$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: PElH6Sw0caFBgdPGbGfhN84Yj4JadX/Fv3D/DGq5gx0= Subject key identifier: BF:C4:9F:C9:D2:CF:09:39:11:2C:C0:7E:8D:CD:04:14:77:B7:0F:7C Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 07C7 Signing time: Sat 18 Oct 2025 22:33:26 +0000 Manifest this update: Sat 18 Oct 2025 22:33:25 +0000 Manifest next update: Sat 25 Oct 2025 22:33:25 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: zG/poSd9ucgIdjVWoPhlZS/cpram+vRO0WfWxYosoQA=) 2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: 88Jh5coMAVPJSUCnQAmSwbUiu0xU/3P6Y2QChRKwELo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Oct 18 22:33:25 2025 GMT Not After : Oct 25 22:33:25 2025 GMT Subject: CN=68f415b5-bb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:55:3d:8c:9a:da:9a:1e:7c:a6:0e:1d:21: c5:a7:b9:95:8c:df:0e:8d:a1:c2:a3:fe:76:be:92: 67:25:fb:43:c1:7e:e4:03:29:3e:06:a6:82:51:81: e1:26:f6:d6:95:3e:8a:9d:ba:da:27:03:2a:73:e7: c6:0e:17:cc:1e:51:54:4b:53:31:5e:26:f5:24:91: 1a:77:4f:64:47:a9:02:57:dc:5f:2d:5f:64:7a:d6: 9d:33:25:f8:de:54:c3:01:e1:b9:1f:3b:ad:44:83: fa:63:4e:2c:8d:5b:bb:04:17:56:ea:f8:78:5c:89: 19:63:d2:b8:c9:cb:28:ca:24:7c:b6:cf:44:9a:d8: 80:75:9a:90:da:45:19:5a:32:44:f9:30:cb:4d:c5: 41:2b:b4:58:0f:eb:fa:58:ea:57:0b:f3:b9:56:11: d3:ff:2b:80:5b:d2:5c:73:e0:8f:91:57:d8:97:bb: ad:72:c2:b0:40:fc:39:db:7d:3f:92:fe:04:3b:44: d9:09:91:d1:28:be:f2:37:68:bf:c9:e4:1f:b1:ca: 7e:60:be:6c:01:34:34:c6:9a:fe:4f:66:a1:e1:5c: 6c:df:bc:cc:d9:c3:3a:52:aa:ca:84:8c:6b:b3:d3: 35:56:3c:06:b8:ad:59:73:b9:20:f3:1b:fc:61:88: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C4:9F:C9:D2:CF:09:39:11:2C:C0:7E:8D:CD:04:14:77:B7:0F:7C X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f8:61:ba:46:d8:94:00:bc:0e:5e:07:6f:43:47:c9:a6:fd: dc:03:8a:56:8a:99:90:51:ea:06:b1:75:42:8e:6c:34:a4:10: bc:91:04:7e:c8:da:bf:67:0e:1a:05:64:5e:bc:8b:1f:f2:ef: 0f:84:b0:a6:01:68:bf:01:6e:2c:e3:b3:13:02:b8:3a:c3:5e: e7:79:6c:cd:c9:72:77:bf:ce:8d:7c:e0:2f:3c:37:09:6f:28: 58:6e:3f:58:1f:9f:33:4a:65:8e:c8:96:6f:aa:23:b5:56:80: 8f:9c:1b:4e:5b:da:88:64:11:74:c1:0d:ba:b1:83:f9:8d:e4: 7b:f7:7b:14:43:4f:9b:c2:ce:0c:45:6a:40:74:a6:94:58:a6: a2:09:ab:97:06:c6:18:ca:10:fd:7f:08:96:74:01:d9:b5:8c: 07:8c:bf:01:71:e9:ed:db:9d:25:30:df:5d:db:8c:08:21:ae: 63:39:23:7e:30:ff:ad:5c:1f:86:f9:0e:f2:d1:40:97:89:b9: 71:b1:6c:89:2b:e6:a5:20:e4:9c:52:ac:31:68:61:d1:fa:90: 18:17:19:63:b8:60:cd:07:b8:8b:b2:4b:e8:ed:09:d9:f4:81: 24:28:5d:ad:a2:19:1d:0e:97:0b:c8:af:03:29:13:75:e2:6d: 2d:34:cb:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjUxMDE4MjIzMzI1WhcNMjUxMDI1MjIzMzI1WjAYMRYwFAYD VQQDEw02OGY0MTViNS1iYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFtVPYya2poefKYOHSHFp7mVjN8OjaHCo/52vpJnJftDwX7kAyk+BqaCUYHh JvbWlT6KnbraJwMqc+fGDhfMHlFUS1MxXib1JJEad09kR6kCV9xfLV9ketadMyX4 3lTDAeG5HzutRIP6Y04sjVu7BBdW6vh4XIkZY9K4ycsoyiR8ts9EmtiAdZqQ2kUZ WjJE+TDLTcVBK7RYD+v6WOpXC/O5VhHT/yuAW9Jcc+CPkVfYl7utcsKwQPw5230/ kv4EO0TZCZHRKL7yN2i/yeQfscp+YL5sATQ0xpr+T2ah4Vxs37zM2cM6UqrKhIxr s9M1VjwGuK1Zc7kg8xv8YYg2fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/En8nS zwk5ESzAfo3NBBR3tw98MB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx+GG6RtiUALwOXgdvQ0fJpv3cA4pWipmQUeoGsXVCjmw0pBC8kQR+ yNq/Zw4aBWRevIsf8u8PhLCmAWi/AW4s47MTArg6w17neWzNyXJ3v86NfOAvPDcJ byhYbj9YH58zSmWOyJZvqiO1VoCPnBtOW9qIZBF0wQ26sYP5jeR793sUQ0+bws4M RWpAdKaUWKaiCauXBsYYyhD9fwiWdAHZtYwHjL8Bcent250lMN9d24wIIa5jOSN+ MP+tXB+G+Q7y0UCXiblxsWyJK+alIOScUqwxaGHR+pAYFxljuGDNB7iLskvo7QnZ 9IEkKF2tohkdDpcLyK8DKRN14m0tNMs6 -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:45 2025 by rpki-client