$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: CDCKxPRL3RsQnlQ9Sapi5eO+JchTEQ8vbHSV41NXgaE= Subject key identifier: BA:7E:E7:25:DB:8A:43:A5:CE:38:41:79:E9:B3:68:0D:05:8E:D6:63 Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 067E Signing time: Sun 26 Oct 2025 23:24:06 +0000 Manifest this update: Sun 26 Oct 2025 23:24:06 +0000 Manifest next update: Sun 02 Nov 2025 23:24:06 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: kaDH+SAl4JxWVsZZuJWxV1spFiYK3TAUgFsrqZaZyBg=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 23:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Oct 26 23:24:06 2025 GMT Not After : Nov 2 23:24:06 2025 GMT Subject: CN=68fead96-cffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:06:3b:ce:6e:f2:10:29:b0:a8:3c:ad:7a: 17:52:5f:ba:e1:4f:d8:01:05:cf:04:f3:9b:66:72: 2e:29:31:4c:70:d8:3e:d5:7e:de:44:b2:14:1c:ec: 26:90:fa:01:eb:25:5e:c3:72:a3:4b:dd:76:c4:a4: 85:70:24:d5:11:e6:9c:34:08:b1:84:35:da:84:7e: bc:35:03:e7:bf:6e:2b:d1:5d:3c:6c:6f:75:c3:0c: 1e:13:4c:f9:49:22:61:38:f3:bf:b9:5d:42:b2:ab: 29:b3:e8:d5:c9:d6:15:64:bd:e9:e5:90:6d:83:45: 47:d4:fa:90:28:42:46:bd:29:ee:9b:9a:59:c1:c8: c7:fe:0c:65:60:85:ec:13:9a:5c:22:39:c1:3a:be: fe:5f:6d:77:f1:0a:2f:38:f1:c3:2b:b2:ab:1b:a5: 24:f6:32:4a:db:de:54:84:b2:3a:24:b4:24:4d:dc: ed:42:eb:cb:00:2c:7e:26:63:09:e2:3c:27:92:ba: e7:16:aa:30:2b:ed:19:c5:77:6a:78:02:05:54:65: 23:b0:4e:22:d7:ff:34:43:34:ba:68:48:af:6c:d7: a0:2c:9f:cd:25:16:2d:67:c7:16:1c:59:0f:b3:04: a3:5c:dd:15:0b:19:63:e3:e6:a7:bb:1c:a9:d0:8c: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7E:E7:25:DB:8A:43:A5:CE:38:41:79:E9:B3:68:0D:05:8E:D6:63 X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c4:d9:a7:ac:41:3a:90:b8:79:73:d8:7b:39:8c:6c:c2:c8: af:7a:98:53:d5:40:c4:dd:e4:8e:ab:0c:bc:2a:4c:b2:9e:d2: 9b:30:47:44:a9:d4:58:45:84:90:1c:ac:3e:40:ba:ff:9a:59: c0:db:cc:6d:49:0c:92:87:1f:35:7a:5b:24:9d:b2:a5:00:ea: 75:9e:4c:45:75:ab:55:61:e7:b6:ec:23:bf:d2:7f:67:e2:48: fb:46:fb:a8:bb:69:b4:40:f2:e3:9e:71:98:f9:9a:f6:b5:a2: 3c:f3:37:c3:72:34:c2:b7:d2:7c:4e:20:c2:15:cd:03:47:07: 07:0b:92:79:6c:a1:5e:17:48:b9:1c:06:a2:56:be:c0:f7:fd: 03:51:e1:37:51:84:34:03:61:ba:9c:62:bd:6c:4b:73:a1:9c: 70:cb:15:a7:28:2e:4b:82:37:33:85:57:64:9e:38:c3:7d:21: 0a:86:f2:a8:40:8c:2d:90:10:4a:1b:ae:5b:f2:c3:01:b5:10: aa:0f:56:2c:e0:ed:4c:c8:dd:57:f6:37:9b:13:47:18:2b:6e: 2a:43:66:54:08:1d:9a:68:00:3a:83:38:a3:e5:64:aa:52:53: 63:e4:14:13:5e:d8:26:f5:a1:18:39:51:c3:ab:eb:f1:34:5b: 39:e7:44:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUxMDI2MjMyNDA2WhcNMjUxMTAyMjMyNDA2WjAYMRYwFAYD VQQDEw02OGZlYWQ5Ni1jZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnggGO85u8hApsKg8rXoXUl+64U/YAQXPBPObZnIuKTFMcNg+1X7eRLIUHOwm kPoB6yVew3KjS912xKSFcCTVEeacNAixhDXahH68NQPnv24r0V08bG91wwweE0z5 SSJhOPO/uV1Csqsps+jVydYVZL3p5ZBtg0VH1PqQKEJGvSnum5pZwcjH/gxlYIXs E5pcIjnBOr7+X2138QovOPHDK7KrG6Uk9jJK295UhLI6JLQkTdztQuvLACx+JmMJ 4jwnkrrnFqowK+0ZxXdqeAIFVGUjsE4i1/80QzS6aEivbNegLJ/NJRYtZ8cWHFkP swSjXN0VCxlj4+anuxyp0IyXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp+5yXb ikOlzjhBeemzaA0FjtZjMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+xNmnrEE6kLh5c9h7OYxswsivephT1UDE3eSOqwy8KkyyntKbMEdE qdRYRYSQHKw+QLr/mlnA28xtSQyShx81elsknbKlAOp1nkxFdatVYee27CO/0n9n 4kj7Rvuou2m0QPLjnnGY+Zr2taI88zfDcjTCt9J8TiDCFc0DRwcHC5J5bKFeF0i5 HAaiVr7A9/0DUeE3UYQ0A2G6nGK9bEtzoZxwyxWnKC5LgjczhVdknjjDfSEKhvKo QIwtkBBKG65b8sMBtRCqD1Ys4O1MyN1X9jebE0cYK24qQ2ZUCB2aaAA6gzij5WSq UlNj5BQTXtgm9aEYOVHDq+vxNFs550R+ -----END CERTIFICATE-----Generated at Tue Oct 28 11:10:56 2025 by rpki-client