$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: dHZx25jYCGrIX9BpRTtkcHHLYeeJuvkTnkk11wOLHKE= Subject key identifier: C3:80:C0:01:E9:2C:32:E3:FE:C2:34:90:B2:55:D0:C5:F0:5E:41:A5 Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 51 Signing time: Sun 19 Oct 2025 10:39:02 +0000 Manifest this update: Sun 19 Oct 2025 10:39:02 +0000 Manifest next update: Sun 26 Oct 2025 10:39:02 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: 2tJff2pL50TmfKr1YdVTE47klDfcioIVzCK3J2PC4qQ=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Oct 19 10:39:02 2025 GMT Not After : Oct 26 10:39:02 2025 GMT Subject: CN=68f4bfc6-3c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:70:35:a3:0f:67:27:43:64:9e:c8:2f:7b: 60:cb:2c:08:22:da:e1:c3:f4:ef:21:6d:b1:66:9c: 5b:65:41:f4:7b:c7:21:1f:d2:c5:8c:80:68:9f:09: 69:4a:2f:be:c2:a5:06:33:2b:6a:a2:4a:5f:bd:54: 64:84:6a:14:f7:6f:b1:09:dd:af:7f:c5:d5:f0:78: 21:7e:33:2a:30:23:83:7a:9d:49:54:ab:2a:cf:91: d7:9d:33:d3:2d:23:71:fb:ab:9b:db:c2:2b:6a:80: 3a:a6:26:6d:0b:40:54:fa:8e:25:38:83:36:42:63: 10:57:6e:78:91:da:fe:f8:4f:bf:df:37:a3:25:49: ac:99:25:2d:d6:d8:b1:ec:72:68:a9:f0:4f:8b:32: b4:91:bf:e6:21:8b:9a:1b:0e:3f:2a:a8:22:e4:cb: f6:2e:4c:f4:de:f5:8e:56:0d:84:80:83:7a:ac:13: 03:20:bd:28:81:0e:63:d4:2d:1a:10:1b:42:60:5f: f6:61:d5:c5:7c:5f:fb:4b:87:ea:96:f1:75:9d:b7: e6:0c:b2:e0:4e:df:8f:07:2a:0d:f2:db:d6:a8:33: 39:29:1f:3f:e2:b5:ac:d1:69:ec:11:29:30:26:ed: 18:c1:8f:31:3b:44:0c:a6:49:c5:48:f2:a0:c3:68: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:80:C0:01:E9:2C:32:E3:FE:C2:34:90:B2:55:D0:C5:F0:5E:41:A5 X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f4:2d:42:7d:b1:fe:56:c7:36:ae:a1:ac:a7:4b:87:88:48: 16:26:89:25:ff:7d:43:12:ef:d4:bb:6c:6b:21:54:63:4a:52: a9:f5:e7:31:44:37:10:4a:ad:58:c9:ce:9b:61:49:e0:b1:2b: b9:4a:37:26:a5:66:67:28:d4:ed:e1:49:a9:fc:81:7d:65:19: 7b:92:98:3e:ca:9b:4a:80:dc:91:8d:db:7d:31:71:00:04:bc: 67:e5:d0:06:39:de:21:8e:4b:75:4f:ab:1c:54:b3:cd:cd:0f: 7f:c7:0a:d6:28:90:17:62:89:b7:08:68:d4:31:c2:30:ad:58: 58:3a:53:ea:c7:a1:88:71:70:61:e6:c5:a5:53:1b:b9:43:22: 8a:79:4b:9e:25:c8:64:fe:5c:d2:5c:87:a3:63:d4:79:22:08: 5c:b1:7a:8a:8e:10:ab:b3:94:26:44:ad:86:1a:31:8f:4a:ec: 5d:b6:13:d0:29:b8:19:dd:b6:d0:76:40:2f:fc:05:bc:96:8d: 12:f5:88:d8:34:b6:18:79:42:07:89:76:96:77:4d:1d:2c:56: 96:37:ea:ce:e5:8a:39:fd:38:b4:96:6b:e2:7d:36:f6:ea:32: 33:c0:b5:83:af:06:6e:c2:18:17:b5:70:20:83:27:fe:e1:c5: a5:64:94:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTEwMTkxMDM5MDJaFw0yNTEwMjYxMDM5MDJaMBgxFjAUBgNV BAMTDTY4ZjRiZmM2LTNjOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCokXA1ow9nJ0Nknsgve2DLLAgi2uHD9O8hbbFmnFtlQfR7xyEf0sWMgGifCWlK L77CpQYzK2qiSl+9VGSEahT3b7EJ3a9/xdXweCF+MyowI4N6nUlUqyrPkdedM9Mt I3H7q5vbwitqgDqmJm0LQFT6jiU4gzZCYxBXbniR2v74T7/fN6MlSayZJS3W2LHs cmip8E+LMrSRv+Yhi5obDj8qqCLky/YuTPTe9Y5WDYSAg3qsEwMgvSiBDmPULRoQ G0JgX/Zh1cV8X/tLh+qW8XWdt+YMsuBO348HKg3y29aoMzkpHz/itazRaewRKTAm 7RjBjzE7RAymScVI8qDDaEVfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw4DAAeks MuP+wjSQslXQxfBeQaUwHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ/0LUJ9sf5WxzauoaynS4eISBYmiSX/fUMS79S7bGshVGNKUqn15zFE NxBKrVjJzpthSeCxK7lKNyalZmco1O3hSan8gX1lGXuSmD7Km0qA3JGN230xcQAE vGfl0AY53iGOS3VPqxxUs83ND3/HCtYokBdiibcIaNQxwjCtWFg6U+rHoYhxcGHm xaVTG7lDIop5S54lyGT+XNJch6Nj1HkiCFyxeoqOEKuzlCZErYYaMY9K7F22E9Ap uBndttB2QC/8BbyWjRL1iNg0thh5QgeJdpZ3TR0sVpY36s7lijn9OLSWa+J9Nvbq MjPAtYOvBm7CGBe1cCCDJ/7hxaVklKg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:36 2025 by rpki-client