$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft File: AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json) Hash identifier: maCdPYqgDpw8cs7DJCFIj5WS73n9p9TiLozUBJmc3a8= Subject key identifier: 83:5E:F3:DD:E2:42:23:80:7E:C7:B5:75:F2:23:72:AD:BE:7A:FB:95 Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft Manifest number: 0234 Signing time: Sun 19 Oct 2025 04:08:43 +0000 Manifest this update: Sun 19 Oct 2025 04:08:42 +0000 Manifest next update: Sun 26 Oct 2025 04:08:42 +0000 Files and hashes: 1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: 7deYXjeGYwmyMsb3jqPzyproiB3EaXaKVdhREvD6YrI=) 2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: MijbaBFOBmjVn0NZXYmQ25vm+DrZhkqNokVzBodlkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Validity Not Before: Oct 19 04:08:42 2025 GMT Not After : Oct 26 04:08:42 2025 GMT Subject: CN=68f4644b-0ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:ba:d4:32:65:b1:90:19:31:c1:a5:fd:14: bc:83:fc:10:97:df:d9:91:b9:58:a7:5e:cd:09:cc: 21:cd:c4:fe:93:6c:bf:ef:76:2f:63:5d:23:37:c8: 96:de:49:4e:4c:08:d9:04:2f:c0:b4:ef:98:ee:dd: 7d:02:3b:24:99:77:97:af:53:c1:30:7d:4b:0d:1c: e8:41:2e:52:54:a8:13:4d:c1:9c:e9:ef:5b:54:6b: 1b:3d:33:4a:d8:f3:54:08:16:bb:39:80:bc:d2:67: 35:0f:0b:73:e6:e1:8d:64:bd:92:97:ca:f0:58:22: 24:7c:54:e5:da:79:a0:bc:3a:df:b3:16:21:8c:a9: 48:a4:f8:26:b2:d4:aa:c9:35:78:9d:40:77:ac:bf: 3c:18:cf:d4:af:22:b6:4d:37:d5:02:bd:9f:ea:12: fe:43:a0:1b:53:b7:24:38:e2:e8:aa:7b:0d:41:2f: 2e:58:ac:51:4c:30:64:45:20:32:60:2c:d8:8c:27: da:d9:66:f4:b7:f9:82:1a:c1:58:91:79:7f:43:84: 1d:ef:3d:b9:b6:56:0e:f9:a6:a8:68:76:b4:08:98: fc:d9:37:ed:12:2b:df:f5:f0:26:ea:c4:4b:71:6f: 60:11:72:95:07:8a:00:f1:07:c7:38:ec:61:9c:ab: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5E:F3:DD:E2:42:23:80:7E:C7:B5:75:F2:23:72:AD:BE:7A:FB:95 X509v3 Authority Key Identifier: keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:00:f8:c2:e9:6d:e1:6b:ff:57:f2:fb:c8:a4:29:27:2e:60: 8b:be:00:6f:c5:a9:f7:d7:42:cd:37:cc:7b:a4:bc:a0:74:0e: 3d:5c:dc:86:e3:da:1f:12:62:b8:b5:fc:43:1c:5d:8d:cb:da: 61:6e:8c:9b:32:9a:35:1e:4c:f2:ff:f6:31:71:f2:7b:8e:eb: da:3b:85:c4:4c:c8:7f:8f:5b:48:19:d4:31:3d:c3:fe:cb:5a: c2:7d:be:6e:f2:96:80:58:52:af:04:5e:fd:13:f5:a6:11:39: 45:ee:74:70:74:fa:2f:73:f8:0a:dc:72:8c:f1:42:0f:4a:5d: 14:1a:2e:b5:71:70:35:36:16:dc:c0:6c:25:1a:8f:23:c5:7b: 70:2e:8e:a1:ec:8c:08:c2:f0:b4:37:d6:78:70:0b:56:6b:b6: 60:bb:f8:b9:29:9d:cb:4d:63:75:c0:98:e1:ff:e0:c8:99:38: 81:80:36:66:1b:41:36:e4:26:52:bd:40:35:fc:b2:89:f5:7e: f4:54:17:4e:36:44:1c:bb:b7:fa:49:c5:24:0b:8c:af:f2:fc: 1c:8e:cb:9e:bf:60:96:8a:70:e0:20:11:54:cb:3a:1f:a6:ab: 12:5a:85:e5:51:d1:7d:1a:4e:a2:32:70:bb:13:1c:08:b1:37: 6a:12:b0:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRCMzI4RUIwMjA3 MTFFRjRFQUYwHhcNMjUxMDE5MDQwODQyWhcNMjUxMDI2MDQwODQyWjAYMRYwFAYD VQQDEw02OGY0NjQ0Yi0wYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9G61DJlsZAZMcGl/RS8g/wQl9/ZkblYp17NCcwhzcT+k2y/73YvY10jN8iW 3klOTAjZBC/AtO+Y7t19AjskmXeXr1PBMH1LDRzoQS5SVKgTTcGc6e9bVGsbPTNK 2PNUCBa7OYC80mc1Dwtz5uGNZL2Sl8rwWCIkfFTl2nmgvDrfsxYhjKlIpPgmstSq yTV4nUB3rL88GM/UryK2TTfVAr2f6hL+Q6AbU7ckOOLoqnsNQS8uWKxRTDBkRSAy YCzYjCfa2Wb0t/mCGsFYkXl/Q4Qd7z25tlYO+aaoaHa0CJj82TftEivf9fAm6sRL cW9gEXKVB4oA8QfHOOxhnKv3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINe893i QiOAfse1dfIjcq2+evuVMB8GA1UdIwQYMBaAFAGXBL5+Ss4LoSEUsyjrAgcR706v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhFMi85NzAxM0E0RTUw NDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pndWhJUlN6S09zQ0J4SHZU cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaY0V2bjVLemd1aElSU3pLT3NDQnhIdlRxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjhFMi85NzAxM0E0RTUwNDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pn dWhJUlN6S09zQ0J4SHZUcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOAPjC6W3ha/9X8vvIpCknLmCLvgBvxan310LNN8x7pLygdA49XNyG 49ofEmK4tfxDHF2Ny9phboybMpo1Hkzy//YxcfJ7juvaO4XETMh/j1tIGdQxPcP+ y1rCfb5u8paAWFKvBF79E/WmETlF7nRwdPovc/gK3HKM8UIPSl0UGi61cXA1Nhbc wGwlGo8jxXtwLo6h7IwIwvC0N9Z4cAtWa7Zgu/i5KZ3LTWN1wJjh/+DImTiBgDZm G0E25CZSvUA1/LKJ9X70VBdONkQcu7f6ScUkC4yv8vwcjsuev2CWinDgIBFUyzof pqsSWoXlUdF9Gk6iMnC7ExwIsTdqErB+ -----END CERTIFICATE-----Generated at Mon Oct 20 00:20:42 2025 by rpki-client