$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: HXundJMBEOJJXpBcX7R8MYPksiYM6EylAHCIZq15P08= Subject key identifier: FF:67:9A:67:B5:57:85:FB:73:DE:82:42:AD:C9:AF:1E:87:CB:80:FE Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 0298 Signing time: Sun 19 Oct 2025 03:46:28 +0000 Manifest this update: Sun 19 Oct 2025 03:46:27 +0000 Manifest next update: Sun 26 Oct 2025 03:46:27 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: lfRN3oU8Cd1DpX/RsZN5w9u9Ia44f5s1MtedRIIpi/Y=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Oct 19 03:46:27 2025 GMT Not After : Oct 26 03:46:27 2025 GMT Subject: CN=68f45f13-f075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:f8:34:60:d1:25:77:88:af:62:70:c6:93: fe:ec:cd:8d:43:b2:09:39:37:ff:7b:54:fe:5c:80: 3c:46:56:59:3a:37:ad:93:9d:79:9c:a5:05:de:6b: 80:b6:06:77:d0:c0:e5:08:8a:98:0d:99:f5:01:e5: e2:ed:3e:d5:00:d1:58:fe:eb:a5:f0:68:fb:10:63: 8f:ed:67:b7:fe:de:7c:8f:94:a7:cd:a8:4e:b1:25: ec:08:db:d8:97:7a:b5:55:41:dd:f6:32:a4:d3:1b: bf:e9:27:0b:07:a1:88:6a:54:b3:e4:45:6c:1c:93: a6:fb:3e:94:cf:c5:3e:3d:1d:3c:1d:1e:f1:c7:c0: 11:2a:e1:4a:1e:6b:40:12:12:f9:b9:da:06:eb:66: 15:dc:8d:fd:8e:03:bd:31:b6:29:99:bb:cb:94:71: 08:2a:ba:8e:d6:db:f4:e1:0e:92:df:bd:d9:cf:b6: 6e:9d:eb:5f:72:36:ce:38:8a:d3:88:57:dc:b7:0b: 96:6f:21:cd:e5:d3:63:ee:3c:b5:5c:4c:ed:81:1a: 52:4a:c9:aa:12:54:27:ab:12:f7:9d:95:84:bd:2c: 07:f8:15:5c:af:1d:42:3a:3f:ed:e3:8b:f9:6b:86: 89:13:db:18:24:07:94:16:de:ff:d1:81:6c:92:cd: 43:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:9A:67:B5:57:85:FB:73:DE:82:42:AD:C9:AF:1E:87:CB:80:FE X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:ff:b5:74:c9:ad:f4:e2:f1:c6:0a:3d:bf:19:39:01:d2: ab:66:1a:9a:5e:ee:1f:e8:9f:ea:07:6b:a7:3f:72:a6:18:b6: 7c:2a:fc:4b:8a:93:bc:97:9b:90:90:88:75:f7:f2:fc:4f:0b: 0a:10:77:32:00:73:4e:1f:94:a1:51:e9:a8:63:a5:9a:25:99: 87:21:5f:43:b6:06:cc:60:c2:89:f2:ca:04:86:0a:35:ca:ad: e2:b1:94:f8:41:65:ac:8b:c0:2a:55:b9:81:fe:43:9b:03:cc: c4:ea:e4:9a:cd:34:58:d5:55:96:b5:db:7b:9f:aa:0d:b1:24: c2:d9:a1:51:aa:fc:2f:da:ba:4b:23:1b:aa:4e:22:39:07:09: 3f:78:78:39:d1:04:8b:e3:30:fe:61:8e:3e:da:b1:73:21:a0: 72:93:6c:39:b6:b3:af:68:74:97:d3:2f:5f:e3:0f:43:df:82: 4f:c5:32:3d:3d:47:6e:f2:f6:b0:ad:b5:4d:c6:ee:ed:40:17: e4:35:ef:6a:56:b5:21:45:c6:d7:57:80:dc:13:47:a0:10:ce: 50:83:c9:4c:11:92:3d:46:e1:90:82:a3:59:2e:1f:af:de:81: 01:3c:dc:6b:22:5f:2f:5c:3c:b6:4f:bb:ae:0a:66:55:eb:7d: c0:56:2d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUxMDE5MDM0NjI3WhcNMjUxMDI2MDM0NjI3WjAYMRYwFAYD VQQDEw02OGY0NWYxMy1mMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Hf4NGDRJXeIr2JwxpP+7M2NQ7IJOTf/e1T+XIA8RlZZOjetk515nKUF3muA tgZ30MDlCIqYDZn1AeXi7T7VANFY/uul8Gj7EGOP7We3/t58j5SnzahOsSXsCNvY l3q1VUHd9jKk0xu/6ScLB6GIalSz5EVsHJOm+z6Uz8U+PR08HR7xx8ARKuFKHmtA EhL5udoG62YV3I39jgO9MbYpmbvLlHEIKrqO1tv04Q6S373Zz7ZunetfcjbOOIrT iFfctwuWbyHN5dNj7jy1XEztgRpSSsmqElQnqxL3nZWEvSwH+BVcrx1COj/t44v5 a4aJE9sYJAeUFt7/0YFsks1DwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9nmme1 V4X7c96CQq3Jrx6Hy4D+MB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Y/+1dMmt9OLxxgo9vxk5AdKrZhqaXu4f6J/qB2unP3KmGLZ8KvxL ipO8l5uQkIh19/L8TwsKEHcyAHNOH5ShUemoY6WaJZmHIV9DtgbMYMKJ8soEhgo1 yq3isZT4QWWsi8AqVbmB/kObA8zE6uSazTRY1VWWtdt7n6oNsSTC2aFRqvwv2rpL IxuqTiI5Bwk/eHg50QSL4zD+YY4+2rFzIaByk2w5trOvaHSX0y9f4w9D34JPxTI9 PUdu8vawrbVNxu7tQBfkNe9qVrUhRcbXV4DcE0egEM5Qg8lMEZI9RuGQgqNZLh+v 3oEBPNxrIl8vXDy2T7uuCmZV633AVi2f -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:42 2025 by rpki-client