$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: AS06UZOmcqkSx2OiA2/mdnrR7Mv5os05Zz8H85mUfxk= Subject key identifier: CB:2E:91:33:A6:A1:85:99:2D:04:79:26:17:60:9E:78:45:1C:D4:59 Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 027A Signing time: Sun 19 Oct 2025 03:52:43 +0000 Manifest this update: Sun 19 Oct 2025 03:52:42 +0000 Manifest next update: Sun 26 Oct 2025 03:52:42 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: 843HKeI3uqrp1kxAvNyoIBAyVA9n5V8PDGRTTczo3sU=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Validity Not Before: Oct 19 03:52:42 2025 GMT Not After : Oct 26 03:52:42 2025 GMT Subject: CN=68f4608b-27e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:7e:91:94:81:dd:f2:62:c5:e3:1f:80:69: 44:dc:40:ff:b5:4e:2f:ce:ed:c5:e7:40:49:e9:10: a3:61:f5:08:09:b8:bb:8f:4b:86:58:7b:60:22:09: a7:47:ca:54:a8:21:4a:aa:66:a7:4b:e9:37:07:11: d0:4f:2c:7e:c5:a4:f7:ac:93:78:0a:5f:d8:81:43: 6f:5e:1e:07:7f:41:f5:95:1a:3c:c5:31:4f:c7:83: d0:1e:d1:f0:60:f7:73:dd:60:b3:59:e9:47:da:7e: af:fd:0a:ee:44:c3:c7:42:55:5a:aa:3d:0e:62:0d: af:0e:a0:64:92:9a:16:39:81:87:44:a4:c4:ad:f1: 98:c9:fc:e9:36:1e:d3:2f:48:0b:79:5e:c2:65:0f: fb:7e:86:10:99:0d:6f:79:4d:8e:3d:a5:b2:0d:ef: d0:79:59:98:f3:30:23:8e:4c:5c:c4:f9:39:fd:5f: a7:44:d6:23:42:0e:0f:e6:e4:50:31:20:e1:ea:67: 10:7c:86:2b:00:c9:4c:80:65:92:57:6e:dd:63:7d: b9:fc:94:55:5a:76:af:8c:3f:25:8b:de:5e:62:2b: 3b:c2:42:87:e6:36:e9:44:fb:c6:f8:b1:b2:df:03: 48:bf:aa:72:c4:51:9f:d4:e9:df:59:a8:f7:f9:19: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2E:91:33:A6:A1:85:99:2D:04:79:26:17:60:9E:78:45:1C:D4:59 X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:45:35:10:3f:97:ba:4b:ac:ef:f8:3c:51:92:65:49:7a:9e: 74:6d:d9:d2:e4:53:24:89:6e:97:a4:73:89:67:84:6b:36:51: 23:20:96:0a:c3:93:29:4a:71:26:e1:3a:90:3e:39:3c:f9:1c: ea:07:c6:be:b5:5e:6b:63:1b:f7:a3:c5:d0:e9:59:40:82:3c: 96:be:c7:35:9e:e0:28:19:7a:f1:18:bc:6b:e3:b8:7a:10:02: 91:00:a4:47:e8:db:b7:08:8b:c8:39:33:90:71:a8:d3:2d:04: b8:c1:e1:ae:a6:1e:da:88:5c:e4:1e:f0:5d:ab:f6:ec:2c:e7: 36:49:f3:67:3a:ee:ca:e6:fe:0d:ff:08:1f:00:5b:6b:3c:b5: 58:5d:15:91:27:e9:7b:90:0a:f4:f6:ae:dd:15:39:ea:b5:a2: a2:06:4c:91:42:31:7e:89:29:82:38:b4:89:38:20:6e:72:0a: 13:7d:15:fd:cc:11:82:b0:a7:88:73:b6:cc:6f:ca:26:98:ae: c4:b3:0b:c1:48:7c:09:66:a8:b7:d3:a9:0b:50:6c:8b:aa:57: ec:0f:00:2a:d0:31:76:23:d1:2a:45:92:c0:62:dd:9a:7c:02: 72:1b:a1:db:6c:95:ac:1b:fa:e1:a5:d2:bd:5d:19:62:a5:29: 35:5d:b6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjUxMDE5MDM1MjQyWhcNMjUxMDI2MDM1MjQyWjAYMRYwFAYD VQQDEw02OGY0NjA4Yi0yN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S9+kZSB3fJixeMfgGlE3ED/tU4vzu3F50BJ6RCjYfUICbi7j0uGWHtgIgmn R8pUqCFKqmanS+k3BxHQTyx+xaT3rJN4Cl/YgUNvXh4Hf0H1lRo8xTFPx4PQHtHw YPdz3WCzWelH2n6v/QruRMPHQlVaqj0OYg2vDqBkkpoWOYGHRKTErfGYyfzpNh7T L0gLeV7CZQ/7foYQmQ1veU2OPaWyDe/QeVmY8zAjjkxcxPk5/V+nRNYjQg4P5uRQ MSDh6mcQfIYrAMlMgGWSV27dY325/JRVWnavjD8li95eYis7wkKH5jbpRPvG+LGy 3wNIv6pyxFGf1OnfWaj3+RkDAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsukTOm oYWZLQR5JhdgnnhFHNRZMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkRTUQP5e6S6zv+DxRkmVJep50bdnS5FMkiW6XpHOJZ4RrNlEjIJYK w5MpSnEm4TqQPjk8+RzqB8a+tV5rYxv3o8XQ6VlAgjyWvsc1nuAoGXrxGLxr47h6 EAKRAKRH6Nu3CIvIOTOQcajTLQS4weGuph7aiFzkHvBdq/bsLOc2SfNnOu7K5v4N /wgfAFtrPLVYXRWRJ+l7kAr09q7dFTnqtaKiBkyRQjF+iSmCOLSJOCBucgoTfRX9 zBGCsKeIc7bMb8ommK7EswvBSHwJZqi306kLUGyLqlfsDwAq0DF2I9EqRZLAYt2a fAJyG6HbbJWsG/rhpdK9XRlipSk1XbaY -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:57 2025 by rpki-client