$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json) Hash identifier: RDxZZcrkfPmAZLbZozYU9AItvz6OM2hovDFANUM0ln8= Subject key identifier: 8F:A5:7C:E7:2A:B4:8A:71:CD:20:B6:0F:33:B2:ED:7F:3D:C1:68:30 Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft Manifest number: 60 Signing time: Thu 23 Oct 2025 09:20:02 +0000 Manifest this update: Thu 23 Oct 2025 09:20:01 +0000 Manifest next update: Thu 30 Oct 2025 09:20:01 +0000 Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: i1b8ZRNxBuFocwWMRhOdcyDwBcp/pJ8ZsASGVXm7TgY=) 2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: cj52P7EVA7EzNB+cRXY75TfIttWbZ7w7qirjXKEDn/Y=) 3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: UkjJv6j01kk67tAR7WvPOWkiQImQuY607Dwbp++ebI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Validity Not Before: Oct 23 09:20:01 2025 GMT Not After : Oct 30 09:20:01 2025 GMT Subject: CN=68f9f342-ef44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:2e:8a:c4:4a:fc:a2:78:98:f9:47:6d:81: e3:63:9f:82:5d:e4:d6:42:7f:76:64:93:6b:75:fe: c6:da:db:23:f6:da:47:cb:57:56:d9:f3:9f:c5:ad: 1a:34:e2:ee:55:b7:d1:cb:62:bb:f4:85:89:70:3f: e8:5b:55:03:d3:06:32:db:45:8b:2d:80:f1:12:92: 8e:8c:0a:b3:a2:b1:09:e4:7a:52:01:9c:27:52:fc: 7b:cd:b2:3c:df:16:9d:9b:fa:d0:e2:6d:df:f2:4e: c2:57:91:c6:92:45:84:44:76:ce:94:93:0e:f3:ec: 3d:51:f6:fd:02:9d:6b:4d:34:b2:d3:9c:0a:b7:66: 9f:fb:db:51:77:09:a0:1b:08:a1:0a:d7:40:8a:3c: 60:30:54:47:69:70:df:6a:4b:da:4c:21:ae:88:68: 8d:46:14:81:fd:4d:2e:88:28:d9:1d:df:1a:e2:03: 32:a7:b5:25:ea:21:3c:8d:e3:53:27:68:41:35:b6: c1:41:79:20:0b:80:15:43:06:17:f9:a8:eb:63:f4: 0b:01:f1:fb:58:8b:24:cd:aa:75:cf:ec:6a:43:a8: c7:ea:18:a9:97:6e:14:d1:09:e0:15:6c:d1:5f:8d: b6:f5:e9:e1:d4:57:d0:2f:cd:9d:8c:76:b8:15:f1: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A5:7C:E7:2A:B4:8A:71:CD:20:B6:0F:33:B2:ED:7F:3D:C1:68:30 X509v3 Authority Key Identifier: keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:94:28:8f:8e:2f:91:37:c3:a2:7c:0a:e3:19:b6:92:08:e2: 53:fd:57:3f:3b:14:cf:81:15:2d:38:e8:25:9f:18:3c:f3:d2: 3e:7e:71:b3:9d:c2:e3:0e:71:68:53:18:86:41:2b:89:3f:31: 81:a0:fa:d6:f6:2a:2a:3c:32:5e:0b:e0:a1:d3:01:1d:9c:87: 36:de:45:6e:3a:d9:8f:df:a3:5a:ec:42:95:59:22:17:e1:f6: 0c:f9:13:1e:ca:45:bd:62:f6:dd:6f:e9:96:74:1e:96:08:2d: f8:06:58:be:be:7c:31:ea:b6:a0:c9:3f:42:be:7b:34:21:17: 77:f9:ac:0a:a8:06:ed:36:30:0e:3f:51:9d:57:ae:5b:15:fb: a0:47:60:30:78:a4:a9:96:96:15:51:f6:b0:56:e0:cf:32:27: 71:17:50:7a:d7:64:80:af:e4:e1:0f:24:70:32:4d:27:72:cd: ee:fb:cb:d3:0d:a4:2a:55:15:21:62:3a:6f:61:af:51:7e:3f: a9:2c:6f:ee:d9:05:71:d5:1b:e9:63:a9:c2:2e:f8:9a:62:6c: ef:0d:eb:94:e9:64:2c:78:c9:c4:bc:fa:35:c1:d9:e9:9c:d7: 6f:27:7d:f3:c4:06:b8:68:75:03:2d:4c:5e:65:d5:00:fd:3f: b1:cc:68:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REUxMzExMC8GA1UEBRMoNDlGRDMzRDZGNTFBRDZBNDk4ODQ0NjlGQTM5RkVGMDQz MjMzNkY4MTAeFw0yNTEwMjMwOTIwMDFaFw0yNTEwMzAwOTIwMDFaMBgxFjAUBgNV BAMTDTY4ZjlmMzQyLWVmNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrhy6KxEr8oniY+UdtgeNjn4Jd5NZCf3Zkk2t1/sba2yP22kfLV1bZ85/FrRo0 4u5Vt9HLYrv0hYlwP+hbVQPTBjLbRYstgPESko6MCrOisQnkelIBnCdS/HvNsjzf Fp2b+tDibd/yTsJXkcaSRYREds6Ukw7z7D1R9v0CnWtNNLLTnAq3Zp/721F3CaAb CKEK10CKPGAwVEdpcN9qS9pMIa6IaI1GFIH9TS6IKNkd3xriAzKntSXqITyN41Mn aEE1tsFBeSALgBVDBhf5qOtj9AsB8ftYiyTNqnXP7GpDqMfqGKmXbhTRCeAVbNFf jbb16eHUV9AvzZ2MdrgV8QsZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj6V85yq0 inHNILYPM7Ltfz3BaDAwHwYDVR0jBBgwFoAUSf0z1vUa1qSYhEafo5/vBDIzb4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERTEzLzE1MUZFNDdFMkE1 NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2YwejF2VWExcVNZaEVhZm81X3ZCREl6YjRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RTEzLzE1MUZFNDdFMkE1NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFT WWhFYWZvNV92QkRJemI0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuUKI+OL5E3w6J8CuMZtpII4lP9Vz87FM+BFS046CWfGDzz0j5+cbOd wuMOcWhTGIZBK4k/MYGg+tb2Kio8Ml4L4KHTAR2chzbeRW462Y/fo1rsQpVZIhfh 9gz5Ex7KRb1i9t1v6ZZ0HpYILfgGWL6+fDHqtqDJP0K+ezQhF3f5rAqoBu02MA4/ UZ1XrlsV+6BHYDB4pKmWlhVR9rBW4M8yJ3EXUHrXZICv5OEPJHAyTSdyze77y9MN pCpVFSFiOm9hr1F+P6ksb+7ZBXHVG+ljqcIu+JpibO8N65TpZCx4ycS8+jXB2emc 128nffPEBrhodQMtTF5l1QD9P7HMaOk= -----END CERTIFICATE-----Generated at Fri Oct 24 17:42:04 2025 by rpki-client