$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: u+w5ewVe0/NJcC6WdhQQaKq6G9Zp/dC4+I72bCogcec= Subject key identifier: 6B:CC:13:D2:3B:2B:B5:50:F1:26:8D:82:5A:D1:B1:51:6C:35:D1:39 Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1DED Signing time: Wed 22 Oct 2025 16:20:47 +0000 Manifest this update: Wed 22 Oct 2025 16:20:47 +0000 Manifest next update: Wed 29 Oct 2025 16:20:47 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: fPboLvMm6WGIZj+twnDK+2Kuuy5ZC78npdfQCN6hgeo=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: FW9NYXvHGiXVfFykPHyKhdOjK9fS+NAvHhqmtmC3mxY=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7795 (0x1e73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Oct 22 16:20:47 2025 GMT Not After : Oct 29 16:20:47 2025 GMT Subject: CN=68f9045f-c9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:81:e3:31:73:da:f0:4d:25:ca:e1:d7:30: 09:2c:d8:84:9e:8e:d7:55:11:d9:d0:41:77:85:a0: 07:9d:47:80:a3:8d:f2:40:f7:e6:91:46:73:77:04: 81:44:63:a7:57:ef:f5:f1:22:9c:10:74:01:42:79: 37:9a:cc:87:b1:ee:83:1e:75:2a:63:bd:4b:c0:97: a6:26:bb:d2:22:fb:9d:60:71:10:89:73:90:a4:c5: cb:d4:2d:1b:fa:f8:f2:09:62:b0:66:7c:ad:1b:64: a4:c9:7c:c5:6e:ff:b3:0e:4e:f0:74:3c:17:d9:e4: 90:ec:e7:c3:6b:a6:64:46:6d:1b:f3:f3:92:dc:79: ef:27:02:df:5d:40:4d:eb:37:d6:0f:ec:ed:72:c2: d4:95:16:d2:0a:0e:00:dc:b5:3c:8a:4c:3a:05:1d: 92:ca:04:3e:47:ef:8d:1e:dd:d1:60:71:ef:6b:19: 06:a3:d8:54:50:36:c1:36:bd:a1:0d:56:92:0f:56: 97:be:4d:30:5c:1e:8f:17:13:d3:0b:bc:bc:80:35: 26:f6:f5:b5:6a:b0:79:b3:d0:3e:82:bc:f5:1d:d9: 6f:cb:19:88:8d:f7:b1:36:28:ad:cb:ae:d0:1b:95: 35:4b:1d:26:a8:f3:c2:2d:15:c1:5e:a1:89:51:64: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CC:13:D2:3B:2B:B5:50:F1:26:8D:82:5A:D1:B1:51:6C:35:D1:39 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d0:ac:b9:6b:16:03:59:d7:68:74:91:47:35:e2:29:db:43: a6:fa:12:5e:4c:32:30:25:8f:8c:2f:17:7d:e9:ff:bb:f3:cb: e0:05:f1:b9:9f:3b:8d:95:41:52:32:7e:a8:a5:5e:54:8b:fc: db:e9:f2:a4:29:95:f4:48:0d:dd:d3:23:82:c1:a8:a8:9a:02: f9:88:1f:c8:e0:5b:4a:12:83:bf:a6:86:e9:98:f2:92:43:aa: 42:18:9a:33:01:ca:fc:2a:53:0c:34:17:67:63:b2:8a:50:51: 49:ed:b0:0e:62:b1:4b:4f:10:63:77:d2:b3:99:df:c9:f8:79: f3:bc:50:2f:53:e6:72:6f:d8:10:6b:8c:ef:88:e8:f3:62:ab: 9f:f8:19:03:2e:ed:17:6a:68:75:ea:56:81:19:f9:ae:ed:e0: 14:8a:37:d7:68:85:17:e4:9f:20:e4:b8:1d:94:6e:91:c2:a6: 0d:b2:e7:46:ad:bb:bd:a9:30:43:a3:96:a5:93:d4:e5:e6:35: d4:ad:28:69:d9:01:2d:cc:8e:11:c1:1f:1c:58:4d:43:36:d5: 70:3f:27:c9:c0:11:11:36:99:0c:2a:47:0b:fd:c5:ad:eb:83: d1:a9:a5:7a:af:81:6c:79:fd:9d:ca:bf:03:6a:fc:36:3e:32: d9:f5:68:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUxMDIyMTYyMDQ3WhcNMjUxMDI5MTYyMDQ3WjAYMRYwFAYD VQQDEw02OGY5MDQ1Zi1jOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UCB4zFz2vBNJcrh1zAJLNiEno7XVRHZ0EF3haAHnUeAo43yQPfmkUZzdwSB RGOnV+/18SKcEHQBQnk3msyHse6DHnUqY71LwJemJrvSIvudYHEQiXOQpMXL1C0b +vjyCWKwZnytG2SkyXzFbv+zDk7wdDwX2eSQ7OfDa6ZkRm0b8/OS3HnvJwLfXUBN 6zfWD+ztcsLUlRbSCg4A3LU8ikw6BR2SygQ+R++NHt3RYHHvaxkGo9hUUDbBNr2h DVaSD1aXvk0wXB6PFxPTC7y8gDUm9vW1arB5s9A+grz1HdlvyxmIjfexNiity67Q G5U1Sx0mqPPCLRXBXqGJUWSgewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvME9I7 K7VQ8SaNglrRsVFsNdE5MB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW0Ky5axYDWddodJFHNeIp20Om+hJeTDIwJY+MLxd96f+788vgBfG5 nzuNlUFSMn6opV5Ui/zb6fKkKZX0SA3d0yOCwaiomgL5iB/I4FtKEoO/pobpmPKS Q6pCGJozAcr8KlMMNBdnY7KKUFFJ7bAOYrFLTxBjd9Kzmd/J+HnzvFAvU+Zyb9gQ a4zviOjzYquf+BkDLu0Xamh16laBGfmu7eAUijfXaIUX5J8g5LgdlG6RwqYNsudG rbu9qTBDo5alk9Tl5jXUrShp2QEtzI4RwR8cWE1DNtVwPyfJwBERNpkMKkcL/cWt 64PRqaV6r4Fsef2dyr8Davw2PjLZ9Wji -----END CERTIFICATE-----Generated at Thu Oct 23 05:55:53 2025 by rpki-client