$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: DGcvNyGKfl4HwGCrBB+X8qVFfxItuzF68rEssXhQtf4= Subject key identifier: FA:3C:1C:CE:C4:C7:14:3B:4A:17:BA:8A:30:59:2B:3B:05:FB:14:F6 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 03DB Signing time: Sun 19 Oct 2025 02:32:51 +0000 Manifest this update: Sun 19 Oct 2025 02:32:50 +0000 Manifest next update: Sun 26 Oct 2025 02:32:50 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: fa4QIp0S11/+IuarPjFmI9sGwXws+7WXZWmjzCOXbIk=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: vAub+gasrAOQ1+asaJIl575xD7KBPecCLw303hY+Tq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Oct 19 02:32:50 2025 GMT Not After : Oct 26 02:32:50 2025 GMT Subject: CN=68f44dd2-a76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:1a:9b:dc:38:f5:fd:33:a3:73:68:ec:5e: e5:0b:96:da:0a:e4:04:d0:6c:3d:d4:5e:90:1e:67: f6:31:d8:1a:da:62:3b:69:84:db:a2:65:5f:fb:fe: 88:21:cc:68:85:a5:60:f0:c0:d1:fd:3d:1a:fb:9d: c2:e5:1c:d5:62:3e:8a:de:eb:59:13:05:57:b3:11: b9:25:db:fd:a7:1b:ec:10:f3:30:71:15:45:f3:61: 97:50:7f:2e:ad:bb:0e:83:90:60:6c:f2:ca:78:05: 4b:ae:72:ac:9d:1b:c2:e0:c4:42:41:53:a2:5d:41: 05:32:d2:1e:af:84:d1:d2:30:8e:fb:27:98:6d:c6: d6:61:ca:a0:1f:5a:76:8e:6b:70:03:e9:7d:49:ef: 4a:7a:b6:dc:03:6f:57:a7:3c:75:39:36:9b:a0:da: 1c:b7:84:f7:4e:ac:1f:1c:c7:8e:d3:c7:94:88:45: 9e:e3:de:c1:21:33:b8:a0:ca:d1:3c:ff:0f:64:63: 59:3e:84:98:42:65:dc:82:ba:c3:8f:9e:f8:6e:4d: 66:f3:87:a8:95:88:e5:a2:3a:c7:5c:d9:08:3c:65: 8a:93:d9:d4:52:ce:d9:96:43:8d:37:7e:84:6c:18: e4:26:05:c1:cd:71:79:0b:e5:ee:3a:4b:dc:54:75: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3C:1C:CE:C4:C7:14:3B:4A:17:BA:8A:30:59:2B:3B:05:FB:14:F6 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:91:af:9d:16:58:d4:b2:df:d2:85:ef:d5:ff:44:80:c9:28: 27:77:be:5f:87:aa:74:cf:93:71:5c:85:ef:c3:8d:71:a0:52: 59:de:a4:01:16:ab:41:fc:58:61:0d:ec:96:11:8f:ca:42:8e: f6:87:f2:59:79:95:05:2d:f2:93:3d:fd:01:db:18:97:3c:ed: 24:75:72:60:f5:5a:16:1f:3f:fe:84:c0:69:a6:f4:cd:81:9e: d0:cc:48:c3:2d:eb:01:80:4a:21:c3:7e:23:e3:c3:93:d8:2a: 5e:2a:1f:97:4b:9c:60:2b:74:d3:6f:45:fc:87:41:b6:6e:9c: 7c:f7:4a:b7:fe:cb:14:ff:b7:8a:77:b4:d7:da:af:41:65:82: 9d:d5:bd:a7:4e:69:77:64:42:e2:59:25:da:7b:d6:77:af:b1: 3a:df:59:ce:1e:dd:49:be:4b:b3:72:15:3d:76:0e:e1:81:07: 09:c1:bb:2a:c7:80:03:c7:b2:cc:d9:9d:1f:75:b3:01:3b:b8: 98:c4:2d:7a:45:e4:29:9f:05:9b:e7:e1:ad:db:01:5b:20:43: 3d:92:3f:15:2c:25:13:84:22:be:a6:09:25:14:61:cb:14:c0: 60:1f:67:12:4d:52:77:5f:ea:0d:02:e0:35:10:af:bc:c0:bb: e3:4a:9e:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUxMDE5MDIzMjUwWhcNMjUxMDI2MDIzMjUwWjAYMRYwFAYD VQQDEw02OGY0NGRkMi1hNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C8am9w49f0zo3No7F7lC5baCuQE0Gw91F6QHmf2Mdga2mI7aYTbomVf+/6I IcxohaVg8MDR/T0a+53C5RzVYj6K3utZEwVXsxG5Jdv9pxvsEPMwcRVF82GXUH8u rbsOg5BgbPLKeAVLrnKsnRvC4MRCQVOiXUEFMtIer4TR0jCO+yeYbcbWYcqgH1p2 jmtwA+l9Se9KerbcA29Xpzx1OTaboNoct4T3TqwfHMeO08eUiEWe497BITO4oMrR PP8PZGNZPoSYQmXcgrrDj574bk1m84eolYjlojrHXNkIPGWKk9nUUs7ZlkONN36E bBjkJgXBzXF5C+XuOkvcVHXY4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo8HM7E xxQ7She6ijBZKzsF+xT2MB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXka+dFljUst/She/V/0SAySgnd75fh6p0z5NxXIXvw41xoFJZ3qQB FqtB/FhhDeyWEY/KQo72h/JZeZUFLfKTPf0B2xiXPO0kdXJg9VoWHz/+hMBppvTN gZ7QzEjDLesBgEohw34j48OT2CpeKh+XS5xgK3TTb0X8h0G2bpx890q3/ssU/7eK d7TX2q9BZYKd1b2nTml3ZELiWSXae9Z3r7E631nOHt1JvkuzchU9dg7hgQcJwbsq x4ADx7LM2Z0fdbMBO7iYxC16ReQpnwWb5+Gt2wFbIEM9kj8VLCUThCK+pgklFGHL FMBgH2cSTVJ3X+oNAuA1EK+8wLvjSp4J -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:34 2025 by rpki-client