$ rpki-client -vvf rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft File: IPxzgnJ0AC605K7oniD9DRc_soU.mft (raw, json) Hash identifier: cE6t5LL8dnnmzzjtrgLGUlBj8Nuk54UrOMWOqmCm9BE= Subject key identifier: 6F:C6:2F:B4:DD:E9:47:91:E0:A3:08:A5:C0:7C:41:92:76:60:41:80 Authority key identifier: 20:FC:73:82:72:74:00:2E:B4:E4:AE:E8:9E:20:FD:0D:17:3F:B2:85 Certificate issuer: /CN=A91578DF/serialNumber=20FC73827274002EB4E4AEE89E20FD0D173FB285 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft Manifest number: 13 Signing time: Sun 19 Oct 2025 11:31:22 +0000 Manifest this update: Sun 19 Oct 2025 11:31:21 +0000 Manifest next update: Sun 26 Oct 2025 11:31:21 +0000 Files and hashes: 1: IPxzgnJ0AC605K7oniD9DRc_soU.crl (hash: ilObEI15+wcYvKcI+z9J/DbF7iudxi96iPYXY8qFwR4=) 2: 067CE6C895C811F09500A713C4F9AE02.roa (hash: F7sXmHSOKEMQAl2AShUlUBMJsajhaZjMOMLbEcGXNOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.crl rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91578DF, serialNumber=20FC73827274002EB4E4AEE89E20FD0D173FB285 Validity Not Before: Oct 19 11:31:21 2025 GMT Not After : Oct 26 11:31:21 2025 GMT Subject: CN=68f4cc09-8b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:e8:8a:3a:78:cb:67:59:61:97:36:d4:ab: c1:ab:93:44:28:c1:03:a9:01:24:38:6c:ac:97:33: 07:96:62:0c:d4:7c:c0:02:73:c7:dc:4d:88:0a:52: 98:b5:d7:7d:b5:b2:3a:01:f5:4a:2f:fd:21:a3:85: ea:79:90:89:14:d8:29:a9:08:8d:be:8f:2c:1b:8c: cd:97:c3:91:83:28:47:76:b7:c9:c3:10:8c:b1:52: 12:bf:88:93:bd:39:d0:7e:02:73:d6:db:dc:e4:9f: ae:13:d0:5b:3b:00:93:f0:2d:7b:8e:df:54:4d:2c: 1c:a6:98:c9:6a:42:7d:6c:be:de:85:3c:c3:09:91: ab:27:9e:1a:36:6c:1f:89:17:a9:d3:2d:74:50:1f: 34:41:81:00:e5:77:23:55:f2:9c:78:d0:3b:5d:76: c9:cc:33:21:6e:3b:e4:69:ba:c0:c0:4b:5a:95:1c: 20:45:3b:ae:b4:24:85:f3:51:36:9e:ea:7e:f2:fa: 8d:97:22:16:29:8d:18:a1:b0:4a:03:7e:ea:3a:91: 29:72:8d:2c:2c:88:53:86:d8:14:9c:ef:2c:74:00: a5:5c:87:e1:20:63:14:2e:3d:20:12:77:db:cc:85: d9:6f:26:a7:a4:0e:d8:c3:42:9b:d4:8c:6c:df:6c: 89:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C6:2F:B4:DD:E9:47:91:E0:A3:08:A5:C0:7C:41:92:76:60:41:80 X509v3 Authority Key Identifier: keyid:20:FC:73:82:72:74:00:2E:B4:E4:AE:E8:9E:20:FD:0D:17:3F:B2:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a2:31:f0:25:0e:80:4f:b7:17:0d:0e:c0:33:01:e5:c6:b1: 69:e3:e3:58:71:a1:86:a4:4f:7b:72:a6:a2:7a:24:34:07:e1: 2b:b2:a8:bf:67:e8:48:02:93:1f:0e:34:33:af:f9:b9:36:0a: f8:52:c0:4c:74:fc:e1:b9:fb:17:2a:13:52:d6:95:e9:80:f5: 5d:50:b3:51:a0:a7:2f:19:31:6c:49:c1:bf:32:35:51:00:71: 8c:31:1d:4c:f6:f2:f7:59:46:61:ae:ab:e0:73:01:83:c3:a8: 35:8b:e9:c8:84:42:2a:0d:19:97:c8:11:8e:5e:6f:53:3d:58: f2:20:54:2b:3b:23:38:58:36:d6:e0:f5:4b:fc:b0:c2:c8:3b: 47:57:a3:11:b6:aa:40:d3:2b:ee:ae:61:c4:77:d7:8f:b4:a4: f1:02:2a:63:09:26:7d:8e:8e:e0:4b:e8:5d:3f:ba:16:98:f9: 19:49:91:4a:30:2e:b8:bf:67:f7:64:c2:d7:d3:7b:69:56:79: 64:65:af:22:b5:26:9d:6c:3c:5d:1c:57:59:4f:64:6d:8a:74: 6a:1a:a8:b9:8f:11:f8:10:cc:97:c1:55:d2:10:f6:f5:18:b0: 1e:fc:ee:23:e1:52:ac:bb:96:20:a8:ac:63:da:fe:09:5d:07: 74:4c:9f:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzhERjExMC8GA1UEBRMoMjBGQzczODI3Mjc0MDAyRUI0RTRBRUU4OUUyMEZEMEQx NzNGQjI4NTAeFw0yNTEwMTkxMTMxMjFaFw0yNTEwMjYxMTMxMjFaMBgxFjAUBgNV BAMTDTY4ZjRjYzA5LThiOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYPOiKOnjLZ1lhlzbUq8Grk0QowQOpASQ4bKyXMweWYgzUfMACc8fcTYgKUpi1 1321sjoB9Uov/SGjhep5kIkU2CmpCI2+jywbjM2Xw5GDKEd2t8nDEIyxUhK/iJO9 OdB+AnPW29zkn64T0Fs7AJPwLXuO31RNLBymmMlqQn1svt6FPMMJkasnnho2bB+J F6nTLXRQHzRBgQDldyNV8px40DtddsnMMyFuO+RpusDAS1qVHCBFO660JIXzUTae 6n7y+o2XIhYpjRihsEoDfuo6kSlyjSwsiFOG2BSc7yx0AKVch+EgYxQuPSASd9vM hdlvJqekDtjDQpvUjGzfbInbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb8YvtN3p R5HgowilwHxBknZgQYAwHwYDVR0jBBgwFoAUIPxzgnJ0AC605K7oniD9DRc/soUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3OERGLzA1MUNGMUQ0OTVD NzExRjBBQkUyRkQ1RkM0RjlBRTAyL0lQeHpnbkowQUM2MDVLN29uaUQ5RFJjX3Nv VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVB4emduSjBBQzYwNUs3b25pRDlEUmNfc29VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 OERGLzA1MUNGMUQ0OTVDNzExRjBBQkUyRkQ1RkM0RjlBRTAyL0lQeHpnbkowQUM2 MDVLN29uaUQ5RFJjX3NvVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIiiMfAlDoBPtxcNDsAzAeXGsWnj41hxoYakT3typqJ6JDQH4SuyqL9n 6EgCkx8ONDOv+bk2CvhSwEx0/OG5+xcqE1LWlemA9V1Qs1Ggpy8ZMWxJwb8yNVEA cYwxHUz28vdZRmGuq+BzAYPDqDWL6ciEQioNGZfIEY5eb1M9WPIgVCs7IzhYNtbg 9Uv8sMLIO0dXoxG2qkDTK+6uYcR314+0pPECKmMJJn2OjuBL6F0/uhaY+RlJkUow Lri/Z/dkwtfTe2lWeWRlryK1Jp1sPF0cV1lPZG2KdGoaqLmPEfgQzJfBVdIQ9vUY sB787iPhUqy7liCorGPa/gldB3RMn7c= -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:03 2025 by rpki-client