$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: iQ6SdGFovOozVPN3V9lWiWDtTGtdku255Peill6mriQ= Subject key identifier: 95:98:E2:BA:C4:FB:9C:FF:16:25:D0:02:C1:1A:04:17:DF:D7:B2:D5 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 01CD Signing time: Sun 19 Oct 2025 05:33:29 +0000 Manifest this update: Sun 19 Oct 2025 05:33:29 +0000 Manifest next update: Sun 26 Oct 2025 05:33:29 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: zQfqlyCz7478tcvz7qAJ+qLJwJFrieD+lDw3aTrpmuY=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: JjxPWRQvVRqo2VJfQtmGf8Knnw8An8emF5M7TgePlIE=) 4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Oct 19 05:33:29 2025 GMT Not After : Oct 26 05:33:29 2025 GMT Subject: CN=68f47829-93dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:02:8d:38:26:36:9f:f7:24:47:8e:9d:ba: ff:05:17:66:49:e5:9d:11:d1:5e:54:b3:05:e0:b3: ae:3c:39:dc:6d:a0:e8:ea:d8:54:26:04:33:80:49: 8f:44:f7:b3:c7:db:cb:e2:3c:92:2b:bb:78:cc:42: f6:ca:64:cf:fc:de:3e:b0:e3:c6:e0:a0:93:0b:a8: 22:df:86:5c:83:c7:db:ae:dd:97:c8:2a:f8:e5:8b: 58:09:ba:a6:b8:6d:35:0f:e4:c2:9e:2c:93:fa:a9: 2c:7b:3f:f9:e0:09:57:a9:cf:c6:54:6b:d6:02:7a: ec:32:b9:2c:44:24:9e:cf:93:c9:d1:3d:8d:e5:f6: 84:e9:ef:42:0b:d4:c9:75:dc:66:eb:95:fd:e6:21: 33:82:75:ea:b9:b1:94:d9:6d:af:37:e4:3e:0b:8e: a7:bf:6c:50:d7:1b:ae:4b:e0:c3:e4:86:d3:7e:a6: 66:aa:44:42:b3:b7:be:13:f2:90:ea:ca:85:f3:ff: 8e:65:3b:ed:75:7a:ca:0f:25:2f:d0:43:14:bd:26: b3:11:52:b3:dc:7b:e3:a8:f6:73:2c:e8:23:04:50: 8c:2b:94:48:d0:95:7a:db:f8:cc:46:cb:2c:26:8d: e4:41:28:ed:bc:1e:49:92:84:94:35:71:22:cc:e5: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:98:E2:BA:C4:FB:9C:FF:16:25:D0:02:C1:1A:04:17:DF:D7:B2:D5 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:24:52:ff:cf:30:10:2e:d6:ea:ec:85:63:af:9f:19:4e:6a: 11:d6:ad:d2:87:7c:6d:c3:ef:82:74:1c:44:52:fa:f1:e7:9e: a1:24:9a:d2:17:9f:3f:a2:08:4d:41:0b:fb:7e:bc:ab:c6:40: 49:51:86:02:98:dd:94:ff:ee:a3:75:77:f4:28:3a:6d:18:9d: 44:17:f0:87:42:ae:88:6d:87:08:00:5c:80:ea:c7:f1:3d:28: a5:25:e6:e7:98:bb:42:44:13:1c:b6:b8:de:ec:dc:63:e0:1e: c8:b3:f0:b6:52:61:4f:92:53:5b:87:c9:dc:84:ac:f6:7e:d3: c2:5c:84:20:5a:a6:33:3b:08:08:93:ce:c7:a6:d1:f6:de:24: f6:b1:97:72:9f:a2:c1:8e:44:b7:23:d4:9f:b0:2c:27:95:0f: 18:a3:a2:f3:bf:41:51:2c:9b:7e:85:69:8b:25:ed:75:82:50: 76:67:66:52:d3:b0:03:47:aa:f9:4a:50:28:c6:3d:91:db:5c: 9d:fb:58:1c:07:40:fd:fc:a0:bf:86:e9:1e:fc:ba:60:7b:05: 05:99:73:bf:10:7b:d1:27:5b:7c:5d:8c:ad:58:7e:cc:db:cf: 6d:4a:2f:fa:84:dd:d9:0c:dc:39:6f:c8:1d:d0:a6:71:75:c0: 3b:b7:9c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUxMDE5MDUzMzI5WhcNMjUxMDI2MDUzMzI5WjAYMRYwFAYD VQQDEw02OGY0NzgyOS05M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLgCjTgmNp/3JEeOnbr/BRdmSeWdEdFeVLMF4LOuPDncbaDo6thUJgQzgEmP RPezx9vL4jySK7t4zEL2ymTP/N4+sOPG4KCTC6gi34Zcg8fbrt2XyCr45YtYCbqm uG01D+TCniyT+qksez/54AlXqc/GVGvWAnrsMrksRCSez5PJ0T2N5faE6e9CC9TJ ddxm65X95iEzgnXqubGU2W2vN+Q+C46nv2xQ1xuuS+DD5IbTfqZmqkRCs7e+E/KQ 6sqF8/+OZTvtdXrKDyUv0EMUvSazEVKz3HvjqPZzLOgjBFCMK5RI0JV62/jMRsss Jo3kQSjtvB5JkoSUNXEizOVGjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWY4rrE +5z/FiXQAsEaBBff17LVMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcJFL/zzAQLtbq7IVjr58ZTmoR1q3Sh3xtw++CdBxEUvrx556hJJrS F58/oghNQQv7fryrxkBJUYYCmN2U/+6jdXf0KDptGJ1EF/CHQq6IbYcIAFyA6sfx PSilJebnmLtCRBMctrje7Nxj4B7Is/C2UmFPklNbh8nchKz2ftPCXIQgWqYzOwgI k87HptH23iT2sZdyn6LBjkS3I9SfsCwnlQ8Yo6Lzv0FRLJt+hWmLJe11glB2Z2ZS 07ADR6r5SlAoxj2R21yd+1gcB0D9/KC/huke/LpgewUFmXO/EHvRJ1t8XYytWH7M 289tSi/6hN3ZDNw5b8gd0KZxdcA7t5w+ -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:07 2025 by rpki-client