$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: I8w5X8t9N9LKVldt8L72dF9pFXmWU/X/EOLhOQiS9zQ= Subject key identifier: 7D:D8:9A:7F:73:6C:DE:4A:D6:5A:A1:40:15:B3:76:24:BA:14:E0:0D Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 021F Signing time: Sun 19 Oct 2025 04:34:42 +0000 Manifest this update: Sun 19 Oct 2025 04:34:42 +0000 Manifest next update: Sun 26 Oct 2025 04:34:42 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: G86jGY1VJQMptDEeR2+uLaRtOocDDGYJdbKD+xlyPn4=) 2: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: vKLf2rHEIG3SZoTwG/5Mh6FH3VoQv1z4rOoGSmOI4Fs=) 3: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: /7r7P4AnrguSGgl5ZX4GQrE71KMoMDZh31zaE/ThIEk=) 4: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: M4WGtwFkPwUoSWIULQ4yxINkgXWufBIM4+UZEpcRmO4=) 5: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: h/qcaSqjY8kiFIGM/MMPsHobkpAe/EdAmdDLkkpjgjM=) 6: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: LcCehnLIRoCgjwwcDQ7TUr2n1e7iAgFU0iCoo79xeiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Oct 19 04:34:42 2025 GMT Not After : Oct 26 04:34:42 2025 GMT Subject: CN=68f46a62-93fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:da:43:2d:e1:5b:6c:02:b7:09:ea:29:6e: 90:e1:6d:d2:02:30:62:41:71:c1:96:a8:1f:0d:1c: f8:c2:f1:f8:53:dc:11:35:b0:4d:64:ef:eb:8b:ce: 84:96:00:73:29:fe:cb:1a:fd:c1:1a:8c:27:50:f8: 96:d2:f4:27:36:82:16:a7:42:fd:26:5f:f5:05:c8: 78:b3:0f:d9:d5:23:ac:61:8c:01:bd:82:bf:c3:0b: 32:f2:e5:2b:d2:76:b5:99:ac:a3:17:f0:0d:cf:08: f3:60:5f:4e:49:b5:8e:25:fa:27:38:9e:2d:96:b8: b7:d9:90:1c:33:9a:c5:a4:ee:71:c7:16:ab:71:2b: a0:1a:27:48:1a:79:df:50:65:5f:8b:a0:20:fe:89: 44:c3:1c:f6:76:10:64:fa:2d:93:3a:04:ef:b6:cc: 0f:e8:52:4f:25:4b:c2:ec:0b:12:02:5f:e3:00:1f: 9a:56:e3:82:2d:75:7a:77:77:32:1a:5f:f4:f2:57: 3c:bc:fe:6d:af:5d:41:22:39:39:75:b4:6e:da:2f: 78:2c:9c:92:57:c8:97:0a:48:93:1e:90:70:7e:32: 1a:5a:22:ca:bb:c5:da:e0:e1:5c:41:ff:9f:83:bc: b5:fe:f8:a0:86:74:8d:3d:96:c6:ac:e8:ab:e7:59: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D8:9A:7F:73:6C:DE:4A:D6:5A:A1:40:15:B3:76:24:BA:14:E0:0D X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9c:53:8d:27:d9:5c:50:21:be:93:c9:a5:8d:54:61:c7:2c: d5:3d:13:b9:d0:01:df:e0:89:a4:54:6d:ba:ca:bf:c9:a5:44: 95:31:d4:c4:25:3e:82:90:89:f2:e6:04:7f:85:30:03:4e:d1: 3c:b7:80:f8:3f:46:21:d4:23:40:48:80:85:47:d7:9d:60:04: b4:3e:be:90:15:d3:a2:ff:e0:c4:b6:cb:87:39:5c:fe:c8:ba: 87:7b:ec:42:ec:a7:63:5d:06:73:53:43:0c:ed:3b:48:49:09: 89:59:65:70:b3:8b:3e:d6:8d:a2:c9:c8:bd:1e:f6:17:04:d6: f1:f2:18:f3:56:46:24:0d:bc:d9:64:62:00:9c:df:77:b4:2f: ca:74:38:b6:9b:e3:18:05:8f:fa:32:78:23:8b:07:0b:1f:30: 0d:7a:d3:a2:af:70:25:f1:86:6a:d6:c0:9c:23:37:30:80:f9: 25:f8:c8:ee:68:5b:ba:2b:61:f6:f2:86:50:97:e4:24:5b:82: 99:f8:1c:a2:1d:e0:ca:79:0f:5d:07:5d:25:ca:85:ee:5b:de: 63:59:90:97:fa:9a:42:c6:dc:44:b8:db:de:c2:af:e3:66:04: 18:9d:ad:dd:26:78:64:a2:5f:0c:50:32:0a:5a:2e:c0:db:17: 58:60:ee:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjUxMDE5MDQzNDQyWhcNMjUxMDI2MDQzNDQyWjAYMRYwFAYD VQQDEw02OGY0NmE2Mi05M2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA047aQy3hW2wCtwnqKW6Q4W3SAjBiQXHBlqgfDRz4wvH4U9wRNbBNZO/ri86E lgBzKf7LGv3BGownUPiW0vQnNoIWp0L9Jl/1Bch4sw/Z1SOsYYwBvYK/wwsy8uUr 0na1mayjF/ANzwjzYF9OSbWOJfonOJ4tlri32ZAcM5rFpO5xxxarcSugGidIGnnf UGVfi6Ag/olEwxz2dhBk+i2TOgTvtswP6FJPJUvC7AsSAl/jAB+aVuOCLXV6d3cy Gl/08lc8vP5tr11BIjk5dbRu2i94LJySV8iXCkiTHpBwfjIaWiLKu8Xa4OFcQf+f g7y1/vighnSNPZbGrOir51kp2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3Ymn9z bN5K1lqhQBWzdiS6FOANMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBenFONJ9lcUCG+k8mljVRhxyzVPRO50AHf4ImkVG26yr/JpUSVMdTE JT6CkIny5gR/hTADTtE8t4D4P0Yh1CNASICFR9edYAS0Pr6QFdOi/+DEtsuHOVz+ yLqHe+xC7KdjXQZzU0MM7TtISQmJWWVws4s+1o2iyci9HvYXBNbx8hjzVkYkDbzZ ZGIAnN93tC/KdDi2m+MYBY/6MngjiwcLHzANetOir3Al8YZq1sCcIzcwgPkl+Mju aFu6K2H28oZQl+QkW4KZ+ByiHeDKeQ9dB10lyoXuW95jWZCX+ppCxtxEuNvewq/j ZgQYna3dJnhkol8MUDIKWi7A2xdYYO5s -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:18 2025 by rpki-client