$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: vYP2Ll3N6WC6VZ9s5LtFX6mGzpjj1AIw/rt7i04VZCo= Subject key identifier: A4:3A:7E:79:F2:74:42:03:8C:DE:F3:57:F7:21:36:9D:67:74:61:78 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 01A4 Signing time: Sun 19 Oct 2025 05:55:56 +0000 Manifest this update: Sun 19 Oct 2025 05:55:55 +0000 Manifest next update: Sun 26 Oct 2025 05:55:55 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: qEzWQSjlLRUBxnNATbK/JGNA9m7m1IOP6s3YJugn1b0=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=) 7: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=) 8: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=) 9: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=) 10: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Oct 19 05:55:55 2025 GMT Not After : Oct 26 05:55:55 2025 GMT Subject: CN=68f47d6b-db12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:eb:51:c0:b1:d2:cf:24:9a:85:5b:90:3b: a3:f0:50:fb:df:1d:ae:44:3b:72:7a:b4:51:5d:04: a5:07:0a:be:dc:84:2a:0b:6a:2c:70:4a:cb:9e:78: c4:3d:81:8a:34:a2:43:b0:c6:40:94:71:0c:3d:24: 57:d0:4b:46:0b:70:4d:63:bb:19:93:6d:ef:07:62: 41:af:b2:2b:b2:cd:82:60:c2:3d:5d:b5:2e:d2:1b: 54:a8:6c:71:51:d7:63:9c:90:a6:32:53:48:66:f3: bc:c8:f2:00:1a:d0:6e:c9:fb:9a:b1:20:f9:12:bf: c1:7f:d4:55:41:57:25:1c:d3:d6:6f:38:7d:a9:94: d0:4b:f7:a6:71:39:a4:03:a4:6c:7d:da:aa:6e:bd: 81:6d:f3:52:80:d8:6f:a6:13:f8:15:2e:10:1d:55: 6c:4e:ff:db:1f:ed:c8:64:9f:c4:bc:79:ea:2c:a2: 7d:8e:1e:44:16:ce:0f:82:14:13:eb:6e:74:8f:ee: cc:8a:3a:79:4f:37:1e:86:3d:df:87:a1:10:18:59: 0d:c1:d2:88:b2:39:04:d3:38:10:e1:04:ab:de:f0: 7f:5f:ee:68:e8:6e:ed:38:53:c6:2c:29:92:64:ce: 31:34:e3:35:47:41:7f:11:67:61:65:cf:19:e6:d6: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3A:7E:79:F2:74:42:03:8C:DE:F3:57:F7:21:36:9D:67:74:61:78 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fb:08:07:c5:72:6d:ef:70:41:ac:ce:64:cb:ac:ca:65:29: 9f:5e:6a:b9:34:5f:3e:c8:9a:37:09:9f:68:48:5b:1e:a8:fe: 08:da:69:1b:d0:99:2f:43:1e:91:f8:31:77:07:83:02:2b:cc: cc:43:4c:11:d6:ec:dc:db:37:6f:e5:db:55:66:67:a3:ec:4a: e2:e0:6d:15:8a:49:8c:58:3e:a5:30:f8:cf:e3:68:21:17:4b: 98:b5:42:1f:5a:12:f4:a4:18:5a:9a:b3:8c:f3:9f:89:ec:04: b0:ff:b2:60:be:0c:12:3a:a9:7a:99:8f:f2:78:64:a8:d3:cf: 75:84:40:90:28:a9:4a:cf:97:18:8d:f5:d9:be:1a:91:3f:21: 24:57:5e:20:60:12:c2:8a:8a:4d:68:b4:19:84:3e:9a:41:0b: fe:06:dc:01:55:5e:ab:9b:37:33:46:76:e6:86:6a:b8:60:13: 65:16:d6:2e:7b:90:0f:02:6e:0c:8f:a3:15:8d:b3:6f:23:b7: 5c:f2:45:eb:a7:09:ef:d5:f5:e9:08:fe:33:ac:65:db:13:c6: b4:2f:0b:e1:4e:44:ad:16:ad:e7:46:d9:6f:4a:2e:ce:85:b0: 42:1a:fb:1e:65:40:11:d2:60:6c:93:77:06:ab:24:1f:92:78: 2a:cd:24:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUxMDE5MDU1NTU1WhcNMjUxMDI2MDU1NTU1WjAYMRYwFAYD VQQDEw02OGY0N2Q2Yi1kYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnHrUcCx0s8kmoVbkDuj8FD73x2uRDtyerRRXQSlBwq+3IQqC2oscErLnnjE PYGKNKJDsMZAlHEMPSRX0EtGC3BNY7sZk23vB2JBr7Irss2CYMI9XbUu0htUqGxx UddjnJCmMlNIZvO8yPIAGtBuyfuasSD5Er/Bf9RVQVclHNPWbzh9qZTQS/emcTmk A6Rsfdqqbr2BbfNSgNhvphP4FS4QHVVsTv/bH+3IZJ/EvHnqLKJ9jh5EFs4PghQT 6250j+7Mijp5Tzcehj3fh6EQGFkNwdKIsjkE0zgQ4QSr3vB/X+5o6G7tOFPGLCmS ZM4xNOM1R0F/EWdhZc8Z5tZpkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQ6fnny dEIDjN7zV/chNp1ndGF4MB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL+wgHxXJt73BBrM5ky6zKZSmfXmq5NF8+yJo3CZ9oSFseqP4I2mkb 0JkvQx6R+DF3B4MCK8zMQ0wR1uzc2zdv5dtVZmej7Eri4G0VikmMWD6lMPjP42gh F0uYtUIfWhL0pBhamrOM85+J7ASw/7JgvgwSOql6mY/yeGSo0891hECQKKlKz5cY jfXZvhqRPyEkV14gYBLCiopNaLQZhD6aQQv+BtwBVV6rmzczRnbmhmq4YBNlFtYu e5APAm4Mj6MVjbNvI7dc8kXrpwnv1fXpCP4zrGXbE8a0LwvhTkStFq3nRtlvSi7O hbBCGvseZUAR0mBsk3cGqyQfkngqzSTR -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:39 2025 by rpki-client