:2f:b0:af:f7:e2: ac:8d:aa:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUxMDIzMDc1NzI5WhcNMjUxMDMwMDc1NzI5WjAYMRYwFAYD VQQDEw02OGY5ZGZlOS0xNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q9onJNzlCSlJrdAF1MrtO9st0ZA8iH0cbMCWRMRoO+2o+xomidc6QxPfDKu Kf+82v2L1tJeir5BtG0CpXL8uwvGhpxy6TEvCBGBnPWL8Tu3EZ1KOLM/CdtJxF/S 8+V5hYzXTNakMmM1/sPAKmzMafc+E1edl983gefbSxhq1VsMJfg9FbbeThypP1Zy d3RsIs9LW/9SHJf/b8PfS/Ur2ttizBDYdn1T2fTjeUO7Zd7Dd3Rxd+ZgZflNKvTz AmzQ21vjGkvemHri+ELO+VEoS5iZ0LgeLnQg7388ak3H50MeIp18eZZKNrDabVC9 3LOIJj2JXUlpVVnLdroZR1sHmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKVSCZP wHKsobX/goLe+LiWkK9JMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCISZ1Xihzbl/OxUtWfoOfVnH6nf/vxb2JqLB04GuG+vUHSxo2oj9k/ 0N72MRbYkbPRvnwn19mnMpdZDBdpxpfVXCU1RIxbW+qztXTL5WED7ZVk/En91eJw X1R7y9uVlTyCmL4RGENrVgdzuPO6t/3My8lLzNczQUXCYr73dzVSpjWfZNw2KN3K K5mfMAfhCG8poWn8nQ2S136TT9xSndwz3I1zRCiNEdcCOQP3LycGXD8CitgnktYi iWspgUoPA2wLhTK4sML1E5XnkgMqiCY51lzyVALvyRetTIQZ/bCBBTWbLysxUuwr UsHIUME2O2L8yAQKXb1zL7Cv9+KsjaoB -----END CERTIFICATE-----Generated at Thu Oct 23 11:21:14 2025 by rpki-client