$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: L9dXk43sAvg+dcsplCtRlTwNYyTcpVFBSWSiZMeef1U= Subject key identifier: DA:4D:1D:1B:10:53:75:6B:16:87:56:68:09:BD:C6:B4:31:9A:E6:9D Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 03E4 Signing time: Sun 19 Oct 2025 02:29:59 +0000 Manifest this update: Sun 19 Oct 2025 02:29:59 +0000 Manifest next update: Sun 26 Oct 2025 02:29:59 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: XOTlSa114untLlQN6A874bD2nHKUiBlRQjSWR2vy7+0=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Oct 19 02:29:59 2025 GMT Not After : Oct 26 02:29:59 2025 GMT Subject: CN=68f44d27-1486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:31:c6:2b:fe:fd:9e:fc:a5:88:6d:d9:fb: db:e1:74:bd:7d:7b:74:19:98:91:c4:a4:93:c2:f6: 21:50:4d:04:8a:9b:f8:e8:06:3f:a2:23:e8:39:a6: 4d:bb:2d:9d:d1:b4:14:c7:08:41:70:0e:cd:ee:70: 9b:02:21:85:cb:67:82:b5:fc:2a:a5:a4:c0:6a:7e: 97:15:af:e2:ee:31:2e:2f:c7:7c:f5:d9:bd:7e:c5: ab:ef:e5:43:ff:ea:11:dc:13:47:25:b8:84:34:6d: 59:f7:9c:b9:bf:a0:3f:a1:3a:3d:cc:e0:8d:b4:39: 4e:2c:9d:5c:b9:cd:24:43:2e:8b:13:39:af:42:bc: d5:7f:cf:65:e2:14:4b:0e:5e:42:dd:78:e5:6a:46: 21:e1:06:e1:7c:c2:61:a7:fd:01:4c:0d:70:64:06: ea:44:60:ae:ff:27:88:6b:ea:18:3c:a2:a9:11:c8: bb:26:af:00:37:59:89:ce:34:f1:b2:07:74:8a:e1: 58:7f:97:2a:e0:7f:09:a9:7a:ec:63:a6:2c:eb:d1: ca:8a:a4:e9:78:56:57:7e:72:13:2a:5c:d9:a0:d0: e0:6f:84:09:1c:91:65:39:1c:8f:0b:7f:b1:b5:85: 50:5c:de:f7:25:c4:2d:81:9d:79:22:35:db:fb:4d: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4D:1D:1B:10:53:75:6B:16:87:56:68:09:BD:C6:B4:31:9A:E6:9D X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d1:16:76:6a:b1:0b:4c:64:f4:9a:f2:38:13:0b:e9:38:88: 94:04:c1:f0:4d:a5:2d:da:7e:2b:d2:54:95:d7:cf:c5:e4:4e: 10:d6:33:d1:fc:35:86:18:cc:ae:79:10:14:d6:3d:6b:9c:9a: 35:40:69:18:56:60:80:9e:b7:11:a1:81:6f:b7:68:89:96:aa: 96:73:14:76:fe:99:e1:57:39:e1:f0:34:e7:7a:3e:3f:5b:9f: 96:52:8c:d1:a9:c6:75:e8:14:6b:c2:f3:b8:4b:e9:ac:92:c4: da:31:47:d5:b0:98:e7:af:b9:39:f9:97:64:9a:1e:4f:c0:c8: 1f:03:1e:49:ba:c9:a2:9d:ed:2f:a8:f9:79:57:19:0d:eb:87: 18:ec:10:8d:12:a0:ef:65:0c:43:5e:41:54:04:e7:b5:9c:dd: 76:ef:5b:3b:d3:0e:dc:c0:db:fa:68:cc:60:4b:f6:82:18:b5: e4:4b:33:22:6f:7e:a5:99:68:68:4b:0a:6a:97:2d:17:02:46: 01:73:36:f5:ef:b1:32:0f:d0:83:44:bd:c1:a8:3e:40:18:39: b6:b8:70:b7:63:89:1f:81:c6:a2:c8:6f:75:b5:3f:ea:a7:d8: dd:94:08:55:06:af:78:3b:44:1e:48:35:bf:f9:5b:6b:de:5b: 1c:df:7e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUxMDE5MDIyOTU5WhcNMjUxMDI2MDIyOTU5WjAYMRYwFAYD VQQDEw02OGY0NGQyNy0xNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwsxxiv+/Z78pYht2fvb4XS9fXt0GZiRxKSTwvYhUE0Eipv46AY/oiPoOaZN uy2d0bQUxwhBcA7N7nCbAiGFy2eCtfwqpaTAan6XFa/i7jEuL8d89dm9fsWr7+VD /+oR3BNHJbiENG1Z95y5v6A/oTo9zOCNtDlOLJ1cuc0kQy6LEzmvQrzVf89l4hRL Dl5C3XjlakYh4QbhfMJhp/0BTA1wZAbqRGCu/yeIa+oYPKKpEci7Jq8AN1mJzjTx sgd0iuFYf5cq4H8JqXrsY6Ys69HKiqTpeFZXfnITKlzZoNDgb4QJHJFlORyPC3+x tYVQXN73JcQtgZ15IjXb+038owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpNHRsQ U3VrFodWaAm9xrQxmuadMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD0RZ2arELTGT0mvI4EwvpOIiUBMHwTaUt2n4r0lSV18/F5E4Q1jPR /DWGGMyueRAU1j1rnJo1QGkYVmCAnrcRoYFvt2iJlqqWcxR2/pnhVznh8DTnej4/ W5+WUozRqcZ16BRrwvO4S+msksTaMUfVsJjnr7k5+Zdkmh5PwMgfAx5Jusmine0v qPl5VxkN64cY7BCNEqDvZQxDXkFUBOe1nN1271s70w7cwNv6aMxgS/aCGLXkSzMi b36lmWhoSwpqly0XAkYBczb177EyD9CDRL3BqD5AGDm2uHC3Y4kfgcaiyG91tT/q p9jdlAhVBq94O0QeSDW/+Vtr3lsc335F -----END CERTIFICATE-----Generated at Tue Oct 21 02:39:51 2025 by rpki-client