$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: Zp/jbNht5QMp5N6ON5couE6Bj7eCQp2QsaudjP8Dq9w= Subject key identifier: A9:FC:93:AD:92:10:2E:F8:1A:52:A9:1B:9B:DC:3E:D4:EA:77:54:30 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B50 Signing time: Sat 18 Oct 2025 20:29:18 +0000 Manifest this update: Sat 18 Oct 2025 20:29:17 +0000 Manifest next update: Sat 25 Oct 2025 20:29:17 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: hSixVZdyDrVqHSTdofAL8geYsgSD5Ee3zj8ZcgIel1I=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8W2HO3OpHaqoA5bNjLREDozTCax3HtEwt5AMKNO3YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Oct 18 20:29:17 2025 GMT Not After : Oct 25 20:29:17 2025 GMT Subject: CN=68f3f89d-e0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:6c:f4:84:74:8a:45:4d:a4:a4:ff:f9:16: 69:35:80:d1:ed:76:12:41:22:45:69:82:ff:06:46: 4b:2c:27:19:b6:9a:7e:74:39:af:1c:ca:4d:88:65: a6:f4:be:d7:5b:06:f2:82:4b:4f:7f:13:28:3d:86: a5:e4:33:32:f5:7a:89:7e:c4:89:96:a1:fa:e4:e6: 0d:ff:89:bf:0b:b7:43:2b:b1:70:06:10:0c:f6:70: 2a:62:54:7b:6e:bb:8d:7b:4f:56:60:19:e4:d7:d5: d8:65:b2:3e:1b:aa:4b:ae:2e:44:f7:e2:b7:ee:e4: c4:4e:e5:55:07:00:27:b9:3f:85:96:79:af:66:d0: 89:7c:85:e5:a5:6f:d7:0b:d6:10:6e:9e:a5:2c:7d: d8:a9:6a:9e:b3:55:a1:7b:56:b0:14:5f:36:33:f8: 35:fa:65:8b:8d:35:23:e0:d5:ea:64:f2:17:06:b5: 1a:29:ce:90:0a:57:77:a2:5b:74:e4:09:66:e4:f1: ac:93:a7:04:57:6a:ef:a0:18:fb:27:98:d9:38:f7: a8:7d:3e:f1:41:aa:99:c9:2a:ec:d4:4a:d8:2f:fa: 93:92:63:45:36:6e:27:4e:36:69:39:12:6c:52:20: 7f:9e:ac:ac:8b:2c:36:93:7b:ff:20:49:2f:2a:62: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FC:93:AD:92:10:2E:F8:1A:52:A9:1B:9B:DC:3E:D4:EA:77:54:30 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:65:df:5b:05:07:de:ad:55:5f:ce:9f:d3:52:2a:ee:d6:76: f5:52:5f:0f:7c:6c:14:84:4a:f0:35:ec:9d:db:65:0f:f5:2e: 23:c9:83:d0:b0:6e:2c:00:74:db:fd:98:1e:b3:be:4f:66:20: 3f:a9:f2:10:85:89:3c:15:20:07:2d:f6:a7:45:94:1b:c1:19: f8:96:33:08:e3:5c:4e:02:ca:d4:a3:41:20:b9:1d:02:f2:87: d6:0c:2f:1f:18:00:af:62:9d:7b:35:88:5f:5c:a5:99:98:a6: c3:70:44:b1:9c:77:f7:ad:a8:f1:c4:39:2f:63:b9:c3:64:ad: 5c:7e:d8:63:f3:53:49:50:92:9e:5d:0a:c1:1f:f0:62:e3:97: 53:ca:53:74:06:ed:6d:bf:90:32:08:05:09:3a:0b:6c:a8:17: 34:72:48:7b:0c:f6:ad:a0:a3:60:5d:43:d7:b0:d4:11:9f:6b: 1d:87:60:bc:33:27:a3:c6:a9:09:5d:a4:91:c5:42:52:14:69: 08:b3:3d:08:87:c4:54:3d:73:9c:94:f3:8a:bd:51:b5:08:55: f6:b0:28:7e:4d:d9:b2:3d:72:33:c3:6a:29:59:fb:dc:5a:01: 91:fb:e1:70:06:f7:b2:64:32:eb:20:52:98:6a:1b:d6:2f:ca: a9:34:7c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUxMDE4MjAyOTE3WhcNMjUxMDI1MjAyOTE3WjAYMRYwFAYD VQQDEw02OGYzZjg5ZC1lMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zxs9IR0ikVNpKT/+RZpNYDR7XYSQSJFaYL/BkZLLCcZtpp+dDmvHMpNiGWm 9L7XWwbygktPfxMoPYal5DMy9XqJfsSJlqH65OYN/4m/C7dDK7FwBhAM9nAqYlR7 bruNe09WYBnk19XYZbI+G6pLri5E9+K37uTETuVVBwAnuT+FlnmvZtCJfIXlpW/X C9YQbp6lLH3YqWqes1Whe1awFF82M/g1+mWLjTUj4NXqZPIXBrUaKc6QCld3olt0 5Alm5PGsk6cEV2rvoBj7J5jZOPeofT7xQaqZySrs1ErYL/qTkmNFNm4nTjZpORJs UiB/nqysiyw2k3v/IEkvKmIsXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn8k62S EC74GlKpG5vcPtTqd1QwMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApZd9bBQferVVfzp/TUiru1nb1Ul8PfGwUhErwNeyd22UP9S4jyYPQ sG4sAHTb/Zges75PZiA/qfIQhYk8FSAHLfanRZQbwRn4ljMI41xOAsrUo0EguR0C 8ofWDC8fGACvYp17NYhfXKWZmKbDcESxnHf3rajxxDkvY7nDZK1cfthj81NJUJKe XQrBH/Bi45dTylN0Bu1tv5AyCAUJOgtsqBc0ckh7DPatoKNgXUPXsNQRn2sdh2C8 MyejxqkJXaSRxUJSFGkIsz0Ih8RUPXOclPOKvVG1CFX2sCh+TdmyPXIzw2opWfvc WgGR++FwBveyZDLrIFKYahvWL8qpNHxF -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:01 2025 by rpki-client