$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json) Hash identifier: feKvc/vZdrfe8uUaT567Dc1rRaZfibO+CU5g1/1/JO8= Subject key identifier: 7B:1E:BD:F1:2F:00:AC:7A:C7:AA:8B:48:C7:96:5D:42:29:65:40:1E Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft Manifest number: 0507 Signing time: Sat 25 Oct 2025 02:20:19 +0000 Manifest this update: Sat 25 Oct 2025 02:20:18 +0000 Manifest next update: Sat 01 Nov 2025 02:20:18 +0000 Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: HZG2V5TzgYWKBRlsBFFFHHUpOa8qG5/v056oDbn+wSU=) 2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: 0jqnSn+Cm10EtK5JT/NKDy8k+JGjQ6fCGa+uxrmRYyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 02:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Validity Not Before: Oct 25 02:20:18 2025 GMT Not After : Nov 1 02:20:18 2025 GMT Subject: CN=68fc33e3-6204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:b8:ab:d8:c9:7c:d7:b9:2e:2b:4e:fb:4c: cf:ae:03:41:b7:14:84:02:2c:be:66:ae:fc:c6:4a: 41:2c:90:7d:08:5e:8b:c1:9a:82:a0:f4:cf:a7:91: 12:06:0d:a3:77:4a:10:0f:2f:6b:59:4b:2e:cf:71: ef:af:6e:c1:ce:5c:a2:d6:a4:8b:06:fd:70:5c:16: 18:b3:8e:ec:93:f8:6e:b0:8c:96:e7:f4:55:70:a2: 10:fb:d9:ca:bc:7c:18:59:05:a2:00:ee:9c:12:f4: 11:aa:2e:93:d0:88:6c:7e:a6:21:a5:62:d0:42:d5: 06:94:0b:55:b2:dd:3e:c9:1e:24:9b:97:d9:d4:69: 3e:d0:4b:36:58:c0:43:7b:e4:58:02:fe:36:9c:e1: 8f:23:7a:94:0e:61:a5:31:7a:09:3f:e1:cd:40:e0: 8a:48:cc:a0:4b:f3:76:0a:28:cc:3e:bf:ef:79:62: f0:60:35:38:85:2d:06:75:51:b1:b9:5e:c8:3f:86: 16:92:4e:6e:59:18:31:f1:28:f2:98:af:09:4c:b8: f7:58:dc:a1:11:d5:0b:3d:71:8f:4a:3e:e6:fd:b6: 0e:30:4e:a9:13:b5:c2:d7:28:6a:2b:ca:28:ab:fd: e2:e5:48:e5:a6:7f:f1:a2:9e:5c:c0:3e:7d:98:51: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1E:BD:F1:2F:00:AC:7A:C7:AA:8B:48:C7:96:5D:42:29:65:40:1E X509v3 Authority Key Identifier: keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6a:34:d0:60:29:b6:00:27:8e:56:b8:55:b0:e0:f3:48:80: f0:c4:dc:85:b8:e0:48:8d:4e:f5:a4:52:bd:58:f4:bc:51:62: 4e:b0:2a:61:20:bc:2e:2a:31:1c:cc:de:0b:a2:7d:60:d0:bf: 91:4f:ea:35:56:bf:81:58:a1:f9:7c:7f:28:b5:76:3f:42:50: da:d0:ff:6a:31:05:90:ba:68:e9:10:6a:e2:a8:2f:29:25:93: 26:b3:99:f1:b5:11:56:d7:6f:a5:6d:b2:7d:8f:5f:63:37:aa: c9:56:24:34:db:a8:ea:bd:8e:1e:5d:6e:c5:48:38:8b:52:73: 4a:ec:da:bb:45:0f:e9:44:7b:99:db:9a:8c:ca:d0:88:37:c9: 09:a6:c7:a2:31:2b:28:41:78:ce:96:64:9e:48:1a:3a:cb:d2: 0f:5d:20:e8:8b:87:0f:6b:6e:39:0e:74:58:75:b1:63:84:40: fd:a4:f0:7a:fa:7c:5f:e1:31:7b:97:5a:93:d5:7b:c4:0d:da: 59:45:68:c2:51:d3:67:da:7c:d5:ab:cf:ef:5a:c4:8b:1f:bf: d3:1c:59:5d:4f:ab:82:8a:e6:10:82:9b:9e:bc:b9:30:4b:e3: 95:5c:fe:01:01:59:4d:ef:b8:a8:35:b4:76:2b:87:c2:14:f7: e2:03:51:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE NzdGQjkyN0YwHhcNMjUxMDI1MDIyMDE4WhcNMjUxMTAxMDIyMDE4WjAYMRYwFAYD VQQDEw02OGZjMzNlMy02MjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRy4q9jJfNe5LitO+0zPrgNBtxSEAiy+Zq78xkpBLJB9CF6LwZqCoPTPp5ES Bg2jd0oQDy9rWUsuz3Hvr27Bzlyi1qSLBv1wXBYYs47sk/husIyW5/RVcKIQ+9nK vHwYWQWiAO6cEvQRqi6T0IhsfqYhpWLQQtUGlAtVst0+yR4km5fZ1Gk+0Es2WMBD e+RYAv42nOGPI3qUDmGlMXoJP+HNQOCKSMygS/N2CijMPr/veWLwYDU4hS0GdVGx uV7IP4YWkk5uWRgx8SjymK8JTLj3WNyhEdULPXGPSj7m/bYOME6pE7XC1yhqK8oo q/3i5Ujlpn/xop5cwD59mFHogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsevfEv AKx6x6qLSMeWXUIpZUAeMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ajTQYCm2ACeOVrhVsODzSIDwxNyFuOBIjU71pFK9WPS8UWJOsCph ILwuKjEczN4Lon1g0L+RT+o1Vr+BWKH5fH8otXY/QlDa0P9qMQWQumjpEGriqC8p JZMms5nxtRFW12+lbbJ9j19jN6rJViQ026jqvY4eXW7FSDiLUnNK7Nq7RQ/pRHuZ 25qMytCIN8kJpseiMSsoQXjOlmSeSBo6y9IPXSDoi4cPa245DnRYdbFjhED9pPB6 +nxf4TF7l1qT1XvEDdpZRWjCUdNn2nzVq8/vWsSLH7/THFldT6uCiuYQgpuevLkw S+OVXP4BAVlN77ioNbR2K4fCFPfiA1HV -----END CERTIFICATE-----Generated at Sat Oct 25 11:28:28 2025 by rpki-client