$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft File: rHzRY2nXDaZnWZ2jaOICQknLAvw.mft (raw, json) Hash identifier: NjJMmyYYjsMulVVUcE7ggxq6Yjg3moOJpkGT3BFhBbA= Subject key identifier: 01:B1:93:92:3F:A2:25:92:12:F6:57:72:98:17:3B:C6:30:D9:D1:C6 Authority key identifier: AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC Certificate issuer: /CN=A91FB4F7/serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft Manifest number: 15 Signing time: Fri 17 Oct 2025 11:41:05 +0000 Manifest this update: Fri 17 Oct 2025 11:41:05 +0000 Manifest next update: Fri 24 Oct 2025 11:41:05 +0000 Files and hashes: 1: rHzRY2nXDaZnWZ2jaOICQknLAvw.crl (hash: +1obHXTuqTcE4IJVEEIdzirCH+6uUBF/AOuHDgpirec=) 2: 53AEC77E8C7511F0BEEC137FC4F9AE02.roa (hash: bltQP8R8HZQyv1HSKxR7BSQwCkOH7hsa3qOC3GHr4Dg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB4F7, serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Validity Not Before: Oct 17 11:41:05 2025 GMT Not After : Oct 24 11:41:05 2025 GMT Subject: CN=68f22b51-e5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:9a:33:cc:3c:c9:42:e0:03:ec:75:00:bc: 3f:24:06:b4:93:0c:2e:65:06:5a:11:e5:23:e2:a2: 67:43:76:7b:3a:b7:7d:4f:88:40:f2:35:e4:47:31: 34:ef:16:f7:38:d6:e6:3a:74:04:9f:e5:f1:68:93: 81:91:b4:67:d9:13:33:1f:0d:d7:9b:26:7b:a3:3f: 72:4e:af:91:38:c1:f2:98:2f:40:04:ec:a1:ec:2f: 3b:a5:59:f9:03:0a:e4:b6:f2:e4:47:9a:ce:55:78: 81:91:f7:08:d5:10:72:6e:2f:d8:ad:a5:08:1d:c8: ba:58:6a:6d:f6:c0:50:45:04:bc:0a:4d:6a:c7:82: 1b:70:b8:13:14:07:0b:34:1b:0c:32:37:9a:51:46: 22:05:89:d1:31:76:c4:70:fd:af:02:c5:de:b3:ca: 35:ba:a5:52:1a:bf:d3:92:2e:ed:94:8b:89:b1:10: e9:64:e6:f6:24:4a:14:23:32:c4:0d:c2:fc:85:20: a9:58:37:49:be:ae:ba:00:1e:1b:71:89:56:a9:50: d5:ad:c1:7a:e8:e4:3a:43:16:89:f7:e6:12:44:a2: 6e:db:a2:6e:4f:2b:b2:7d:e1:47:79:9a:0e:de:54: b8:b9:cc:ba:0e:68:88:71:3d:35:a8:eb:a5:34:84: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B1:93:92:3F:A2:25:92:12:F6:57:72:98:17:3B:C6:30:D9:D1:C6 X509v3 Authority Key Identifier: keyid:AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9e:dc:3c:39:3c:63:79:bb:91:3c:14:c0:eb:1d:61:6b:bf: 49:82:90:1b:80:71:68:42:69:71:4e:40:ed:73:aa:8f:8f:9c: 21:19:dc:00:1a:3a:9d:f6:88:89:05:ec:f0:06:43:4a:a6:b9: 40:f1:e7:eb:e2:24:d5:28:6e:8d:b3:3e:be:f4:39:62:bb:05: d3:a5:b0:65:31:85:f0:97:ad:25:1f:65:12:b1:63:04:57:c5: 53:71:0b:ff:e2:8a:4b:f9:1b:c5:b6:88:ca:51:96:bc:b4:b7: 54:d9:a8:62:15:94:15:bf:fd:7b:e9:ac:82:cc:b6:38:c8:b1: 83:40:8d:14:c7:ba:1b:d5:51:f9:ef:3b:04:3a:e4:de:1d:f1: f0:9d:1c:a7:99:04:0e:59:c5:6c:b9:c6:e7:3d:b3:23:e0:bd: 6f:5d:d8:c4:c7:3c:94:28:c4:e7:fe:0a:21:1c:94:de:4d:be: cc:30:1f:50:f3:5f:08:86:3f:68:f0:21:9e:3e:9c:fe:18:67: fd:50:9d:80:b9:b1:28:dc:2f:09:ae:1c:d2:51:8a:9d:f2:cc: 9c:2c:67:1f:49:ff:89:d7:55:77:76:d3:c3:63:bd:ed:b4:b8: 65:68:e0:0d:4a:8b:4d:e1:de:99:84:e5:ec:c8:3b:51:01:0f: b6:9e:d2:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjRGNzExMC8GA1UEBRMoQUM3Q0QxNjM2OUQ3MERBNjY3NTk5REEzNjhFMjAyNDI0 OUNCMDJGQzAeFw0yNTEwMTcxMTQxMDVaFw0yNTEwMjQxMTQxMDVaMBgxFjAUBgNV BAMTDTY4ZjIyYjUxLWU1YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWn5ozzDzJQuAD7HUAvD8kBrSTDC5lBloR5SPiomdDdns6t31PiEDyNeRHMTTv Fvc41uY6dASf5fFok4GRtGfZEzMfDdebJnujP3JOr5E4wfKYL0AE7KHsLzulWfkD CuS28uRHms5VeIGR9wjVEHJuL9itpQgdyLpYam32wFBFBLwKTWrHghtwuBMUBws0 GwwyN5pRRiIFidExdsRw/a8Cxd6zyjW6pVIav9OSLu2Ui4mxEOlk5vYkShQjMsQN wvyFIKlYN0m+rroAHhtxiVapUNWtwXro5DpDFon35hJEom7bom5PK7J94Ud5mg7e VLi5zLoOaIhxPTWo66U0hLQLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAbGTkj+i JZIS9ldymBc7xjDZ0cYwHwYDVR0jBBgwFoAUrHzRY2nXDaZnWZ2jaOICQknLAvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNEY3LzEyQkFCODk2OEM2 RjExRjBCQzAzQTgyOEM0RjlBRTAyL3JIelJZMm5YRGFabldaMmphT0lDUWtuTEF2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckh6UlkyblhEYVpuV1oyamFPSUNRa25MQXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NEY3LzEyQkFCODk2OEM2RjExRjBCQzAzQTgyOEM0RjlBRTAyL3JIelJZMm5YRGFa bldaMmphT0lDUWtuTEF2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG2e3Dw5PGN5u5E8FMDrHWFrv0mCkBuAcWhCaXFOQO1zqo+PnCEZ3AAa Op32iIkF7PAGQ0qmuUDx5+viJNUobo2zPr70OWK7BdOlsGUxhfCXrSUfZRKxYwRX xVNxC//iikv5G8W2iMpRlry0t1TZqGIVlBW//XvprILMtjjIsYNAjRTHuhvVUfnv OwQ65N4d8fCdHKeZBA5ZxWy5xuc9syPgvW9d2MTHPJQoxOf+CiEclN5NvswwH1Dz XwiGP2jwIZ4+nP4YZ/1QnYC5sSjcLwmuHNJRip3yzJwsZx9J/4nXVXd208Njve20 uGVo4A1Ki03h3pmE5ezIO1EBD7ae0ls= -----END CERTIFICATE-----Generated at Sat Oct 18 17:57:53 2025 by rpki-client