$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: 60dAcsgEhJdFsndj/IXcbbEnPsBEjMFruzzmAHO0psE= Subject key identifier: 5B:DF:9A:90:17:73:AB:5D:08:69:7C:8B:55:61:DD:D6:47:8A:1B:EC Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 062C Signing time: Sun 19 Oct 2025 00:26:24 +0000 Manifest this update: Sun 19 Oct 2025 00:26:23 +0000 Manifest next update: Sun 26 Oct 2025 00:26:23 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: ReTgTc/6dJF9m4SHHLe25j5EBtjZJcvkHXHnA8Or7QI=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 6: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 7: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 8: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Oct 19 00:26:23 2025 GMT Not After : Oct 26 00:26:23 2025 GMT Subject: CN=68f4302f-e2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:b3:b9:8b:8a:1e:15:9c:23:16:b9:d7:12: 6b:6f:b9:f3:39:90:9b:56:b5:d8:01:16:c2:d3:70: 41:23:9f:f3:4c:b7:6c:24:dc:84:65:8b:0c:d5:c7: ba:ac:ae:63:4a:43:6d:f1:3f:26:0c:16:62:b3:79: d3:26:31:61:b8:f8:f9:b6:3d:82:80:56:d8:ba:a4: cf:83:15:fa:0e:e6:86:dc:32:ed:94:1e:49:a2:5f: 53:e7:84:b9:5a:a7:90:1b:de:df:8a:8c:73:9e:ef: 8a:3c:2f:79:2b:23:5c:a5:2f:ef:b7:52:d3:b5:c3: 4d:cb:df:0a:2a:62:c4:5f:97:4f:76:9e:0a:4d:8c: 19:2d:71:9c:bf:5d:4a:21:68:05:eb:8c:11:c3:6f: 0c:11:0a:c8:58:de:69:b4:30:29:41:1f:05:43:1f: 3f:55:03:79:58:55:e5:77:4f:b4:b7:1b:7f:72:62: 73:d6:95:89:cf:a5:05:12:c8:d4:6f:bf:92:8e:f2: 3c:29:6f:10:40:1d:d3:39:0e:54:e3:9e:8f:60:27: b0:ed:30:ec:1f:2e:db:42:33:00:af:60:14:1d:85: f2:fb:81:91:65:5d:fa:84:99:f1:13:8f:cc:be:3b: 3a:90:f8:ed:a1:10:3a:7c:de:11:9e:76:70:d7:9d: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:9A:90:17:73:AB:5D:08:69:7C:8B:55:61:DD:D6:47:8A:1B:EC X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ec:9f:a8:9c:7c:57:21:0b:7c:a3:6d:2a:45:a7:67:2e:4c: 4f:4f:bf:2f:c2:27:14:39:6b:e6:90:b9:97:43:bc:e0:ac:c7: 0e:0a:d7:ca:5a:9f:23:f6:24:70:b2:38:be:f6:c6:c9:95:40: 89:45:19:ad:4b:77:dc:98:24:1f:cc:89:c8:88:3a:f8:9f:ca: b9:70:97:9f:c2:47:d5:11:2d:14:15:ef:5b:8a:fe:fc:2e:ea: 23:42:e8:f6:ae:d8:91:60:13:27:94:b3:90:52:1b:fe:7f:5c: 8b:0c:26:02:d4:66:49:33:89:70:09:5a:3c:86:59:58:d1:16: 2c:0a:70:e4:18:38:d2:81:c1:a2:ae:5e:9c:a7:c6:d4:59:79: 27:d1:d5:5c:09:d2:66:aa:d2:f8:0a:ed:ba:52:fe:48:b8:be: b0:1c:e3:90:cc:43:6b:eb:79:c6:c7:c0:24:88:3e:39:08:5b: 5e:ce:75:b2:86:f1:6f:e3:ac:b5:2c:e7:c3:86:7c:eb:57:6a: 58:a3:fd:c3:2c:5f:cb:9e:85:16:48:da:1c:76:af:24:78:b7: cc:eb:9c:1a:30:12:c5:3f:d8:3e:30:a1:0c:e3:4c:98:61:07: ef:2b:37:59:27:15:08:32:e5:2a:98:1b:c7:88:61:41:ae:61: 24:40:16:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUxMDE5MDAyNjIzWhcNMjUxMDI2MDAyNjIzWjAYMRYwFAYD VQQDEw02OGY0MzAyZi1lMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7uzuYuKHhWcIxa51xJrb7nzOZCbVrXYARbC03BBI5/zTLdsJNyEZYsM1ce6 rK5jSkNt8T8mDBZis3nTJjFhuPj5tj2CgFbYuqTPgxX6DuaG3DLtlB5Jol9T54S5 WqeQG97fioxznu+KPC95KyNcpS/vt1LTtcNNy98KKmLEX5dPdp4KTYwZLXGcv11K IWgF64wRw28MEQrIWN5ptDApQR8FQx8/VQN5WFXld0+0txt/cmJz1pWJz6UFEsjU b7+SjvI8KW8QQB3TOQ5U456PYCew7TDsHy7bQjMAr2AUHYXy+4GRZV36hJnxE4/M vjs6kPjtoRA6fN4RnnZw151I4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvfmpAX c6tdCGl8i1Vh3dZHihvsMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN7J+onHxXIQt8o20qRadnLkxPT78vwicUOWvmkLmXQ7zgrMcOCtfK Wp8j9iRwsji+9sbJlUCJRRmtS3fcmCQfzInIiDr4n8q5cJefwkfVES0UFe9biv78 LuojQuj2rtiRYBMnlLOQUhv+f1yLDCYC1GZJM4lwCVo8hllY0RYsCnDkGDjSgcGi rl6cp8bUWXkn0dVcCdJmqtL4Cu26Uv5IuL6wHOOQzENr63nGx8AkiD45CFteznWy hvFv46y1LOfDhnzrV2pYo/3DLF/LnoUWSNocdq8keLfM65waMBLFP9g+MKEM40yY YQfvKzdZJxUIMuUqmBvHiGFBrmEkQBbU -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:29 2025 by rpki-client