$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: i6OV/kA34/W6l2eu/rR+SY82ThpENVAc9Uf740gnnY0= Subject key identifier: E9:F3:2A:C3:DC:B0:1A:ED:32:14:E9:5F:B5:BC:8F:4F:88:07:6E:09 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 0590 Signing time: Sun 19 Oct 2025 00:53:40 +0000 Manifest this update: Sun 19 Oct 2025 00:53:40 +0000 Manifest next update: Sun 26 Oct 2025 00:53:40 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: qvtY/SK2lVu4/3DJflPjhiAr6gEcuwTzlzq3PS+Dz8s=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: jmBBk9G7I6kWRNtiv9uf3HqTLrY1UbUUMPlSvnBT+V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Oct 19 00:53:40 2025 GMT Not After : Oct 26 00:53:40 2025 GMT Subject: CN=68f43694-11f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:53:61:55:81:ae:1a:de:da:90:c2:96:e9: 5a:40:f5:84:4c:08:e5:03:0c:dd:4f:97:0a:63:1d: e0:58:4d:90:11:ea:10:be:33:6b:fd:da:f3:d9:96: 00:39:51:e4:d5:b2:c3:07:ef:bc:1f:f6:0a:53:b2: b8:92:9a:f8:27:83:7c:11:79:74:cc:d6:94:cd:a9: df:54:7c:7d:56:a5:5a:ce:04:e5:94:e9:8f:9d:e5: 4f:77:1c:2d:aa:99:1c:3a:8c:aa:87:84:e3:53:1a: 7b:86:81:c6:78:79:27:eb:8f:d3:83:e3:31:39:61: 06:1d:41:a0:dc:54:f6:60:1d:c1:53:2a:e6:98:f2: 7a:e7:1e:01:a7:e3:83:80:98:ac:6c:84:8f:77:34: 48:ba:e5:76:32:30:35:28:01:3e:0c:46:1e:b2:42: 80:0b:b2:2c:eb:38:58:20:6b:e2:79:8a:9d:1d:ff: 2c:46:cf:61:ba:b4:50:d8:e5:88:41:23:a6:e7:09: 69:06:24:f4:c7:c0:72:fe:28:f1:29:f7:2c:92:93: f6:86:03:f9:a2:0e:e8:70:c4:be:ba:b4:68:1a:48: f8:48:53:79:92:3d:a7:42:1c:ab:10:84:81:83:07: 13:59:70:af:ba:77:54:03:41:7d:6f:87:63:f2:24: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:2A:C3:DC:B0:1A:ED:32:14:E9:5F:B5:BC:8F:4F:88:07:6E:09 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:30:bc:40:8a:fc:25:17:22:dc:8a:24:d6:e2:e2:cf:8a:bd: 20:61:16:4f:04:85:86:ee:2a:14:ad:64:b5:7d:c9:e9:71:a7: bc:51:cb:f7:ba:8b:cb:cc:4d:80:ae:58:2b:28:82:2a:d4:6e: 1e:4c:ab:27:c0:f7:50:f7:30:f5:00:06:19:74:82:f9:40:5d: cd:53:bf:15:99:ef:85:55:22:79:52:9b:83:10:56:b6:c4:9e: 74:e6:6d:99:dc:65:18:0e:5f:7d:ec:59:58:54:68:50:9a:45: 28:3b:21:cd:3d:24:63:fd:01:f1:da:5e:2b:ae:0f:20:97:32: 7e:9e:80:11:b7:42:36:5a:30:e8:24:38:e1:20:3a:4f:54:b1: 8a:1d:e9:b0:d4:6c:6b:8b:fd:30:ea:37:fb:df:e7:d5:d6:64: 0d:52:66:d6:02:3d:25:81:3f:5b:65:11:b6:24:76:a3:57:7a: 67:95:97:f0:3c:d5:c4:8d:48:b8:e8:11:a6:ee:55:8b:69:81: db:5b:f2:52:29:26:1d:b2:a8:b1:52:8c:b1:2f:fe:f9:f3:06: b7:2a:58:e0:79:e9:33:d2:87:0c:1d:b9:89:f0:00:43:e7:d3: a4:29:d6:52:f8:a0:b3:0f:36:6f:c5:82:6a:36:d7:14:8b:6f: 1e:d2:aa:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjUxMDE5MDA1MzQwWhcNMjUxMDI2MDA1MzQwWjAYMRYwFAYD VQQDEw02OGY0MzY5NC0xMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GZTYVWBrhre2pDClulaQPWETAjlAwzdT5cKYx3gWE2QEeoQvjNr/drz2ZYA OVHk1bLDB++8H/YKU7K4kpr4J4N8EXl0zNaUzanfVHx9VqVazgTllOmPneVPdxwt qpkcOoyqh4TjUxp7hoHGeHkn64/Tg+MxOWEGHUGg3FT2YB3BUyrmmPJ65x4Bp+OD gJisbISPdzRIuuV2MjA1KAE+DEYeskKAC7Is6zhYIGvieYqdHf8sRs9hurRQ2OWI QSOm5wlpBiT0x8By/ijxKfcskpP2hgP5og7ocMS+urRoGkj4SFN5kj2nQhyrEISB gwcTWXCvundUA0F9b4dj8iSRawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnzKsPc sBrtMhTpX7W8j0+IB24JMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZMLxAivwlFyLciiTW4uLPir0gYRZPBIWG7ioUrWS1fcnpcae8Ucv3 uovLzE2ArlgrKIIq1G4eTKsnwPdQ9zD1AAYZdIL5QF3NU78Vme+FVSJ5UpuDEFa2 xJ505m2Z3GUYDl997FlYVGhQmkUoOyHNPSRj/QHx2l4rrg8glzJ+noARt0I2WjDo JDjhIDpPVLGKHemw1Gxri/0w6jf73+fV1mQNUmbWAj0lgT9bZRG2JHajV3pnlZfw PNXEjUi46BGm7lWLaYHbW/JSKSYdsqixUoyxL/758wa3Kljgeekz0ocMHbmJ8ABD 59OkKdZS+KCzDzZvxYJqNtcUi28e0qo3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:04 2025 by rpki-client