$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: i4LHFL2N5gcVuozQyVj+sqFCIDdjiXEdueKid6YsaJo= Subject key identifier: 36:6C:EE:77:75:A6:C8:B8:D7:35:E7:9D:4A:FD:77:89:25:B0:33:44 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 082E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 0823 Signing time: Sat 18 Oct 2025 22:05:30 +0000 Manifest this update: Sat 18 Oct 2025 22:05:30 +0000 Manifest next update: Sat 25 Oct 2025 22:05:30 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: TUVX5fhZHWNWx7MdFSohAWp7ylo3D7o41iE58n/yHN4=) 2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Oct 18 22:05:30 2025 GMT Not After : Oct 25 22:05:30 2025 GMT Subject: CN=68f40f2a-6224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:1e:26:0a:e7:ef:22:79:e8:4c:d6:bc:af: cb:0e:44:64:4f:27:78:2a:d3:a2:29:ec:23:1a:d6: b3:55:c8:3c:c2:69:58:90:70:d1:2b:a3:dc:77:b9: e1:5b:42:8c:bd:ab:61:f2:c1:e4:0a:7e:50:21:e7: e9:52:88:e2:11:ad:ad:57:c4:70:42:d0:d2:3f:58: 81:bc:0a:5f:7e:93:79:2a:9e:50:37:01:d5:4b:8b: ef:b9:dc:d8:f5:48:6c:53:91:19:d7:dd:13:60:66: 17:aa:fe:66:2f:45:ec:2f:07:ad:cb:70:bf:f0:c9: 67:af:f1:20:73:8f:e8:4b:37:8d:9c:b9:1e:34:82: 71:ac:7b:63:7b:e3:be:72:a3:80:f4:fb:4c:8b:a7: 6f:38:6f:7f:e4:c5:6f:8f:cf:1f:99:01:37:89:9f: 20:55:0d:65:a6:22:a7:bb:1b:a3:39:64:0d:81:d0: 0b:e4:fc:ac:27:1d:de:b5:8a:11:57:cb:03:b0:12: 4c:ea:9b:87:00:03:76:12:b0:5b:ec:15:5a:98:70: c4:d1:b4:91:06:22:da:c1:53:6e:c1:ed:cf:80:ef: 1d:8b:4c:e6:91:3e:6d:4a:ad:86:9a:aa:8a:d6:b5: cb:3f:e4:3a:6b:d3:ff:0d:07:d5:46:44:1a:df:62: 9c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6C:EE:77:75:A6:C8:B8:D7:35:E7:9D:4A:FD:77:89:25:B0:33:44 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e5:35:ae:d6:98:98:8f:f2:72:af:92:b0:fc:ad:68:b6:39: 03:cc:5f:24:80:57:04:c5:bf:9c:ad:27:71:8d:ff:31:18:00: a1:0a:06:2b:d7:8c:6c:f6:84:fa:d8:b6:59:a0:84:f4:4b:fa: 56:22:4f:89:81:ab:0d:65:45:06:60:be:c1:d0:7d:9c:06:02: 16:1c:14:11:f4:e8:ec:3e:9f:c4:bc:c8:46:da:ab:71:5e:88: fe:22:6f:3f:72:a8:2f:c0:53:b3:56:7f:50:f0:3c:d5:09:29: dd:77:4f:3b:ab:db:4e:67:78:ed:98:1f:80:20:fa:9d:14:ee: 89:45:4c:56:6f:e7:47:a8:6a:c9:fd:5c:50:25:9a:2b:ce:00: 40:fd:65:f4:20:39:a5:7d:4c:3b:c0:b0:55:b0:83:ed:bc:3f: 05:74:5b:b8:46:a3:68:5c:ee:21:6f:13:04:44:0e:67:78:a2: 7d:a2:48:ee:1e:ea:69:66:4e:58:64:3b:a8:91:2a:0b:58:b1: b4:ff:9a:c4:3b:ef:7d:3f:cb:81:f4:dc:00:8c:69:aa:27:8c: 26:7a:a7:96:f3:44:9d:28:5b:fd:37:63:58:a6:c1:68:e7:3b: ed:67:ed:b1:8d:df:83:ff:aa:54:c9:03:e6:4b:36:fd:17:c0: 1b:11:29:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUxMDE4MjIwNTMwWhcNMjUxMDI1MjIwNTMwWjAYMRYwFAYD VQQDEw02OGY0MGYyYS02MjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/weJgrn7yJ56EzWvK/LDkRkTyd4KtOiKewjGtazVcg8wmlYkHDRK6Pcd7nh W0KMvath8sHkCn5QIefpUojiEa2tV8RwQtDSP1iBvApffpN5Kp5QNwHVS4vvudzY 9UhsU5EZ190TYGYXqv5mL0XsLwety3C/8Mlnr/Egc4/oSzeNnLkeNIJxrHtje+O+ cqOA9PtMi6dvOG9/5MVvj88fmQE3iZ8gVQ1lpiKnuxujOWQNgdAL5PysJx3etYoR V8sDsBJM6puHAAN2ErBb7BVamHDE0bSRBiLawVNuwe3PgO8di0zmkT5tSq2GmqqK 1rXLP+Q6a9P/DQfVRkQa32KclQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZs7nd1 psi41zXnnUr9d4klsDNEMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC65TWu1piYj/Jyr5Kw/K1otjkDzF8kgFcExb+crSdxjf8xGAChCgYr 14xs9oT62LZZoIT0S/pWIk+JgasNZUUGYL7B0H2cBgIWHBQR9OjsPp/EvMhG2qtx Xoj+Im8/cqgvwFOzVn9Q8DzVCSndd087q9tOZ3jtmB+AIPqdFO6JRUxWb+dHqGrJ /VxQJZorzgBA/WX0IDmlfUw7wLBVsIPtvD8FdFu4RqNoXO4hbxMERA5neKJ9okju HuppZk5YZDuokSoLWLG0/5rEO+99P8uB9NwAjGmqJ4wmeqeW80SdKFv9N2NYpsFo 5zvtZ+2xjd+D/6pUyQPmSzb9F8AbESld -----END CERTIFICATE-----Generated at Mon Oct 20 05:43:28 2025 by rpki-client