$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json) Hash identifier: p3mC5zogLBlidjlX/htCjYOHyvHMWzwBWqA9GmXO+yg= Subject key identifier: DC:B4:F6:CE:C8:04:78:7D:57:26:54:9A:31:0E:97:31:CF:C6:95:97 Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft Manifest number: 07D8 Signing time: Sat 18 Oct 2025 22:27:58 +0000 Manifest this update: Sat 18 Oct 2025 22:27:57 +0000 Manifest next update: Sat 25 Oct 2025 22:27:57 +0000 Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: 6rkMtMvhcc54l7Aykbp1aSYunfJBCkFx2Ri00hSGqnA=) 2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: 6t5gjK6uSlTdUUyjqaA8L4ugjjxcnRzK8+qoE0d23h4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Validity Not Before: Oct 18 22:27:57 2025 GMT Not After : Oct 25 22:27:57 2025 GMT Subject: CN=68f4146d-7a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:81:8c:67:7a:d5:82:7f:84:45:f7:25:c0: 32:6b:1b:b8:fb:e7:54:12:53:d6:37:c9:dc:67:00: 21:0d:14:68:e9:ec:f0:51:15:6e:d0:bd:86:5c:8f: f5:b1:26:a8:a6:9b:f2:ff:a4:c7:10:ec:9f:34:66: 78:33:36:da:72:90:64:34:a6:2e:36:73:53:72:3e: 38:d7:d9:07:9c:a7:15:ae:b5:1a:0c:63:cf:5f:34: d6:13:c2:15:90:45:4f:32:8a:e6:ec:59:fd:89:b6: 60:6b:b0:43:2e:3b:a4:7c:78:9f:0e:3b:96:2e:6d: 32:51:27:f7:28:68:21:32:3d:c1:b5:e6:fc:79:b6: 49:9c:dc:f2:bd:cf:e8:5e:d4:5c:59:88:87:c1:90: 01:ca:0b:5e:50:78:09:15:81:ae:62:bd:72:44:83: c4:c1:6c:a9:c2:0e:91:ad:80:57:08:17:3d:3a:d5: cd:b6:c4:9e:d3:1f:cf:2b:4f:16:06:99:7b:d2:16: 96:25:aa:3e:64:6a:11:07:01:e6:ce:40:8a:2e:5e: 31:e6:6a:48:b0:9b:f7:63:94:96:4a:82:9b:41:ab: 48:b1:ce:1c:96:0e:0c:a4:5f:1b:42:ba:b3:75:ed: 41:0b:f3:51:6f:09:04:fa:1f:dd:71:43:2e:82:6a: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B4:F6:CE:C8:04:78:7D:57:26:54:9A:31:0E:97:31:CF:C6:95:97 X509v3 Authority Key Identifier: keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:99:ff:71:ca:1a:1b:4a:2c:c2:53:e1:30:2f:aa:22:da:a9: 43:3b:8d:5b:0c:fa:a6:8b:78:f5:23:67:25:44:81:e7:be:e5: d1:52:15:3d:dd:89:8f:d8:fe:04:39:cb:93:35:da:c1:85:19: 3a:0b:4e:29:b6:0a:73:e6:7f:20:70:20:ce:86:44:b4:9e:c6: 28:9a:3a:c0:a1:f6:64:eb:6e:22:58:c6:fa:ed:4b:79:29:89: 19:bd:e3:de:fd:1b:e8:cd:91:07:d4:90:3a:b1:d5:28:31:31: bd:06:d8:ed:c5:d5:9d:18:b8:74:8b:32:c5:16:91:f3:7a:63: a9:0b:52:eb:90:c0:db:b7:21:f0:71:0f:8e:87:e7:ea:ae:81: cc:63:02:fd:2e:53:dc:52:b3:b2:bf:5d:e3:66:87:7e:ab:e6: e6:0b:b5:eb:b2:43:bc:70:46:a6:b9:e3:bc:b5:c4:0e:18:99: 90:a4:06:fc:c3:f1:9d:95:73:57:0e:15:26:9f:64:f7:ce:63: 08:ba:ac:84:c6:eb:c3:58:ab:01:22:df:8b:2a:1e:ed:e3:80: 20:a3:23:29:05:6d:df:52:be:bf:c2:ef:09:b0:e1:73:64:a9: 70:b2:6b:3e:9e:ed:c2:05:15:a2:4d:30:d2:e7:5e:90:7e:36: 5d:ad:cd:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2 MTc0REU4M0EwHhcNMjUxMDE4MjIyNzU3WhcNMjUxMDI1MjIyNzU3WjAYMRYwFAYD VQQDEw02OGY0MTQ2ZC03YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuo2BjGd61YJ/hEX3JcAyaxu4++dUElPWN8ncZwAhDRRo6ezwURVu0L2GXI/1 sSaoppvy/6THEOyfNGZ4MzbacpBkNKYuNnNTcj4419kHnKcVrrUaDGPPXzTWE8IV kEVPMorm7Fn9ibZga7BDLjukfHifDjuWLm0yUSf3KGghMj3Bteb8ebZJnNzyvc/o XtRcWYiHwZABygteUHgJFYGuYr1yRIPEwWypwg6RrYBXCBc9OtXNtsSe0x/PK08W Bpl70haWJao+ZGoRBwHmzkCKLl4x5mpIsJv3Y5SWSoKbQatIsc4clg4MpF8bQrqz de1BC/NRbwkE+h/dcUMugmobDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy09s7I BHh9VyZUmjEOlzHPxpWXMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtY V1JPWTJDOHowUmhoZE42RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfmf9xyhobSizCU+EwL6oi2qlDO41bDPqmi3j1I2clRIHnvuXRUhU9 3YmP2P4EOcuTNdrBhRk6C04ptgpz5n8gcCDOhkS0nsYomjrAofZk624iWMb67Ut5 KYkZvePe/RvozZEH1JA6sdUoMTG9BtjtxdWdGLh0izLFFpHzemOpC1LrkMDbtyHw cQ+Oh+fqroHMYwL9LlPcUrOyv13jZod+q+bmC7XrskO8cEamueO8tcQOGJmQpAb8 w/GdlXNXDhUmn2T3zmMIuqyExuvDWKsBIt+LKh7t44AgoyMpBW3fUr6/wu8JsOFz ZKlwsms+nu3CBRWiTTDS516QfjZdrc2E -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:09 2025 by rpki-client