$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: Ye2LLASsBeiWfK0e6IP6tybuZMmG8XRsYg4j9135fjE= Subject key identifier: 91:A1:90:61:E1:98:F4:C1:EE:00:A6:7C:52:F0:33:6B:6E:EC:ED:C5 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: C6 Signing time: Sat 25 Oct 2025 09:38:10 +0000 Manifest this update: Sat 25 Oct 2025 09:38:09 +0000 Manifest next update: Sat 01 Nov 2025 09:38:09 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: via4em3BqlsdoEEsSEqKK3nfOjReaHLSSuFx1vk3S0o=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Oct 25 09:38:09 2025 GMT Not After : Nov 1 09:38:09 2025 GMT Subject: CN=68fc9a81-7bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:17:2b:52:01:39:68:90:e6:bd:54:d2:cc: e4:47:c6:7e:b5:d0:65:f6:0d:a5:e4:6b:20:34:bd: 10:48:07:25:6a:15:0e:69:21:af:37:94:a9:b2:20: 76:6b:1e:35:0a:11:7a:62:3a:fe:0c:01:48:94:ba: cb:48:fa:81:7c:7e:6f:24:90:f8:d3:c2:b9:d5:57: 9f:c1:04:c4:fa:7f:03:05:3e:25:bb:67:3f:9e:66: 8d:d5:50:01:62:32:fe:c2:21:d8:59:20:ac:a0:35: 03:2d:81:59:65:07:4d:e0:21:41:8f:b8:b3:20:c4: cb:29:61:a6:28:26:cb:d0:95:00:14:44:8b:30:d8: eb:73:7f:85:90:c1:74:dc:cf:5f:ff:99:6b:31:f1: 06:96:59:02:4c:0a:ab:e8:c3:3d:43:3d:29:89:79: df:56:19:f5:5f:16:17:72:cb:08:dd:ec:ad:21:bc: 95:af:5b:8c:98:35:26:9e:f0:85:3e:99:3d:52:ae: 6f:9e:cf:30:bb:12:2b:d8:3c:81:2f:f8:89:1a:23: 9e:b0:97:69:7d:d6:40:fb:f8:17:50:45:28:a0:9d: 33:2c:74:c9:25:70:42:cd:63:d8:36:34:12:44:8c: 9e:9b:cf:6c:60:74:0b:0e:34:0f:3b:76:3f:19:21: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A1:90:61:E1:98:F4:C1:EE:00:A6:7C:52:F0:33:6B:6E:EC:ED:C5 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:27:a0:81:ad:4d:04:eb:0d:35:2c:7a:b8:92:b5:49:09:ff: f1:55:5d:39:82:bd:ff:d3:18:7f:a7:c6:10:ca:d5:9e:6e:a3: 1e:18:cf:6e:3d:c6:70:e9:ac:dd:8c:9b:32:c2:23:15:53:3c: 5c:c5:ae:66:70:aa:cb:86:0c:0f:49:c7:ab:d3:69:31:ca:b6: bc:60:17:e3:51:bb:81:43:47:27:c7:3d:ef:61:35:d3:d9:94: c1:b7:37:97:cf:22:ac:35:b2:5d:33:40:37:c3:b5:71:0b:5a: 27:9a:11:3b:fe:0c:03:a9:04:54:85:b0:fb:a9:98:a0:0e:38: d5:3e:4d:8c:e2:c3:c3:fd:18:7a:a3:94:6b:e9:50:b5:bd:ac: d5:5d:59:8e:11:12:93:e7:f2:08:7c:b8:2b:19:fc:60:a2:e0: b4:37:89:ba:2e:2d:72:bd:67:2a:cb:9f:2f:e5:31:b6:c9:d6: 3d:f0:c3:67:46:bd:38:c8:19:37:ee:11:9e:9b:92:0c:c3:42: 9f:50:87:25:47:3a:75:71:aa:5a:72:69:87:14:4c:f4:70:1c: 3c:ef:32:99:a0:dc:0d:08:fe:ef:0e:8d:8e:2f:13:b6:dc:ce: a3:45:5f:2b:9e:33:ae:05:8e:6a:22:26:8c:bf:3f:43:78:f8: 69:b9:dd:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUxMDI1MDkzODA5WhcNMjUxMTAxMDkzODA5WjAYMRYwFAYD VQQDEw02OGZjOWE4MS03YmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0MXK1IBOWiQ5r1U0szkR8Z+tdBl9g2l5GsgNL0QSAclahUOaSGvN5SpsiB2 ax41ChF6Yjr+DAFIlLrLSPqBfH5vJJD408K51VefwQTE+n8DBT4lu2c/nmaN1VAB YjL+wiHYWSCsoDUDLYFZZQdN4CFBj7izIMTLKWGmKCbL0JUAFESLMNjrc3+FkMF0 3M9f/5lrMfEGllkCTAqr6MM9Qz0piXnfVhn1XxYXcssI3eytIbyVr1uMmDUmnvCF Ppk9Uq5vns8wuxIr2DyBL/iJGiOesJdpfdZA+/gXUEUooJ0zLHTJJXBCzWPYNjQS RIyem89sYHQLDjQPO3Y/GSHv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGhkGHh mPTB7gCmfFLwM2tu7O3FMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUJ6CBrU0E6w01LHq4krVJCf/xVV05gr3/0xh/p8YQytWebqMeGM9u PcZw6azdjJsywiMVUzxcxa5mcKrLhgwPScer02kxyra8YBfjUbuBQ0cnxz3vYTXT 2ZTBtzeXzyKsNbJdM0A3w7VxC1onmhE7/gwDqQRUhbD7qZigDjjVPk2M4sPD/Rh6 o5Rr6VC1vazVXVmOERKT5/IIfLgrGfxgouC0N4m6Li1yvWcqy58v5TG2ydY98MNn Rr04yBk37hGem5IMw0KfUIclRzp1capacmmHFEz0cBw87zKZoNwNCP7vDo2OLxO2 3M6jRV8rnjOuBY5qIiaMvz9DePhpud3i -----END CERTIFICATE-----Generated at Sat Oct 25 17:26:56 2025 by rpki-client