$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: VZFTYoardwEDC/s62J4/xAfC3AC0H36hZubNX7FhzCg= Subject key identifier: 10:A2:6D:43:44:F2:FD:FD:1F:D9:B9:06:80:48:83:88:CE:5F:8D:64 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 0129 Signing time: Sun 19 Oct 2025 07:37:34 +0000 Manifest this update: Sun 19 Oct 2025 07:37:33 +0000 Manifest next update: Sun 26 Oct 2025 07:37:33 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: /L+ze1AizeBW1OukbduoHa1n2pjGaRyy+ZQ8Q9KMsQE=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: MTnkpsJbkcK1viFplq5fY1GvpgMvuAacCfa5pSMUU+M=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: pI4dJTsbs9JXYEo3FapSXoRmDXBH5lTYniw+sL2h9gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Oct 19 07:37:33 2025 GMT Not After : Oct 26 07:37:33 2025 GMT Subject: CN=68f4953e-89ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:85:46:40:34:43:02:10:78:6d:c7:80:6b: 4a:38:f1:d0:63:fb:f7:b3:f1:83:ad:21:21:8b:da: 5b:df:1d:6d:06:f1:dc:1c:8e:71:d0:84:b0:7d:ec: e0:65:d4:cd:d0:8c:4c:ab:9d:cb:05:62:87:4e:25: 28:4f:e8:a3:5a:2a:1f:48:f2:60:bc:85:b7:68:ba: 3d:64:e9:ed:61:1c:16:87:94:ba:e0:e3:cb:5b:68: 30:e2:67:6b:31:83:86:1f:73:89:c8:32:7d:67:ad: f1:c9:f8:54:e2:d4:4b:f2:d6:19:21:51:cb:ae:8a: 3e:4d:89:4a:36:2b:a1:7a:fe:9c:d5:56:ba:01:a2: df:dd:f9:f2:c8:35:52:7e:5e:4f:82:90:24:8d:63: a9:ba:bb:d0:40:b1:58:54:9b:82:89:48:86:dd:5a: c8:e9:3b:87:00:a1:31:5c:b9:88:ae:7e:c1:47:d5: c7:1a:76:87:b4:5f:5c:17:7f:20:96:d3:ee:12:1e: 62:10:f3:d7:e3:89:44:f9:cd:8f:d0:16:1a:29:b0: e7:fa:e8:2d:15:22:d9:27:54:d6:f2:45:6e:a1:09: 29:4f:c1:db:44:b0:7f:4c:5b:17:e7:0f:6a:6e:07: 67:49:0d:e3:42:4f:c7:24:d4:4f:f1:f5:80:a4:2b: c0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A2:6D:43:44:F2:FD:FD:1F:D9:B9:06:80:48:83:88:CE:5F:8D:64 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8d:7e:81:90:ab:bd:05:11:b0:55:b7:11:38:c8:f4:0c:d5: 15:fd:4b:6b:80:b4:52:3d:14:6c:dd:49:56:f7:cc:d8:d1:1e: 1e:58:4a:92:37:28:17:4e:24:ce:b5:1f:ae:cb:a8:7e:fc:c3: 5d:d4:9e:e8:97:61:81:fa:f3:95:25:fa:16:bf:ab:1b:68:93: c8:77:99:9d:a6:b9:4c:f6:18:b4:c3:7f:6c:ea:72:91:e9:52: 42:18:89:36:59:11:0b:53:7e:33:b9:b7:03:1f:eb:dc:87:2d: 32:4d:df:f8:8a:9e:f5:63:b7:b1:09:b2:7f:e8:ac:96:da:fa: 09:73:eb:ef:69:b6:19:6b:0b:29:0f:36:11:a9:90:73:5b:1f: 11:da:eb:f4:40:ca:be:86:33:d9:3a:27:80:5c:8a:58:25:2c: 75:72:4f:cd:26:72:2e:87:0c:55:0b:2c:a2:0c:f9:ca:5c:c0: 56:a4:9e:1f:32:fa:83:7d:f8:53:86:d0:1a:e0:7e:b1:f6:88: 9b:db:44:87:98:fe:57:67:16:e1:c7:eb:bb:fe:7c:15:58:17: e5:16:ad:66:7e:36:8c:6a:de:6b:69:44:3e:64:0f:b2:d0:c9: af:13:5b:6e:a7:c7:34:fa:b7:f4:b7:56:c4:25:b5:bf:67:9e: 14:a1:4d:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUxMDE5MDczNzMzWhcNMjUxMDI2MDczNzMzWjAYMRYwFAYD VQQDEw02OGY0OTUzZS04OWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh6FRkA0QwIQeG3HgGtKOPHQY/v3s/GDrSEhi9pb3x1tBvHcHI5x0ISwfezg ZdTN0IxMq53LBWKHTiUoT+ijWiofSPJgvIW3aLo9ZOntYRwWh5S64OPLW2gw4mdr MYOGH3OJyDJ9Z63xyfhU4tRL8tYZIVHLroo+TYlKNiuhev6c1Va6AaLf3fnyyDVS fl5PgpAkjWOpurvQQLFYVJuCiUiG3VrI6TuHAKExXLmIrn7BR9XHGnaHtF9cF38g ltPuEh5iEPPX44lE+c2P0BYaKbDn+ugtFSLZJ1TW8kVuoQkpT8HbRLB/TFsX5w9q bgdnSQ3jQk/HJNRP8fWApCvA8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCibUNE 8v39H9m5BoBIg4jOX41kMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7jX6BkKu9BRGwVbcROMj0DNUV/UtrgLRSPRRs3UlW98zY0R4eWEqS NygXTiTOtR+uy6h+/MNd1J7ol2GB+vOVJfoWv6sbaJPId5mdprlM9hi0w39s6nKR 6VJCGIk2WRELU34zubcDH+vchy0yTd/4ip71Y7exCbJ/6KyW2voJc+vvabYZawsp DzYRqZBzWx8R2uv0QMq+hjPZOieAXIpYJSx1ck/NJnIuhwxVCyyiDPnKXMBWpJ4f MvqDffhThtAa4H6x9oib20SHmP5XZxbhx+u7/nwVWBflFq1mfjaMat5raUQ+ZA+y 0MmvE1tup8c0+rf0t1bEJbW/Z54UoU3u -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:50 2025 by rpki-client