$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: dN0icbJekzTGdRRa7or+khb9T+H9iAQ2ISUoEyrhSDw= Subject key identifier: D2:58:3A:42:09:4E:09:A2:3C:D4:40:EF:FB:53:7C:C2:FE:17:2A:E0 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 01BD Signing time: Sun 19 Oct 2025 05:30:08 +0000 Manifest this update: Sun 19 Oct 2025 05:30:07 +0000 Manifest next update: Sun 26 Oct 2025 05:30:07 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: OGkkysQNiej9qFhDlfMYAZj5TLWsoD8TOf1K0iDOsMU=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Oct 19 05:30:07 2025 GMT Not After : Oct 26 05:30:07 2025 GMT Subject: CN=68f47760-5fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:a4:d2:dc:aa:95:aa:2e:e7:db:ca:e4:8a: 59:58:6f:4a:82:b3:14:1d:26:39:af:71:ea:92:e3: a3:9f:cf:94:6c:49:00:e8:97:88:d2:5f:f6:df:f1: 30:05:f4:31:d4:ba:5f:27:7b:3d:35:d6:d1:1d:b7: fc:3b:2c:7c:a0:4e:b6:0b:8b:72:db:fb:a2:5c:3e: d1:b8:dd:63:6c:ca:8f:2b:f4:d4:ee:76:f8:c0:65: 77:f4:b0:da:60:1e:ae:55:9e:d3:73:da:cb:fb:8d: 12:06:c7:23:5f:1b:56:15:00:a3:65:46:72:a9:e5: 4b:fc:33:ac:25:c9:83:41:94:9f:fd:86:a2:83:b2: fe:99:20:bd:f2:01:25:aa:01:69:9d:c3:91:f2:8c: 14:0a:c8:f8:da:8a:6a:a0:27:d4:f4:db:77:e2:7b: d5:cb:90:3b:2e:46:99:d4:99:be:72:15:a9:98:e4: 31:c3:97:31:ff:93:d8:5f:59:d0:ac:75:e0:c6:9e: f0:bb:a4:a2:97:43:d9:f2:eb:02:f1:a3:1c:49:bb: 51:5e:c9:8a:b7:6b:db:d4:3a:fd:56:17:9e:4b:a4: b9:dd:10:8b:79:5d:59:c7:1b:f3:2a:5c:c6:4c:97: 8c:ee:8d:fd:36:c8:ae:e9:de:b6:97:33:0c:aa:ae: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:58:3A:42:09:4E:09:A2:3C:D4:40:EF:FB:53:7C:C2:FE:17:2A:E0 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a2:ce:23:f4:ad:56:b0:be:ac:d6:2d:d2:14:77:69:17:0d: e2:fe:cd:0a:64:2f:d5:b1:77:73:27:be:61:c7:09:15:22:2c: 31:0e:54:f0:96:06:f9:1f:da:7d:2d:83:39:2c:7f:04:41:17: a4:03:4e:22:19:ca:5a:cf:74:c6:eb:10:4f:5c:24:fc:44:3c: 4f:8f:96:d0:ba:da:26:c0:93:6c:b1:95:a8:06:1d:94:3e:64: d9:a9:b8:26:9b:f1:55:54:76:1b:19:fc:19:e5:2b:5a:75:7a: a6:45:55:8c:fb:4b:0a:2a:12:5c:ee:5f:d1:6b:c6:1b:e2:aa: a0:9d:39:26:a5:8b:68:99:ea:2e:e2:20:7f:81:0e:3c:46:0b: 8c:9f:e5:af:39:57:67:ec:f2:c5:ab:87:6f:64:5a:d1:20:ec: f9:bf:59:ec:27:da:30:0f:5a:4e:71:7a:d9:fc:c1:53:cb:a8: 31:c3:4a:64:3f:d0:ea:16:b4:43:f9:ae:f2:61:29:f2:c1:58: 52:bd:5e:9f:51:54:30:bd:45:8b:9a:20:7a:9b:32:c6:ba:c5: 55:d2:53:34:8f:3a:69:75:75:af:b9:8f:d9:54:2e:06:67:1d: 5a:60:cc:6d:4e:12:25:27:0c:75:8e:59:e6:5b:cf:8a:9a:7e: 20:51:e7:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUxMDE5MDUzMDA3WhcNMjUxMDI2MDUzMDA3WjAYMRYwFAYD VQQDEw02OGY0Nzc2MC01ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Hmk0tyqlaou59vK5IpZWG9KgrMUHSY5r3HqkuOjn8+UbEkA6JeI0l/23/Ew BfQx1LpfJ3s9NdbRHbf8Oyx8oE62C4ty2/uiXD7RuN1jbMqPK/TU7nb4wGV39LDa YB6uVZ7Tc9rL+40SBscjXxtWFQCjZUZyqeVL/DOsJcmDQZSf/Yaig7L+mSC98gEl qgFpncOR8owUCsj42opqoCfU9Nt34nvVy5A7LkaZ1Jm+chWpmOQxw5cx/5PYX1nQ rHXgxp7wu6Sil0PZ8usC8aMcSbtRXsmKt2vb1Dr9VheeS6S53RCLeV1ZxxvzKlzG TJeM7o39Nsiu6d62lzMMqq6lEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJYOkIJ TgmiPNRA7/tTfML+FyrgMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/os4j9K1WsL6s1i3SFHdpFw3i/s0KZC/VsXdzJ75hxwkVIiwxDlTw lgb5H9p9LYM5LH8EQRekA04iGcpaz3TG6xBPXCT8RDxPj5bQutomwJNssZWoBh2U PmTZqbgmm/FVVHYbGfwZ5StadXqmRVWM+0sKKhJc7l/Ra8Yb4qqgnTkmpYtomeou 4iB/gQ48RguMn+WvOVdn7PLFq4dvZFrRIOz5v1nsJ9owD1pOcXrZ/MFTy6gxw0pk P9DqFrRD+a7yYSnywVhSvV6fUVQwvUWLmiB6mzLGusVV0lM0jzppdXWvuY/ZVC4G Zx1aYMxtThIlJwx1jlnmW8+Kmn4gUeft -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:50 2025 by rpki-client