$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: EDcBjjqqSOqnbqr36d7W4X+QOuoUmlUxIpQ7GEo9Nt0= Subject key identifier: D4:0F:50:BD:CA:D3:F7:C0:E1:19:0D:95:ED:3A:BE:63:73:36:C5:78 Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: DC Signing time: Thu 23 Oct 2025 07:31:58 +0000 Manifest this update: Thu 23 Oct 2025 07:31:58 +0000 Manifest next update: Thu 30 Oct 2025 07:31:57 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: YuZI7PC8AsTGFbT8Baw9FJLrkUA+GHgc6Wo7v/L/KpA=) 2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Oct 23 07:31:58 2025 GMT Not After : Oct 30 07:31:57 2025 GMT Subject: CN=68f9d9ee-efa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:dc:79:4e:e4:f8:a8:3b:f3:1c:ce:2d:d8: 6e:3e:de:6d:09:f3:27:73:86:77:8d:1d:fb:de:ad: b6:63:c8:af:7e:5e:6d:54:dd:68:b0:f6:1f:3c:e2: 1c:be:4c:22:64:70:34:92:c2:62:f7:8b:7a:b0:38: 6b:d9:74:d0:74:18:fc:7e:f6:ef:47:29:48:62:e7: 7e:91:35:9c:1a:48:d7:3a:80:c4:0d:96:e0:2b:12: 7e:18:47:83:0e:c2:bc:ed:0e:04:8e:42:2c:30:99: ce:b2:8d:6a:d1:4e:ab:00:1a:0e:52:c0:49:a9:97: 1d:03:4c:99:ab:b1:56:f6:24:0e:1b:11:b8:dd:bd: c3:26:21:d5:d2:7f:0a:fd:b5:86:d0:78:47:70:61: f9:23:f8:5a:bf:80:b8:98:83:6b:b8:c7:7b:a4:52: 51:7d:01:86:07:59:b8:b1:69:f4:c9:eb:0e:b2:33: 51:63:8c:93:86:3a:b4:c4:99:73:dd:4c:c3:ed:3b: 4b:d7:6d:3a:c5:8d:a5:dc:43:3e:26:e2:b6:47:84: 72:27:48:0f:c5:12:4c:d3:e7:d7:49:c2:2c:e2:0a: 27:c0:b4:de:2c:5d:f2:fa:67:23:55:15:6e:1f:03: cf:cb:f7:c4:03:ae:e8:8b:43:4c:0c:fe:85:aa:dd: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:50:BD:CA:D3:F7:C0:E1:19:0D:95:ED:3A:BE:63:73:36:C5:78 X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:3a:3a:04:71:30:99:02:bd:83:27:b8:d1:72:53:5a:ce:96: 7e:c5:e1:5b:e8:28:f3:83:ed:ea:50:cf:45:17:46:37:e9:21: 9e:1d:16:98:01:ca:c8:31:3d:a7:85:72:95:18:f2:d7:34:aa: e1:52:8e:51:6c:3a:5c:fe:15:ed:22:46:9a:cd:e1:29:11:cc: a6:47:79:93:af:78:11:88:03:07:e1:90:ac:2f:b1:74:e3:88: 11:f9:dc:4e:16:6c:f8:ee:c0:1b:af:9c:14:82:b0:64:32:ea: 96:f4:1a:4e:66:74:ad:38:19:68:d3:70:7d:b3:5a:99:96:ed: be:f6:0d:4d:0c:0b:7f:f8:f3:84:cd:64:85:f0:71:e1:cb:a4: a1:f8:e2:7a:b4:b1:55:bb:b2:0d:5c:0f:2a:8c:e0:ae:5b:0e: 4e:71:31:1e:d8:86:60:1e:9d:12:1a:78:51:12:57:5d:db:6d: c3:cb:af:37:81:52:d7:db:37:2c:67:e0:5a:0f:b6:f0:84:34: f2:97:a5:d2:ef:b4:a9:1b:30:07:4b:b7:e6:e4:6f:e2:d8:dd: b2:0e:a2:81:12:e1:32:b2:90:da:4d:a9:e6:8a:91:c0:ee:e4: b9:7a:6c:d6:d3:af:27:3d:41:aa:90:3d:f4:e8:75:26:e4:75: ff:23:83:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUxMDIzMDczMTU4WhcNMjUxMDMwMDczMTU3WjAYMRYwFAYD VQQDEw02OGY5ZDllZS1lZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRHceU7k+Kg78xzOLdhuPt5tCfMnc4Z3jR373q22Y8ivfl5tVN1osPYfPOIc vkwiZHA0ksJi94t6sDhr2XTQdBj8fvbvRylIYud+kTWcGkjXOoDEDZbgKxJ+GEeD DsK87Q4EjkIsMJnOso1q0U6rABoOUsBJqZcdA0yZq7FW9iQOGxG43b3DJiHV0n8K /bWG0HhHcGH5I/hav4C4mINruMd7pFJRfQGGB1m4sWn0yesOsjNRY4yThjq0xJlz 3UzD7TtL1206xY2l3EM+JuK2R4RyJ0gPxRJM0+fXScIs4gonwLTeLF3y+mcjVRVu HwPPy/fEA67oi0NMDP6Fqt2VFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQPUL3K 0/fA4RkNle06vmNzNsV4MB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGOjoEcTCZAr2DJ7jRclNazpZ+xeFb6Cjzg+3qUM9FF0Y36SGeHRaY AcrIMT2nhXKVGPLXNKrhUo5RbDpc/hXtIkaazeEpEcymR3mTr3gRiAMH4ZCsL7F0 44gR+dxOFmz47sAbr5wUgrBkMuqW9BpOZnStOBlo03B9s1qZlu2+9g1NDAt/+POE zWSF8HHhy6Sh+OJ6tLFVu7INXA8qjOCuWw5OcTEe2IZgHp0SGnhREldd223Dy683 gVLX2zcsZ+BaD7bwhDTyl6XS77SpGzAHS7fm5G/i2N2yDqKBEuEyspDaTanmipHA 7uS5emzW068nPUGqkD306HUm5HX/I4O6 -----END CERTIFICATE-----Generated at Thu Oct 23 10:12:50 2025 by rpki-client