$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: 9JrHcYJXwXyv9MsRQGhKc23jNDcQNEqQVTcw1U807Ho= Subject key identifier: CC:64:8D:54:E4:FE:03:90:B0:37:D7:6D:19:0C:D8:82:DA:EE:AF:59 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 0426 Signing time: Sun 19 Oct 2025 02:16:21 +0000 Manifest this update: Sun 19 Oct 2025 02:16:20 +0000 Manifest next update: Sun 26 Oct 2025 02:16:20 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: pnlVVrYdPDTP9iqySdJ+7NhY/mjs407zqOXQzO5tj4o=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: Yv9ClrwAFACGSqITuh9ooZXNuE+9WgMW5OezB268l+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Oct 19 02:16:20 2025 GMT Not After : Oct 26 02:16:20 2025 GMT Subject: CN=68f449f5-bc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:66:88:1b:7c:85:ed:88:d4:46:5b:fb:2a: e0:bc:1f:cc:57:98:b1:b3:a0:a2:e4:c8:61:d6:62: 9e:b8:4d:a9:4e:e6:82:00:88:6b:6b:9c:b7:a8:2d: cf:b9:48:56:cb:55:84:b4:f4:7e:f3:0b:bc:c0:8d: 86:d9:a8:95:30:ee:bb:7d:b1:97:59:7e:61:a6:89: ce:79:6a:e6:0f:ec:75:b5:dd:61:90:f3:1e:eb:a2: ab:a6:a1:c6:cd:41:35:7d:95:b0:de:83:91:04:44: 0c:69:1b:36:ed:ba:e4:fe:44:1a:ea:fa:37:31:ca: 85:82:95:23:0e:b5:c9:ba:8f:f6:2a:0f:53:96:18: 44:2e:cc:76:11:6b:55:5f:1b:48:9d:3c:6e:74:86: c9:c3:c5:af:e6:cd:5b:dc:e6:ef:57:77:a6:6c:9e: a1:6f:08:e7:76:31:1e:b6:31:b1:18:2c:a3:31:10: b9:18:ab:9a:76:34:49:98:66:37:f9:88:36:31:25: 86:25:ea:65:04:2e:73:7d:b9:c2:08:2a:f6:f2:0c: b1:0b:7e:2e:f1:62:f2:0b:bb:5d:dd:c4:d1:8e:1f: de:df:6a:70:e8:ec:97:43:d6:9e:01:a7:18:cc:61: f9:5c:e4:2b:5c:a1:bf:4c:4e:1c:58:f1:f0:79:ce: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:64:8D:54:E4:FE:03:90:B0:37:D7:6D:19:0C:D8:82:DA:EE:AF:59 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:34:b0:20:e6:cb:9a:cb:85:45:12:0f:8e:e1:f2:4f:68:53: a6:fc:9f:78:31:21:11:42:24:aa:6d:de:e7:34:cb:5d:65:4e: c4:de:26:44:fb:d1:47:06:ae:8e:8b:f8:61:34:73:64:87:ca: ab:0b:84:f6:ac:12:8e:e8:32:9f:79:1f:18:47:b6:d3:ac:2e: 81:a6:30:94:2a:d6:db:59:80:96:85:ba:0d:ae:e5:47:d4:bd: 14:ec:d4:ef:36:a8:97:a5:fe:0c:f2:1c:5c:ab:4e:f5:e9:5e: 4d:12:8a:e6:17:05:3a:6d:a9:93:7e:56:11:3c:2a:01:69:4f: 80:e7:b3:4e:39:4d:32:8f:0a:4f:b4:9b:33:fc:00:f4:d4:3e: 7a:84:fb:11:97:80:3d:2b:3e:43:a0:18:3e:2d:b2:39:95:a0: 0b:31:29:95:65:e3:fb:c1:6c:cc:d3:7f:8e:68:2e:a8:40:83: 72:db:2a:f4:85:78:e5:c9:25:78:a3:f2:e5:b7:e1:8a:4b:65: b9:3d:ba:68:d9:68:b2:f9:13:27:11:c6:a4:ba:8d:81:63:07: 2d:80:73:4f:c0:6c:5f:6a:e3:76:29:a8:72:58:17:23:01:5a: 49:6d:f1:d1:3c:ae:99:8d:d2:3b:64:b3:5a:c0:d8:65:70:e9: f2:b5:28:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUxMDE5MDIxNjIwWhcNMjUxMDI2MDIxNjIwWjAYMRYwFAYD VQQDEw02OGY0NDlmNS1iYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SdmiBt8he2I1EZb+yrgvB/MV5ixs6Ci5Mhh1mKeuE2pTuaCAIhra5y3qC3P uUhWy1WEtPR+8wu8wI2G2aiVMO67fbGXWX5hponOeWrmD+x1td1hkPMe66KrpqHG zUE1fZWw3oORBEQMaRs27brk/kQa6vo3McqFgpUjDrXJuo/2Kg9TlhhELsx2EWtV XxtInTxudIbJw8Wv5s1b3ObvV3embJ6hbwjndjEetjGxGCyjMRC5GKuadjRJmGY3 +Yg2MSWGJeplBC5zfbnCCCr28gyxC34u8WLyC7td3cTRjh/e32pw6OyXQ9aeAacY zGH5XOQrXKG/TE4cWPHwec6eOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxkjVTk /gOQsDfXbRkM2ILa7q9ZMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/NLAg5suay4VFEg+O4fJPaFOm/J94MSERQiSqbd7nNMtdZU7E3iZE +9FHBq6Oi/hhNHNkh8qrC4T2rBKO6DKfeR8YR7bTrC6BpjCUKtbbWYCWhboNruVH 1L0U7NTvNqiXpf4M8hxcq0716V5NEormFwU6bamTflYRPCoBaU+A57NOOU0yjwpP tJsz/AD01D56hPsRl4A9Kz5DoBg+LbI5laALMSmVZeP7wWzM03+OaC6oQINy2yr0 hXjlySV4o/Llt+GKS2W5Pbpo2Wiy+RMnEcakuo2BYwctgHNPwGxfauN2KahyWBcj AVpJbfHRPK6ZjdI7ZLNawNhlcOnytSiL -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:30 2025 by rpki-client