$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: xHf85zcZmBV1+F9AOn4vsKSePevS4VHr79cAY2WLYvA= Subject key identifier: 2C:17:A9:50:84:06:01:CA:45:57:D9:FF:BF:9B:99:8B:2C:DF:CB:AC Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 090A Signing time: Sat 18 Oct 2025 22:42:40 +0000 Manifest this update: Sat 18 Oct 2025 22:42:39 +0000 Manifest next update: Sat 25 Oct 2025 22:42:39 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: b6KiRzU4vtUE34rfynwylSSIWryDnT828gWXtcYJMVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Oct 18 22:42:39 2025 GMT Not After : Oct 25 22:42:39 2025 GMT Subject: CN=68f417df-0b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:53:41:8b:fb:53:14:64:80:a7:de:df:08: 5d:e7:ce:3a:44:92:eb:f5:8c:a5:10:69:03:23:52: e2:64:a3:fe:28:ab:25:1f:e8:87:64:6d:41:2e:53: bc:91:f9:ed:8b:5f:da:5a:36:9e:2f:0c:ca:2b:44: 9a:4a:b3:59:06:a3:a1:65:e4:ef:fb:46:ff:79:de: cc:d2:74:a8:85:09:71:18:5f:a4:ab:08:32:41:d4: 89:50:c7:92:cc:81:d2:42:4a:a9:b6:47:7c:9e:c0: 1e:7f:1a:60:aa:f9:5c:7b:8a:b9:04:0c:7f:0f:23: 5a:b1:33:e4:d7:32:db:ca:3b:53:98:12:cc:13:8e: a1:3e:12:45:e5:c4:b3:06:28:a6:3b:dd:11:01:1e: 06:c2:77:38:01:0b:a4:fe:46:cc:f8:a1:7e:20:10: b4:f5:26:67:88:87:99:f8:47:39:08:5f:8b:ec:24: 25:68:9c:83:e2:dc:e5:17:9a:39:76:b0:ec:60:cb: c9:da:f2:b3:0a:8b:0b:be:c5:68:4f:b3:f1:dd:b8: 27:a7:19:70:ab:9e:7b:41:1e:09:27:16:48:af:e0: ef:60:8f:f2:a0:d3:d7:7e:e7:3d:33:9c:e3:9a:6e: 7c:d6:5c:f1:cf:7f:0f:32:fd:37:53:a2:a8:6e:85: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:A9:50:84:06:01:CA:45:57:D9:FF:BF:9B:99:8B:2C:DF:CB:AC X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:5d:5a:e0:7e:65:e8:21:ca:64:fb:cb:97:19:80:82:dd:2c: d0:f5:63:7e:36:1b:9e:10:09:a8:cc:88:f7:a6:52:4c:e5:45: df:99:b2:79:7b:82:81:85:b7:ba:c2:74:b6:ae:24:6c:b8:85: c9:53:6a:b0:5d:50:16:45:8f:b9:46:92:ab:5a:22:2b:ca:f7: 76:37:ee:98:60:af:86:1c:cf:be:8d:f6:f0:7c:08:03:0b:57: 10:31:f0:c1:87:99:6d:a9:e1:74:9d:bf:ff:6e:94:c5:ba:02: 5f:43:68:35:2b:1a:4e:68:80:16:2d:06:fd:45:d6:46:b2:8e: bb:20:95:2d:a6:f2:90:7c:60:10:bc:8c:65:ae:a1:65:94:02: a0:51:21:ab:ff:82:eb:d5:71:01:b1:d9:55:01:32:5d:79:55: 9a:66:5d:ae:e4:17:18:d9:f9:a2:4b:44:c9:2d:d3:b7:38:52: dc:c1:0f:ff:7a:a8:d7:0f:c4:52:b3:90:9b:0a:37:dc:f4:93: 82:7b:45:53:0a:0e:47:a6:dc:82:b1:55:4d:c4:06:d1:8f:92: a3:74:e3:a4:5f:23:ab:f2:9e:06:c3:96:29:52:9e:2b:50:14: d3:22:e8:5a:a5:08:84:42:b1:d1:2f:bf:3f:33:fb:f7:ca:ea: d4:ff:d8:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUxMDE4MjI0MjM5WhcNMjUxMDI1MjI0MjM5WjAYMRYwFAYD VQQDEw02OGY0MTdkZi0wYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LhTQYv7UxRkgKfe3whd5846RJLr9YylEGkDI1LiZKP+KKslH+iHZG1BLlO8 kfnti1/aWjaeLwzKK0SaSrNZBqOhZeTv+0b/ed7M0nSohQlxGF+kqwgyQdSJUMeS zIHSQkqptkd8nsAefxpgqvlce4q5BAx/DyNasTPk1zLbyjtTmBLME46hPhJF5cSz BiimO90RAR4Gwnc4AQuk/kbM+KF+IBC09SZniIeZ+Ec5CF+L7CQlaJyD4tzlF5o5 drDsYMvJ2vKzCosLvsVoT7Px3bgnpxlwq557QR4JJxZIr+DvYI/yoNPXfuc9M5zj mm581lzxz38PMv03U6KoboXYuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwXqVCE BgHKRVfZ/7+bmYss38usMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXXVrgfmXoIcpk+8uXGYCC3SzQ9WN+NhueEAmozIj3plJM5UXfmbJ5 e4KBhbe6wnS2riRsuIXJU2qwXVAWRY+5RpKrWiIryvd2N+6YYK+GHM++jfbwfAgD C1cQMfDBh5ltqeF0nb//bpTFugJfQ2g1KxpOaIAWLQb9RdZGso67IJUtpvKQfGAQ vIxlrqFllAKgUSGr/4Lr1XEBsdlVATJdeVWaZl2u5BcY2fmiS0TJLdO3OFLcwQ// eqjXD8RSs5CbCjfc9JOCe0VTCg5HptyCsVVNxAbRj5KjdOOkXyOr8p4Gw5YpUp4r UBTTIuhapQiEQrHRL78/M/v3yurU/9iO -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:47 2025 by rpki-client