$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: WvMUM3QLq4bt/QEHVSYmDvVOVwDjlYV1K4+U6aEIqoc= Subject key identifier: 3A:30:23:EE:A7:58:DA:39:AF:44:F4:A1:3F:86:74:B1:D7:EE:48:6E Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 01AA Signing time: Sun 19 Oct 2025 05:46:18 +0000 Manifest this update: Sun 19 Oct 2025 05:46:17 +0000 Manifest next update: Sun 26 Oct 2025 05:46:17 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: H3tpI4RvOjxA04Xy9pMTAJLaSezEnXDN7Clf8QoexZ4=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: SraOPRWyc/dP6CmZHQSFQKbaOH7T0tjQk0r0ukGNNTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: Oct 19 05:46:17 2025 GMT Not After : Oct 26 05:46:17 2025 GMT Subject: CN=68f47b2a-aa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:b2:3d:49:ed:98:20:9a:76:98:fa:5e:bb: 70:95:81:5c:5f:74:d0:b0:72:a7:7d:7a:a0:7a:67: 0b:2f:62:07:42:ba:6d:c8:23:56:ce:6a:be:bc:2d: d9:8b:fa:2a:0c:c0:82:84:16:f8:01:ec:fb:14:bb: ea:93:61:24:a8:5f:22:cc:5f:2f:e8:c9:fc:27:0b: 0f:57:78:ae:7c:bf:d7:dd:85:8e:57:df:39:cb:d8: f5:bf:c4:36:77:66:ab:7e:a0:17:ba:7f:64:d2:21: 58:d8:81:bd:8b:a1:69:e4:c8:01:bf:a5:1d:30:0c: ee:6b:b0:ab:42:d8:42:19:57:1d:80:e5:04:dc:42: 83:e5:6a:d1:dc:43:78:64:5b:3c:f8:88:c0:e4:c4: cf:f2:5a:2d:ce:d4:e0:7f:ec:85:2f:7f:b1:d4:99: 17:b5:f5:18:5a:9a:ac:da:15:57:08:29:8c:67:04: fb:3e:1f:1c:2a:45:ec:21:3a:b2:2b:46:08:b2:18: 35:66:c5:d3:6e:d2:ba:4c:bb:e5:42:b3:9f:b5:5d: 58:70:cd:74:92:57:03:81:14:26:da:e2:04:0a:15: 41:3b:f1:b1:fc:b4:f6:48:1d:91:56:8a:64:9d:91: 21:9c:2a:93:10:d5:1f:02:04:5e:0d:84:4e:8d:91: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:30:23:EE:A7:58:DA:39:AF:44:F4:A1:3F:86:74:B1:D7:EE:48:6E X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b9:0e:e9:01:01:23:5e:02:9c:d7:f4:41:29:6f:1f:a6:57: f6:f2:0b:43:e4:20:d0:74:e2:5c:74:5f:fc:4b:94:21:da:90: 87:f5:a5:78:35:a1:24:e0:0c:bc:9a:89:91:07:d3:d2:3c:ad: 40:e7:7c:69:b4:dc:20:a0:7a:41:71:04:95:08:37:e6:57:3e: a5:14:90:76:b3:24:e1:d5:fd:59:22:7b:3b:2d:d0:76:85:18: 55:09:9e:69:aa:d1:da:b0:ee:e8:d7:ff:d5:67:ca:25:2a:b5: 31:3f:05:10:a2:01:f6:e3:0d:e3:cd:86:0a:9d:f3:97:3d:86: 94:e1:06:4f:6d:d5:ff:9b:13:64:f2:91:cb:a4:77:13:d2:a1: 1f:af:e6:26:ef:b2:c8:59:6d:17:42:14:a6:39:f4:e8:08:e5: b2:64:b4:1e:1d:92:f7:66:dd:7d:d7:f9:7f:b7:e1:12:35:10: 1e:8d:2f:a0:7a:fd:b5:91:16:1e:1b:34:0c:d1:bc:ab:51:83: d3:5c:17:f5:c0:c5:7b:07:4a:bb:0e:6b:8a:6a:83:08:9f:a2: fd:0e:c4:76:25:d6:14:74:fb:40:13:95:3a:3e:f0:7b:f5:7c: b0:4e:66:09:66:89:4f:0e:0e:22:ef:ca:b3:40:1e:20:9f:6c: 20:e8:0c:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUxMDE5MDU0NjE3WhcNMjUxMDI2MDU0NjE3WjAYMRYwFAYD VQQDEw02OGY0N2IyYS1hYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2+yPUntmCCadpj6XrtwlYFcX3TQsHKnfXqgemcLL2IHQrptyCNWzmq+vC3Z i/oqDMCChBb4Aez7FLvqk2EkqF8izF8v6Mn8JwsPV3iufL/X3YWOV985y9j1v8Q2 d2arfqAXun9k0iFY2IG9i6Fp5MgBv6UdMAzua7CrQthCGVcdgOUE3EKD5WrR3EN4 ZFs8+IjA5MTP8lotztTgf+yFL3+x1JkXtfUYWpqs2hVXCCmMZwT7Ph8cKkXsITqy K0YIshg1ZsXTbtK6TLvlQrOftV1YcM10klcDgRQm2uIEChVBO/Gx/LT2SB2RVopk nZEhnCqTENUfAgReDYROjZHfEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDowI+6n WNo5r0T0oT+GdLHX7khuMB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSuQ7pAQEjXgKc1/RBKW8fplf28gtD5CDQdOJcdF/8S5Qh2pCH9aV4 NaEk4Ay8momRB9PSPK1A53xptNwgoHpBcQSVCDfmVz6lFJB2syTh1f1ZIns7LdB2 hRhVCZ5pqtHasO7o1//VZ8olKrUxPwUQogH24w3jzYYKnfOXPYaU4QZPbdX/mxNk 8pHLpHcT0qEfr+Ym77LIWW0XQhSmOfToCOWyZLQeHZL3Zt191/l/t+ESNRAejS+g ev21kRYeGzQM0byrUYPTXBf1wMV7B0q7DmuKaoMIn6L9DsR2JdYUdPtAE5U6PvB7 9XywTmYJZolPDg4i78qzQB4gn2wg6Ay4 -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:02 2025 by rpki-client