$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft File: sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json) Hash identifier: 3sO70ZOdAbIY6S8qw0l2L0eycq3dQdk43zY+mS6hqi8= Subject key identifier: 85:21:03:6F:34:AA:80:22:0F:84:57:A2:00:34:75:93:1F:0E:25:97 Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft Manifest number: 0846 Signing time: Sat 18 Oct 2025 21:57:56 +0000 Manifest this update: Sat 18 Oct 2025 21:57:55 +0000 Manifest next update: Sat 25 Oct 2025 21:57:55 +0000 Files and hashes: 1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: 05vF42TryUz8fg3k19cx125uE900qzB2iuFpd/IA1PM=) 2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: 4EbGKeFdURg1erPWSPKY/29bASejNm7sStafQa8KWis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Validity Not Before: Oct 18 21:57:55 2025 GMT Not After : Oct 25 21:57:55 2025 GMT Subject: CN=68f40d64-71d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2f:3e:e2:92:1d:22:b2:84:34:cf:32:ce:2c: 21:71:33:17:0a:5e:0d:2b:b1:a8:6a:0a:ab:2a:a7: b5:56:b4:e5:6b:be:1b:2b:60:77:0b:ad:1a:f7:c9: 11:22:c8:be:48:b5:69:f0:c5:28:d5:fb:18:03:b4: 59:94:11:07:84:9f:e6:94:50:dd:13:96:b9:0c:24: 14:94:d6:3c:10:55:7c:70:dc:6a:11:33:0e:9a:29: ce:49:f8:ee:f0:93:dc:e3:20:60:5b:16:9b:7b:a6: 35:58:49:74:1d:b4:14:3a:71:c2:4c:60:fd:e7:fd: 9c:a5:fa:de:d5:9b:e2:34:10:a0:4c:87:58:23:60: fc:c6:90:ab:72:a1:a6:04:d5:44:08:fc:5d:eb:80: ba:24:02:62:fe:34:f0:3d:e2:b1:fd:97:96:bb:4d: 1a:96:91:40:09:67:a4:11:da:d7:50:5d:08:ca:d2: ad:a0:3a:82:52:ac:b8:1d:73:ef:07:a6:86:33:28: 03:41:3e:af:59:be:cb:b5:3d:8a:36:30:40:ab:99: 20:65:3d:69:46:87:2c:18:c9:99:11:d3:02:c1:42: 43:77:dd:89:86:60:9c:2c:c3:8d:98:bd:dd:88:e3: 38:b2:ca:1d:af:8d:04:d2:1d:76:27:b7:b4:82:67: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:21:03:6F:34:AA:80:22:0F:84:57:A2:00:34:75:93:1F:0E:25:97 X509v3 Authority Key Identifier: keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7d:9f:9b:0f:3c:b4:06:81:13:dd:84:36:8e:55:f8:ec:f1: e9:08:fe:e6:9a:65:47:e4:68:88:30:a3:5b:1c:5d:38:7a:d9: 1c:54:d5:e0:83:ef:f5:b3:2c:92:70:45:20:5a:ec:78:08:4c: 04:65:c1:06:03:9f:db:64:5f:d0:3b:41:2c:dc:27:e7:b3:d2: b4:c2:d9:5b:81:3a:18:c4:a0:f2:4b:dd:b1:ff:4b:f9:34:e3: c3:e3:40:c8:b2:5b:2c:c5:1a:ce:40:04:50:3f:71:04:08:a1: 40:a6:d3:56:9b:f5:51:81:db:33:c3:eb:8c:4e:b6:60:93:95: 73:7c:88:86:64:9d:fe:57:01:11:7b:ed:71:9f:6b:76:20:48: fd:c9:a1:f4:38:52:c3:da:c7:cb:51:e2:3e:b9:70:c5:ae:1e: 92:50:6f:9b:97:56:f7:c8:34:5b:b4:5a:9f:ab:29:ca:cf:cc: b4:de:e8:1b:e5:49:27:f3:49:1b:f9:00:88:f5:2f:8b:5b:f3: 0c:57:95:d4:38:8f:56:73:4a:0a:ef:33:20:db:c8:de:6a:32: ca:32:57:ab:e6:5a:bf:07:b9:c7:90:86:4f:6a:67:66:22:c5: 8f:f5:0e:70:98:ba:b2:74:fa:cb:fb:8e:da:e2:ea:93:e3:83: 70:3a:23:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky NzI2M0NFRjAwHhcNMjUxMDE4MjE1NzU1WhcNMjUxMDI1MjE1NzU1WjAYMRYwFAYD VQQDEw02OGY0MGQ2NC03MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4i8+4pIdIrKENM8yziwhcTMXCl4NK7GoagqrKqe1VrTla74bK2B3C60a98kR Isi+SLVp8MUo1fsYA7RZlBEHhJ/mlFDdE5a5DCQUlNY8EFV8cNxqETMOminOSfju 8JPc4yBgWxabe6Y1WEl0HbQUOnHCTGD95/2cpfre1ZviNBCgTIdYI2D8xpCrcqGm BNVECPxd64C6JAJi/jTwPeKx/ZeWu00alpFACWekEdrXUF0IytKtoDqCUqy4HXPv B6aGMygDQT6vWb7LtT2KNjBAq5kgZT1pRocsGMmZEdMCwUJDd92JhmCcLMONmL3d iOM4ssodr40E0h12J7e0gmeS8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUhA280 qoAiD4RXogA0dZMfDiWXMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3 NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzdDMy81REE0OEMyMEU3NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpv eVlKeVhRRXFGQ2tuSmp6dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXfZ+bDzy0BoET3YQ2jlX47PHpCP7mmmVH5GiIMKNbHF04etkcVNXg g+/1syyScEUgWux4CEwEZcEGA5/bZF/QO0Es3Cfns9K0wtlbgToYxKDyS92x/0v5 NOPD40DIslssxRrOQARQP3EECKFAptNWm/VRgdszw+uMTrZgk5VzfIiGZJ3+VwER e+1xn2t2IEj9yaH0OFLD2sfLUeI+uXDFrh6SUG+bl1b3yDRbtFqfqynKz8y03ugb 5Ukn80kb+QCI9S+LW/MMV5XUOI9Wc0oK7zMg28jeajLKMler5lq/B7nHkIZPamdm IsWP9Q5wmLqydPrL+47a4uqT44NwOiOl -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:44 2025 by rpki-client