$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: /uxDG/YaB2ZuFasHGUEPg8sqF6q7z1bSq0H5at4OTI0= Subject key identifier: 22:2A:F4:33:44:BB:8F:A8:89:7B:8B:2D:A5:EA:C6:CF:01:22:A1:E4 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 036E Signing time: Sun 19 Oct 2025 02:58:13 +0000 Manifest this update: Sun 19 Oct 2025 02:58:12 +0000 Manifest next update: Sun 26 Oct 2025 02:58:12 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: x7WUovP4HvS4KSObTSLU2B63HelkQCiT7utC30/265g=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: vXzSIXZBaXcIq7HGAv3/KzQ/zFxGEtVsxyV8BgD55Xg=) 3: EA2C5116450411F09738105FC4F9AE02.roa (hash: mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=) 4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0=) 5: EB1C709C450411F09738105FC4F9AE02.roa (hash: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=) 6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: b5B3lzxVsrZlixjiSWlcyQY2EuLiKocCaABGFArbDwM=) 7: EAAF7884450411F09738105FC4F9AE02.roa (hash: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Oct 19 02:58:12 2025 GMT Not After : Oct 26 02:58:12 2025 GMT Subject: CN=68f453c5-59b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:46:e1:07:60:51:60:98:3d:82:d6:92:27: 73:5e:1e:fb:d5:cd:bf:5a:cb:ad:83:22:8d:b8:69: dd:5e:f9:58:e6:26:92:2a:c0:f9:91:9a:58:17:2d: b7:ba:07:81:b6:29:6b:da:59:e7:a9:7f:2f:a1:65: cb:41:51:b2:5b:91:fe:ec:4b:66:50:71:b6:08:e9: 95:44:f8:65:e7:16:ea:4c:b0:b8:32:a3:11:5f:fc: c2:01:d1:c2:dc:e8:2e:ed:81:7c:ad:59:45:6e:9d: 60:75:6d:48:d3:e3:26:77:1c:2f:22:2d:61:2f:c5: 5e:0f:6b:f6:16:0e:93:7f:87:2d:df:a9:5a:f7:18: 64:89:b3:f6:3d:ea:64:64:78:1a:5d:53:4f:ff:29: b8:bc:b1:2e:dc:1a:7e:c2:ff:51:ac:17:36:d0:d8: ad:b8:41:61:d7:83:a5:84:ac:1b:38:8e:cb:d0:bd: 9c:81:a4:df:57:56:39:42:42:0c:1d:f0:4c:4d:fb: 28:4a:27:ef:13:5b:87:59:fb:0c:83:1e:90:42:e5: 10:3e:85:32:4e:7a:63:c4:c5:57:94:30:e8:56:f9: b8:ed:fa:f4:a0:d4:31:f4:99:82:c1:33:43:b3:3f: 90:14:73:f5:e5:89:da:61:78:74:83:44:55:14:ee: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2A:F4:33:44:BB:8F:A8:89:7B:8B:2D:A5:EA:C6:CF:01:22:A1:E4 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:cc:27:34:a4:6e:64:f4:e6:74:f0:f4:96:60:ec:c5:c8:c2: c9:c2:f2:b7:5e:7b:a4:8c:fa:4a:4d:c4:75:cb:de:d7:ef:91: 63:fd:2c:0c:9f:fd:f8:1d:b3:bc:ac:aa:a7:96:39:cc:8d:3f: 96:0a:24:17:80:60:a1:73:2d:7d:30:59:87:82:70:e6:45:66: b9:4a:05:e0:32:a3:bb:5e:ad:76:2c:6f:1b:95:f7:36:9d:87: c3:52:63:8f:1d:d5:aa:e5:5b:b7:bf:76:8b:94:93:a8:0d:e2: 75:ff:47:e1:8e:56:c3:a5:d2:a3:ed:80:33:18:a4:3e:09:db: 8f:aa:51:80:77:ea:3a:9f:1c:a3:df:59:48:4e:0d:81:96:a9: 54:e1:2c:73:db:db:c8:6e:56:ca:b8:1d:fd:a9:d4:25:f3:4e: 22:31:0d:c3:1d:a3:ec:f0:12:75:1c:e1:14:08:3f:fe:fe:b4: 31:38:de:7b:d1:29:74:57:54:53:48:17:4c:da:70:c9:df:5b: ff:54:64:15:19:a4:40:62:99:fc:9e:93:c2:be:51:4f:32:37: 9c:00:1c:eb:17:3c:61:bd:c9:40:1d:27:7a:cd:59:1f:26:3b: 88:3a:d1:cc:05:b4:05:61:78:1c:e5:8d:e2:35:a7:ba:81:15: b6:b0:8c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUxMDE5MDI1ODEyWhcNMjUxMDI2MDI1ODEyWjAYMRYwFAYD VQQDEw02OGY0NTNjNS01OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf5G4QdgUWCYPYLWkidzXh771c2/WsutgyKNuGndXvlY5iaSKsD5kZpYFy23 ugeBtilr2lnnqX8voWXLQVGyW5H+7EtmUHG2COmVRPhl5xbqTLC4MqMRX/zCAdHC 3Ogu7YF8rVlFbp1gdW1I0+MmdxwvIi1hL8VeD2v2Fg6Tf4ct36la9xhkibP2Pepk ZHgaXVNP/ym4vLEu3Bp+wv9RrBc20NituEFh14OlhKwbOI7L0L2cgaTfV1Y5QkIM HfBMTfsoSifvE1uHWfsMgx6QQuUQPoUyTnpjxMVXlDDoVvm47fr0oNQx9JmCwTND sz+QFHP15YnaYXh0g0RVFO4tmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIq9DNE u4+oiXuLLaXqxs8BIqHkMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkzCc0pG5k9OZ08PSWYOzFyMLJwvK3XnukjPpKTcR1y97X75Fj/SwM n/34HbO8rKqnljnMjT+WCiQXgGChcy19MFmHgnDmRWa5SgXgMqO7Xq12LG8blfc2 nYfDUmOPHdWq5Vu3v3aLlJOoDeJ1/0fhjlbDpdKj7YAzGKQ+CduPqlGAd+o6nxyj 31lITg2BlqlU4Sxz29vIblbKuB39qdQl804iMQ3DHaPs8BJ1HOEUCD/+/rQxON57 0Sl0V1RTSBdM2nDJ31v/VGQVGaRAYpn8npPCvlFPMjecABzrFzxhvclAHSd6zVkf JjuIOtHMBbQFYXgc5Y3iNae6gRW2sIyq -----END CERTIFICATE-----Generated at Sun Oct 19 19:07:02 2025 by rpki-client