$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json) Hash identifier: fKai/TnKvAdUlhcz6gblwOdOfBJxPYFGjPWQDtWNbSo= Subject key identifier: 1E:7E:25:89:FF:53:ED:C7:E6:C3:AC:C6:B4:2C:AC:B6:4E:23:B5:BF Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft Manifest number: 071F Signing time: Sat 18 Oct 2025 23:12:16 +0000 Manifest this update: Sat 18 Oct 2025 23:12:15 +0000 Manifest next update: Sat 25 Oct 2025 23:12:15 +0000 Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: KvxtfJHyg9W3cMEmUxHpG0XCThiH29vpIANvm/U5lDI=) 2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=) 3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Validity Not Before: Oct 18 23:12:15 2025 GMT Not After : Oct 25 23:12:15 2025 GMT Subject: CN=68f41ed0-d9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:8a:bc:94:15:9e:d6:c9:28:a2:f5:57:aa: f5:07:ff:13:08:ab:e6:dc:e6:0b:8c:db:a9:f3:79: 81:5f:4b:74:1c:48:8a:d8:71:ef:12:4d:ea:4c:47: f3:de:60:81:b9:6b:12:6e:c1:48:2f:3f:a7:8d:0b: ba:c5:52:fc:7e:0f:45:c6:f7:20:4f:8b:36:b2:7f: 80:ed:1c:68:a0:29:38:e1:6f:c2:6a:85:f2:16:30: c2:28:4b:6a:2c:d2:d6:a8:4e:48:0b:d2:b2:33:b0: 9a:62:e0:99:f4:2c:a0:79:5c:06:88:15:28:d8:0c: ff:47:5f:7e:4a:aa:08:2b:7d:59:f9:64:9a:84:cc: 05:3e:ef:b6:bb:93:be:be:11:a0:ee:e2:2a:56:95: 71:40:4b:5f:68:71:78:e6:48:4b:cb:5a:a6:c8:e1: 3f:e3:83:e3:ea:2c:56:71:6b:7c:d3:2b:71:70:43: b1:fd:46:25:2a:40:82:cb:c2:96:ab:63:8b:50:ba: 7b:5a:99:9c:16:1f:fb:24:76:52:25:b0:0a:60:94: 1f:16:1c:3d:c7:b7:6a:55:98:bb:6d:19:6a:97:0c: 21:ef:72:7b:4c:06:71:56:d2:13:60:60:3e:51:d2: a6:78:53:57:cc:bc:b1:08:7c:9b:9d:5a:8a:88:04: 25:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7E:25:89:FF:53:ED:C7:E6:C3:AC:C6:B4:2C:AC:B6:4E:23:B5:BF X509v3 Authority Key Identifier: keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:86:da:53:0b:68:ec:e2:46:32:3d:c6:6b:5a:55:8b:7c:b7: 14:56:64:93:28:a7:b7:f6:ef:4b:bc:83:bb:8f:c0:40:e4:6f: 72:d4:9c:66:56:8a:70:2c:91:f3:5e:f6:d3:19:82:1b:6d:6c: f3:34:11:dc:0b:c8:9b:2d:40:01:61:82:ba:b9:0c:26:8d:bb: f8:e3:7e:83:84:57:26:9e:03:61:ab:16:81:90:9e:c9:00:b9: 68:c5:36:6d:59:0c:6a:0e:9b:12:41:01:05:90:8b:67:e8:33: 6b:87:22:1d:3c:00:22:a5:8a:0b:31:9d:a7:b3:17:a4:c4:ec: 2f:80:62:46:4e:b3:2f:91:f3:dc:2c:7b:45:9f:49:f3:f6:9e: b9:64:10:da:c2:81:b7:fb:8a:76:1f:ea:da:5b:78:99:b5:64: 2b:b2:9e:2a:a6:9d:0d:21:f5:98:5d:ea:e4:92:26:58:2b:0e: fe:63:60:25:69:e4:13:f3:26:b9:92:01:60:a4:59:c0:02:ed: da:f4:52:ac:8d:7e:40:4a:da:13:78:01:92:53:05:18:90:5a: 56:e0:2f:0b:fe:24:a4:d2:f7:f1:b3:25:e1:88:06:06:21:ec: e0:a7:12:f3:c5:c7:8e:a3:93:47:4b:fc:31:43:df:e5:b6:5d: 74:f0:7c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC OEJCOTczNjYwHhcNMjUxMDE4MjMxMjE1WhcNMjUxMDI1MjMxMjE1WjAYMRYwFAYD VQQDEw02OGY0MWVkMC1kOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGuKvJQVntbJKKL1V6r1B/8TCKvm3OYLjNup83mBX0t0HEiK2HHvEk3qTEfz 3mCBuWsSbsFILz+njQu6xVL8fg9FxvcgT4s2sn+A7RxooCk44W/CaoXyFjDCKEtq LNLWqE5IC9KyM7CaYuCZ9CygeVwGiBUo2Az/R19+SqoIK31Z+WSahMwFPu+2u5O+ vhGg7uIqVpVxQEtfaHF45khLy1qmyOE/44Pj6ixWcWt80ytxcEOx/UYlKkCCy8KW q2OLULp7WpmcFh/7JHZSJbAKYJQfFhw9x7dqVZi7bRlqlwwh73J7TAZxVtITYGA+ UdKmeFNXzLyxCHybnVqKiAQlzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5+JYn/ U+3H5sOsxrQsrLZOI7W/MB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0 ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnhtpTC2js4kYyPcZrWlWLfLcUVmSTKKe39u9LvIO7j8BA5G9y1Jxm VopwLJHzXvbTGYIbbWzzNBHcC8ibLUABYYK6uQwmjbv4436DhFcmngNhqxaBkJ7J ALloxTZtWQxqDpsSQQEFkItn6DNrhyIdPAAipYoLMZ2nsxekxOwvgGJGTrMvkfPc LHtFn0nz9p65ZBDawoG3+4p2H+raW3iZtWQrsp4qpp0NIfWYXerkkiZYKw7+Y2Al aeQT8ya5kgFgpFnAAu3a9FKsjX5AStoTeAGSUwUYkFpW4C8L/iSk0vfxsyXhiAYG IezgpxLzxceOo5NHS/wxQ9/ltl108Hy1 -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:18 2025 by rpki-client