$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: mYeuWrXYAT3t3XfutJ+bpKyOyQHTm1Q01giQ0Km+jm8= Subject key identifier: B3:A7:C2:0A:75:F4:68:1D:38:8A:2C:6D:44:40:B8:E6:39:09:02:BF Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 054E Signing time: Thu 23 Oct 2025 00:42:41 +0000 Manifest this update: Thu 23 Oct 2025 00:42:41 +0000 Manifest next update: Thu 30 Oct 2025 00:42:41 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: SqwLHMoWdjscwn1liLLgVlD9ozhEVG6wDrjSFOXTlTw=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Oct 23 00:42:41 2025 GMT Not After : Oct 30 00:42:41 2025 GMT Subject: CN=68f97a01-3096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:33:f0:4c:80:37:5a:18:c6:e7:c0:08:56: 0c:c2:56:c3:d6:5c:76:75:39:23:52:f8:f3:a2:69: cf:b3:d6:67:fd:97:f6:0f:41:b3:fb:be:e6:d9:41: ae:62:b4:67:ee:e0:0c:6d:41:48:03:f4:0c:d3:a8: a8:1e:d7:35:20:a1:42:2e:17:c4:32:53:fe:18:ed: 5c:fa:19:0c:03:0d:9a:71:67:51:57:39:bf:dd:2f: 30:7a:ec:aa:b5:c9:72:b7:a6:67:3d:b8:f9:30:85: ef:88:1d:84:57:9c:ba:af:1c:2c:35:ab:72:37:d1: 91:9b:fd:2c:c1:bf:80:6b:8b:bf:ab:55:ee:79:b9: 8f:7c:e6:00:d3:52:8e:1d:d3:8a:b0:24:49:4a:d2: 5e:6a:c1:bd:8a:55:32:8b:69:0a:92:c3:d7:7a:a9: 7a:a2:a8:1f:0d:f2:40:32:5a:da:4d:87:94:16:da: ee:df:5f:94:39:6e:7e:c1:7f:eb:fc:63:de:63:1b: 58:35:97:3f:df:17:fb:66:1a:bb:a3:30:db:f8:b1: 5b:31:c6:01:39:d5:e1:24:8b:93:92:01:17:0c:b6: 53:8c:08:a9:a2:6a:6e:ac:a4:6d:ea:a7:9b:15:49: 40:53:2f:38:51:a7:76:d9:78:4d:9a:ff:7d:95:28: c0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A7:C2:0A:75:F4:68:1D:38:8A:2C:6D:44:40:B8:E6:39:09:02:BF X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:3a:4c:d3:42:af:be:68:29:4f:6e:e1:ff:30:c5:58:d4:ff: 42:10:c6:8a:f4:3e:b5:7f:ab:93:db:25:e3:6a:9d:c0:0b:0e: 94:48:fb:93:bf:6e:9f:5b:84:39:be:91:80:f4:94:98:82:77: 3f:f1:38:dc:7d:87:5a:04:46:73:28:8b:a3:27:c2:0d:9a:f4: df:18:4e:41:a7:7f:0b:ed:22:5c:92:9b:19:c8:02:1f:7e:dd: a6:bb:32:c2:42:f6:96:2a:ae:3d:28:9f:61:0a:3c:47:f4:13: 6c:31:6a:0d:d0:0b:f6:f9:58:2d:67:41:d9:99:99:d3:ab:c0: 6d:ce:8a:00:44:c5:03:78:26:36:b6:f6:4e:68:ba:61:59:96: 2a:3e:c6:71:54:90:a3:3e:04:82:2f:d4:2f:a2:92:83:4d:1e: 57:88:b0:cd:d2:f9:1b:b4:95:c7:b9:b2:95:cc:83:d5:37:6f: c8:cf:ac:25:1c:5f:13:9c:76:54:7c:00:95:39:8d:fe:88:a5: 3e:02:8e:8e:55:95:7c:6a:ba:c5:c5:2c:15:a0:3f:40:15:32: 08:65:e5:af:70:29:e1:1b:16:bd:0e:20:e3:fd:f8:e5:be:28: ce:e6:0a:6a:1c:11:5d:6f:61:ce:a0:f5:ae:6b:a2:1e:16:30: c2:52:2b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUxMDIzMDA0MjQxWhcNMjUxMDMwMDA0MjQxWjAYMRYwFAYD VQQDEw02OGY5N2EwMS0zMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkkz8EyAN1oYxufACFYMwlbD1lx2dTkjUvjzomnPs9Zn/Zf2D0Gz+77m2UGu YrRn7uAMbUFIA/QM06ioHtc1IKFCLhfEMlP+GO1c+hkMAw2acWdRVzm/3S8weuyq tclyt6ZnPbj5MIXviB2EV5y6rxwsNatyN9GRm/0swb+Aa4u/q1XuebmPfOYA01KO HdOKsCRJStJeasG9ilUyi2kKksPXeql6oqgfDfJAMlraTYeUFtru31+UOW5+wX/r /GPeYxtYNZc/3xf7Zhq7ozDb+LFbMcYBOdXhJIuTkgEXDLZTjAipompurKRt6qeb FUlAUy84Uad22XhNmv99lSjAJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOnwgp1 9GgdOIosbURAuOY5CQK/MB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXOkzTQq++aClPbuH/MMVY1P9CEMaK9D61f6uT2yXjap3ACw6USPuT v26fW4Q5vpGA9JSYgnc/8TjcfYdaBEZzKIujJ8INmvTfGE5Bp38L7SJckpsZyAIf ft2muzLCQvaWKq49KJ9hCjxH9BNsMWoN0Av2+VgtZ0HZmZnTq8BtzooARMUDeCY2 tvZOaLphWZYqPsZxVJCjPgSCL9QvopKDTR5XiLDN0vkbtJXHubKVzIPVN2/Iz6wl HF8TnHZUfACVOY3+iKU+Ao6OVZV8arrFxSwVoD9AFTIIZeWvcCnhGxa9DiDj/fjl vijO5gpqHBFdb2HOoPWua6IeFjDCUitP -----END CERTIFICATE-----Generated at Thu Oct 23 16:12:18 2025 by rpki-client