$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft File: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json) Hash identifier: 2BlvpafW8TeZMgtT0BccWE2h7D9YFL+Dx3qmUiK2Bd8= Subject key identifier: B6:66:8D:C5:43:21:0E:1B:06:DF:09:35:F7:0F:9A:FF:CA:56:74:A9 Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft Manifest number: 0698 Signing time: Sat 18 Oct 2025 23:53:33 +0000 Manifest this update: Sat 18 Oct 2025 23:53:33 +0000 Manifest next update: Sat 25 Oct 2025 23:53:33 +0000 Files and hashes: 1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: qpxNiQ4q8NfMKKap9ObSRfNNZHGKMCG+v72OrXEoyHo=) 2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Validity Not Before: Oct 18 23:53:33 2025 GMT Not After : Oct 25 23:53:33 2025 GMT Subject: CN=68f4287d-a23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:1b:fb:7f:93:c9:71:4e:71:eb:3b:00:39: e8:7f:7e:3b:8a:b8:36:78:a5:b3:a6:f7:ae:57:20: 2f:85:87:25:dd:74:f5:3d:14:1b:9e:39:f6:8f:33: 2d:97:1a:12:d3:d0:f7:3c:64:da:2e:06:f8:44:e7: 5d:d0:79:d8:6c:0e:1d:79:64:8d:df:f6:3c:e6:cf: 3a:b8:7e:b8:89:12:c2:46:0b:63:b0:c3:04:d2:32: b1:4a:e9:fc:e9:53:d2:0d:42:80:d3:85:15:68:33: 16:68:97:2a:6b:63:4f:aa:bc:0e:52:24:35:53:f1: ee:73:5e:5c:cb:50:a9:c1:32:27:86:8c:df:67:94: 2f:00:ee:81:d4:ba:cc:f5:3f:af:8e:09:82:3b:90: f0:17:2d:5e:58:96:91:5f:50:cf:e2:23:68:c7:25: dc:b1:58:ef:2e:1e:ac:da:d2:d5:e5:75:23:9c:d4: 2a:a9:4e:3f:e0:78:e8:a8:c6:73:28:43:e4:2d:14: 82:e2:b5:62:c5:47:ca:8c:6b:67:d4:cf:54:8f:fd: 05:13:b1:6d:b7:a4:e0:83:f5:e8:f2:ca:22:1b:3d: f6:dd:4f:34:07:0c:f7:41:6e:62:f0:76:96:f0:12: a1:45:63:c3:07:09:c9:4a:12:55:f8:99:d2:a5:3b: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:8D:C5:43:21:0E:1B:06:DF:09:35:F7:0F:9A:FF:CA:56:74:A9 X509v3 Authority Key Identifier: keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0e:dd:61:cc:2d:30:53:12:49:e1:1f:2e:dd:b7:36:1b:a5: 70:05:82:85:5a:ca:43:ae:b9:18:71:40:bc:c2:20:9d:f7:d2: fc:bf:69:15:a5:ef:21:c7:01:e1:42:0d:71:62:02:3b:a0:cb: d0:94:c0:ef:45:c5:cf:dd:d2:49:a8:ca:92:ce:fe:00:e4:62: e6:20:6a:0a:e0:15:80:cb:13:2d:84:49:70:36:87:4f:5f:34: ea:64:d4:b4:80:73:57:ef:5a:af:54:85:9a:3a:2d:f8:58:bf: 06:82:e4:fd:7f:33:46:d2:d6:bc:bb:f4:79:c4:f0:c5:56:ae: 4a:9d:94:d9:69:5f:b5:aa:81:0c:b1:57:2a:48:c1:bb:22:ab: df:fc:68:71:c7:f6:87:f7:dc:6c:8d:b3:bb:a7:bd:2a:c8:78: 29:ef:be:92:01:88:ff:a4:5c:1a:e2:9b:d6:d6:71:68:15:10: 51:68:11:7a:7e:91:93:e2:9d:7d:13:1a:9d:25:37:eb:e9:7a: fc:0c:df:93:55:51:4c:6e:cc:54:0c:ac:2e:f4:7b:60:27:db: c3:84:69:99:d9:94:be:bb:fb:3c:84:09:18:5f:cb:14:5a:24: 91:28:81:df:49:b7:7e:7d:b7:4a:0b:ea:1b:93:2b:e4:aa:72: 66:a5:dd:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC RjRDQjJFNkUwHhcNMjUxMDE4MjM1MzMzWhcNMjUxMDI1MjM1MzMzWjAYMRYwFAYD VQQDEw02OGY0Mjg3ZC1hMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHEb+3+TyXFOces7ADnof347irg2eKWzpveuVyAvhYcl3XT1PRQbnjn2jzMt lxoS09D3PGTaLgb4ROdd0HnYbA4deWSN3/Y85s86uH64iRLCRgtjsMME0jKxSun8 6VPSDUKA04UVaDMWaJcqa2NPqrwOUiQ1U/Huc15cy1CpwTInhozfZ5QvAO6B1LrM 9T+vjgmCO5DwFy1eWJaRX1DP4iNoxyXcsVjvLh6s2tLV5XUjnNQqqU4/4HjoqMZz KEPkLRSC4rVixUfKjGtn1M9Uj/0FE7Ftt6Tgg/Xo8soiGz323U80Bwz3QW5i8HaW 8BKhRWPDBwnJShJV+JnSpTvXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZmjcVD IQ4bBt8JNfcPmv/KVnSpMB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJCQS9CREZFQ0RDMjhENzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWho MEtlMW5HMGJzcVdfVExMbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlDt1hzC0wUxJJ4R8u3bc2G6VwBYKFWspDrrkYcUC8wiCd99L8v2kV pe8hxwHhQg1xYgI7oMvQlMDvRcXP3dJJqMqSzv4A5GLmIGoK4BWAyxMthElwNodP XzTqZNS0gHNX71qvVIWaOi34WL8GguT9fzNG0ta8u/R5xPDFVq5KnZTZaV+1qoEM sVcqSMG7Iqvf/Ghxx/aH99xsjbO7p70qyHgp776SAYj/pFwa4pvW1nFoFRBRaBF6 fpGT4p19ExqdJTfr6Xr8DN+TVVFMbsxUDKwu9HtgJ9vDhGmZ2ZS+u/s8hAkYX8sU WiSRKIHfSbd+fbdKC+obkyvkqnJmpd2k -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:24 2025 by rpki-client