$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json) Hash identifier: gjIIf1vGUZx526Tsz1+afZZeFS2z8QNJFezDnmPntE8= Subject key identifier: 66:5C:C8:D3:B7:28:82:6D:59:E8:AF:71:D7:DE:C6:09:8C:26:4F:26 Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft Manifest number: 01B0 Signing time: Mon 27 Oct 2025 05:04:06 +0000 Manifest this update: Mon 27 Oct 2025 05:04:05 +0000 Manifest next update: Mon 03 Nov 2025 05:04:05 +0000 Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: lJrZDnE7wO9TNcfwmoahx4zhjqa3Bb+TaFgKXhWPKLA=) 2: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: JgtSSjMUVF5aYkq/I11EUTsQN2v/Rr6UwtvaYKzNVvk=) 3: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: uENUjiP+2EB12uAPnRJ5SygdKhfwJZNgp1BeowbLRj4=) 4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: XBdp98NfSrH2eLdNGkQsz15bbs9O8Colh/0iTNrP6Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Oct 27 05:04:05 2025 GMT Not After : Nov 3 05:04:05 2025 GMT Subject: CN=68fefd46-27b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:85:8a:05:77:b2:f4:b7:87:0e:f1:68:d9: cd:fc:57:ea:b6:53:f9:7f:c8:c6:85:a0:65:fb:1c: f9:14:a4:72:69:28:9b:12:95:89:ce:74:59:88:46: cf:67:92:1f:e4:b0:82:ed:ce:16:d3:50:47:a6:ca: ee:7e:4a:d8:92:fe:06:7b:bb:8f:97:fe:80:f9:80: cf:bd:62:55:ff:a1:66:74:88:ed:8e:4e:1c:54:0d: 62:48:07:6c:71:cd:0f:ac:04:a6:65:d1:85:88:ba: 2c:2b:7f:8d:d1:08:b2:08:47:ff:30:94:ec:13:03: c8:72:d0:e3:57:4f:c3:62:a6:91:cd:28:f2:80:81: bb:5e:fc:80:01:33:7c:2f:14:70:2e:07:1f:7d:0b: 48:57:78:cc:a2:14:11:4f:7d:a2:0c:06:78:68:a3: 98:e0:25:ad:79:3b:c6:82:7f:93:54:50:21:43:e8: 36:ef:94:23:f8:bb:f7:88:86:02:92:88:e0:68:cf: eb:6b:33:df:db:35:55:43:e2:f8:7d:de:b2:03:5f: 00:fb:25:da:ee:3c:9c:77:91:3e:e2:82:46:12:8a: e8:30:9a:b5:e7:2a:08:b9:3d:4c:ea:4d:f6:80:36: ff:d5:eb:f2:83:8d:05:8f:aa:80:71:50:96:9f:65: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:C8:D3:B7:28:82:6D:59:E8:AF:71:D7:DE:C6:09:8C:26:4F:26 X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2a:3e:3c:9f:8f:34:42:9a:45:4e:af:a5:d4:9d:fa:a6:1a: 67:fc:ae:75:b9:81:61:a9:6c:65:b1:08:72:29:57:a8:88:90: fa:f9:33:8a:df:67:63:a8:1e:96:17:3b:0a:65:23:04:d5:ba: ae:5f:c1:94:3e:91:8f:e2:30:da:9a:0a:3a:db:c3:17:2e:cd: fd:05:d7:c3:2a:bc:26:2b:ce:a3:00:fa:68:2a:23:d2:2a:af: fa:cf:81:a1:0d:d2:1d:8e:32:e0:c5:7a:95:03:11:f0:9d:d8: 6f:7e:e9:f6:b0:0c:e9:d7:26:1b:11:67:02:ab:53:5c:97:8a: f7:11:41:85:d2:52:57:b0:15:dd:fb:ae:ac:1c:dc:16:ee:73: e4:d9:0a:cc:9e:9f:e3:77:2f:08:35:ec:7d:ba:b9:b3:d1:bc: 7a:c1:c6:ff:0e:66:2e:22:14:2a:41:7c:74:c4:0a:13:a5:d3: d4:ac:49:4c:20:68:c2:a8:1d:10:8e:76:7c:68:81:56:a7:23: 76:91:62:8a:08:5c:c2:fd:48:75:03:f3:af:ef:af:37:cd:76: 78:02:bf:b3:56:cf:39:6a:8d:a8:ae:da:5a:6d:cb:04:12:25: b3:74:6e:24:6e:d2:d2:0c:f2:6f:31:0e:c8:53:a9:8c:57:c0: f2:6d:16:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjUxMDI3MDUwNDA1WhcNMjUxMTAzMDUwNDA1WjAYMRYwFAYD VQQDEw02OGZlZmQ0Ni0yN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+iFigV3svS3hw7xaNnN/FfqtlP5f8jGhaBl+xz5FKRyaSibEpWJznRZiEbP Z5If5LCC7c4W01BHpsrufkrYkv4Ge7uPl/6A+YDPvWJV/6FmdIjtjk4cVA1iSAds cc0PrASmZdGFiLosK3+N0QiyCEf/MJTsEwPIctDjV0/DYqaRzSjygIG7XvyAATN8 LxRwLgcffQtIV3jMohQRT32iDAZ4aKOY4CWteTvGgn+TVFAhQ+g275Qj+Lv3iIYC kojgaM/razPf2zVVQ+L4fd6yA18A+yXa7jycd5E+4oJGEoroMJq15yoIuT1M6k32 gDb/1evyg40Fj6qAcVCWn2XQEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZcyNO3 KIJtWeivcdfexgmMJk8mMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5OS8wMjIxRDdDRTJGNjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1N ZWd1cGREQVZ0YkVoQk10NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBKj48n480QppFTq+l1J36phpn/K51uYFhqWxlsQhyKVeoiJD6+TOK 32djqB6WFzsKZSME1bquX8GUPpGP4jDamgo628MXLs39BdfDKrwmK86jAPpoKiPS Kq/6z4GhDdIdjjLgxXqVAxHwndhvfun2sAzp1yYbEWcCq1Ncl4r3EUGF0lJXsBXd +66sHNwW7nPk2QrMnp/jdy8INex9urmz0bx6wcb/DmYuIhQqQXx0xAoTpdPUrElM IGjCqB0QjnZ8aIFWpyN2kWKKCFzC/Uh1A/Ov7683zXZ4Ar+zVs85ao2ortpabcsE EiWzdG4kbtLSDPJvMQ7IU6mMV8DybRYx -----END CERTIFICATE-----Generated at Tue Oct 28 21:09:04 2025 by rpki-client