$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: XjvNO0NCTGDdER4ZA/+9WVlPClwm5lT1oX7ODnXKT78= Subject key identifier: A4:70:A6:5D:E9:E0:E6:7B:F7:AD:0E:94:49:58:24:19:B1:C7:96:05 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 70 Signing time: Sun 19 Oct 2025 10:24:48 +0000 Manifest this update: Sun 19 Oct 2025 10:24:48 +0000 Manifest next update: Sun 26 Oct 2025 10:24:48 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: xXzv+9Xsbn+BvWTeDeMsLcLmiZGXKKdsRmtMAnTEE4Q=) 2: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: cUCnwUzBgOkdgH52sYU+IHvJQMt7Wg+jJl+nGicq16I=) 3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: rkd9k1u1dkPxEMEh5w+r9Bswb8IlB1n+y2yWKJIM8Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Oct 19 10:24:48 2025 GMT Not After : Oct 26 10:24:48 2025 GMT Subject: CN=68f4bc70-5b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:8c:29:fe:e7:36:91:af:38:15:95:87:eb: cd:97:50:4b:62:23:7c:7a:4b:2e:b4:60:34:7a:82: 68:73:4a:64:ea:1f:ac:03:3c:67:4e:5a:3b:8d:de: f8:b4:a7:a2:86:37:79:41:6c:fb:8a:82:bd:db:1b: 49:99:bf:50:2d:ec:cc:4e:b0:54:34:31:c1:fd:af: 1b:2b:aa:73:d0:08:68:f5:73:f4:3a:3a:f2:f0:ea: 77:86:63:f4:88:a6:b8:19:0c:7a:1e:ca:0e:f1:56: 84:e1:de:b1:31:6c:22:48:83:d3:bc:88:0c:cd:4c: f5:37:de:dd:a6:b0:52:7e:19:bc:8a:b8:14:5e:86: ff:f2:87:b2:b5:48:47:c7:9b:b3:97:2e:21:4a:4c: 8b:a5:f9:8b:e4:29:be:5a:5c:27:21:e7:aa:9d:23: 7f:2b:ce:3a:d8:08:7c:15:d8:7a:20:86:15:77:f1: 02:66:ed:dc:f1:3f:d3:f4:43:42:ba:15:97:e8:84: 93:57:21:f0:41:3e:48:08:c1:40:78:1e:4b:c2:9c: 31:2f:54:1b:8e:de:70:6e:7e:33:35:31:d2:4f:a4: af:e0:b2:aa:b3:d1:b2:96:4e:a0:bf:6a:93:ee:8c: 59:e5:ba:66:b4:b9:ed:db:37:17:bc:25:fc:46:f4: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:70:A6:5D:E9:E0:E6:7B:F7:AD:0E:94:49:58:24:19:B1:C7:96:05 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d2:75:7c:5f:24:23:15:3b:48:8a:df:b0:40:5e:c6:91:71: 17:5d:09:0d:73:9e:08:63:a2:2a:4e:99:a9:56:04:aa:f7:9f: 46:ac:20:a7:6f:8c:a2:ed:31:60:49:7d:f9:6a:af:5c:60:e8: b0:21:aa:b7:07:ae:0a:28:8d:87:a9:38:0f:cd:87:a5:f9:fd: 2f:97:d5:61:0e:16:19:e7:8b:3b:37:79:3b:91:fe:71:04:de: fa:f9:61:68:88:e8:8b:26:d6:45:f6:ba:19:da:91:54:50:0e: 65:27:30:2a:85:26:f7:ed:47:41:e2:8a:3e:68:06:c1:ef:4c: e4:1a:19:5a:bf:11:b1:55:34:c5:30:c1:57:e0:78:f3:1d:2e: 79:29:89:2f:2b:ca:94:7e:60:a8:7d:9a:aa:4b:58:1a:9a:9b: d1:4b:9c:be:3e:c1:c4:a3:70:fc:de:42:a1:81:bb:df:22:3e: cb:41:ce:3e:b8:1d:9c:8e:14:9e:73:f4:65:ac:e8:f6:c7:f6: 8c:6a:73:b3:a9:41:92:79:5a:ee:a7:b8:c4:fe:3d:a5:d1:bc: 80:82:dd:bb:94:d2:d8:1b:b8:d9:6c:32:80:a7:0c:c9:e0:4c: e1:23:64:e8:68:98:0c:7b:f9:9c:8e:7c:eb:55:de:69:17:c2: 53:53:fc:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZGRjExMC8GA1UEBRMoREZDQThGREFBNUZFRjk0OEUwRUNGNkY5QzcwMzYzOUI1 NjUzOUQ5OTAeFw0yNTEwMTkxMDI0NDhaFw0yNTEwMjYxMDI0NDhaMBgxFjAUBgNV BAMTDTY4ZjRiYzcwLTViODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8BYwp/uc2ka84FZWH682XUEtiI3x6Sy60YDR6gmhzSmTqH6wDPGdOWjuN3vi0 p6KGN3lBbPuKgr3bG0mZv1At7MxOsFQ0McH9rxsrqnPQCGj1c/Q6OvLw6neGY/SI prgZDHoeyg7xVoTh3rExbCJIg9O8iAzNTPU33t2msFJ+GbyKuBRehv/yh7K1SEfH m7OXLiFKTIul+YvkKb5aXCch56qdI38rzjrYCHwV2HoghhV38QJm7dzxP9P0Q0K6 FZfohJNXIfBBPkgIwUB4HkvCnDEvVBuO3nBufjM1MdJPpK/gsqqz0bKWTqC/apPu jFnluma0ue3bNxe8JfxG9JwVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpHCmXeng 5nv3rQ6USVgkGbHHlgUwHwYDVR0jBBgwFoAU38qP2qX++Ujg7Pb5xwNjm1ZTnZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkZGLzJEQTU1OTEyMTQx NjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5a ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzhxUDJxWC0tVWpnN1BiNXh3TmptMVpUblprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkZGLzJEQTU1OTEyMTQxNjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVq ZzdQYjV4d05qbTFaVG5aay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL7SdXxfJCMVO0iK37BAXsaRcRddCQ1znghjoipOmalWBKr3n0asIKdv jKLtMWBJfflqr1xg6LAhqrcHrgoojYepOA/Nh6X5/S+X1WEOFhnnizs3eTuR/nEE 3vr5YWiI6Ism1kX2uhnakVRQDmUnMCqFJvftR0Hiij5oBsHvTOQaGVq/EbFVNMUw wVfgePMdLnkpiS8rypR+YKh9mqpLWBqam9FLnL4+wcSjcPzeQqGBu98iPstBzj64 HZyOFJ5z9GWs6PbH9oxqc7OpQZJ5Wu6nuMT+PaXRvICC3buU0tgbuNlsMoCnDMng TOEjZOhomAx7+ZyOfOtV3mkXwlNT/Gk= -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:45 2025 by rpki-client