$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json) Hash identifier: tQhDdBnjLnLfd+OpnaucZRdmtmTdw4Nl8HC4KRsEA9U= Subject key identifier: 6C:AE:58:3B:95:60:19:42:34:E6:BF:4E:AD:64:61:8B:50:68:9C:B7 Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft Manifest number: 40 Signing time: Mon 27 Oct 2025 09:57:59 +0000 Manifest this update: Mon 27 Oct 2025 09:57:58 +0000 Manifest next update: Mon 03 Nov 2025 09:57:58 +0000 Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: h8sryPxdz52Sm8X3Lqh2lVrFu82x4RcUG+M8eY/R0qc=) 2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: kbwAloXsrTWCITEmD+odpUzfYSBQf6qqCRC37VKW0HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 09:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Validity Not Before: Oct 27 09:57:58 2025 GMT Not After : Nov 3 09:57:58 2025 GMT Subject: CN=68ff4226-9486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:bf:42:49:18:c7:cf:42:49:ff:71:d7:38: 4d:04:1f:cd:5c:91:a2:63:4b:d4:6a:a3:50:eb:66: f0:e3:e5:be:ff:ce:dc:c1:a5:08:75:72:7f:95:5a: 23:66:d9:84:87:14:50:92:e5:c0:85:17:34:33:25: 15:45:6d:d2:3f:71:c0:76:a0:64:cd:11:03:ee:e5: 10:58:a6:1f:b5:6b:66:81:d7:33:00:42:b8:d1:40: a1:99:90:de:24:91:bb:e2:25:9e:2e:a8:95:7c:a0: d3:85:2f:78:05:aa:ba:f5:f4:83:93:6d:53:c6:8b: fa:26:82:2d:58:3b:69:93:21:9e:9d:0d:77:b8:f0: 91:ea:67:d4:a6:e5:69:11:96:eb:4f:bd:26:2e:54: 25:69:69:d7:f2:4c:13:c7:ea:57:73:b5:4e:39:09: 4b:2b:dc:33:d8:d7:d4:e3:ee:26:7f:86:62:9d:21: 95:ac:4e:5d:ca:9b:af:f7:bd:71:40:46:e9:21:e0: f5:b1:2a:fe:86:47:b8:10:c4:4d:47:dd:49:18:36: 0e:f8:30:0c:c5:54:0f:1d:68:1d:11:db:f1:03:04: ee:b6:04:96:89:c8:58:da:f8:59:5d:0a:6d:c1:52: 43:5e:8b:24:cc:53:26:5f:68:61:c3:31:6d:2b:c3: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AE:58:3B:95:60:19:42:34:E6:BF:4E:AD:64:61:8B:50:68:9C:B7 X509v3 Authority Key Identifier: keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9c:3d:2c:3f:1f:24:a9:dd:15:c0:46:0a:32:19:b9:7a:4a: 39:23:41:07:bf:bc:f6:1f:6c:c0:0d:1b:b9:07:a9:b9:27:56: 28:ec:39:0b:74:6e:c5:d0:aa:ad:48:53:d1:67:a5:e9:81:bb: 2b:11:8a:b9:20:33:c2:bb:70:3a:0e:e0:2a:02:dd:a7:a3:60: ea:df:d8:b1:70:65:b0:70:23:6d:64:e8:fb:06:d2:b1:ca:9e: 2d:66:a4:10:74:7f:ec:20:96:a3:a6:9b:b6:97:93:0b:0d:41: 89:d3:e3:b8:60:7a:89:61:41:aa:c4:c4:de:ff:7b:04:5f:d3: 36:ef:4d:4b:40:f3:8c:e8:f8:d6:25:02:7a:c4:fb:28:5c:58: aa:87:b9:72:32:61:c2:1f:33:87:99:21:82:af:68:5b:0c:2d: 50:2c:9b:f1:e9:af:51:03:55:2c:02:7a:c0:f5:4e:13:79:c2: 21:fb:e5:ab:0d:d6:bf:b8:e0:8d:f3:9c:91:4c:33:14:44:bc: 7c:e3:57:05:d4:c9:6e:c2:e5:dd:11:65:2c:c6:51:82:d2:32: 02:70:5c:92:94:29:db:6f:3e:ad:08:60:99:16:31:97:b1:48: 18:b9:64:9e:73:53:8a:95:05:4d:cc:32:ca:03:40:e4:1d:0b: e8:29:7c:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjZFRjExMC8GA1UEBRMoOUEwMjNCODBBQkNGNEU2Nzk3RDM4OEMwREU4MTYwQTE2 RUIxNURGRTAeFw0yNTEwMjcwOTU3NThaFw0yNTExMDMwOTU3NThaMBgxFjAUBgNV BAMTDTY4ZmY0MjI2LTk0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtq79CSRjHz0JJ/3HXOE0EH81ckaJjS9Rqo1DrZvDj5b7/ztzBpQh1cn+VWiNm 2YSHFFCS5cCFFzQzJRVFbdI/ccB2oGTNEQPu5RBYph+1a2aB1zMAQrjRQKGZkN4k kbviJZ4uqJV8oNOFL3gFqrr19IOTbVPGi/omgi1YO2mTIZ6dDXe48JHqZ9Sm5WkR lutPvSYuVCVpadfyTBPH6ldztU45CUsr3DPY19Tj7iZ/hmKdIZWsTl3Km6/3vXFA Rukh4PWxKv6GR7gQxE1H3UkYNg74MAzFVA8daB0R2/EDBO62BJaJyFja+FldCm3B UkNeiyTMUyZfaGHDMW0rw8VpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbK5YO5Vg GUI05r9OrWRhi1BonLcwHwYDVR0jBBgwFoAUmgI7gKvPTmeX04jA3oFgoW6xXf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNkVGL0FDQkY2RjJBNTc0 MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1lWDA0akEzb0Znb1c2eFhm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWdJN2dLdlBUbWVYMDRqQTNvRmdvVzZ4WGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NkVGL0FDQkY2RjJBNTc0MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1l WDA0akEzb0Znb1c2eFhmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH+cPSw/HySp3RXARgoyGbl6SjkjQQe/vPYfbMANG7kHqbknVijsOQt0 bsXQqq1IU9FnpemBuysRirkgM8K7cDoO4CoC3aejYOrf2LFwZbBwI21k6PsG0rHK ni1mpBB0f+wglqOmm7aXkwsNQYnT47hgeolhQarExN7/ewRf0zbvTUtA84zo+NYl AnrE+yhcWKqHuXIyYcIfM4eZIYKvaFsMLVAsm/Hpr1EDVSwCesD1ThN5wiH75asN 1r+44I3znJFMMxREvHzjVwXUyW7C5d0RZSzGUYLSMgJwXJKUKdtvPq0IYJkWMZex SBi5ZJ5zU4qVBU3MMsoDQOQdC+gpfIQ= -----END CERTIFICATE-----Generated at Tue Oct 28 20:32:09 2025 by rpki-client