$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json) Hash identifier: yVdbBGqdAyNIpaE/NFe3fNSyJ01tyxRBJinPLjWARTU= Subject key identifier: 18:C1:80:09:32:A6:AC:43:8F:67:1D:5C:06:E0:EE:39:1D:3C:5D:E6 Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft Manifest number: 01FF Signing time: Sun 19 Oct 2025 04:45:42 +0000 Manifest this update: Sun 19 Oct 2025 04:45:41 +0000 Manifest next update: Sun 26 Oct 2025 04:45:41 +0000 Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: tEEVW8GrvjBUtIbGLkaUP3+t1O8/PoD6KDGFWipYoHA=) 2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: yz7MYEbOgQ8Al3poUxihFYnUX5uLUR4cvOqS22MeFsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Validity Not Before: Oct 19 04:45:41 2025 GMT Not After : Oct 26 04:45:41 2025 GMT Subject: CN=68f46cf6-b672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:50:ba:4e:c8:68:c0:e6:b3:92:d2:96:2d: 2b:f9:c5:19:b9:9a:40:86:4c:52:4e:c0:68:e0:0d: bf:e6:d0:d6:a0:e5:74:31:f2:2e:59:40:3f:61:4a: 50:a6:b6:7b:9e:f4:96:90:d4:03:9b:83:e2:af:8e: 96:a3:d0:bb:65:88:73:e7:ac:20:ef:af:22:b1:cf: 37:fd:78:27:94:b6:ba:16:a2:b2:ea:df:2b:45:54: 7a:f1:45:ad:cb:82:b2:87:b7:ec:30:d5:d1:23:1c: 0f:98:ea:4a:d3:9b:20:96:84:b6:c3:c8:8c:d2:f7: ad:3b:cc:2d:b2:15:a8:b7:f2:89:ca:fa:71:17:a3: d3:9d:32:09:61:06:35:a6:4c:5c:60:d5:24:be:83: 8d:33:70:bf:cd:ae:9d:15:df:67:8c:8d:7a:2d:80: 70:59:91:fb:a8:7f:3f:98:cb:17:21:40:64:5b:b9: bf:ee:1c:2a:83:e0:0c:06:b0:9b:8b:a5:bc:0b:d9: 38:74:35:07:44:22:38:7c:21:44:b1:a0:f8:6f:6a: db:60:8a:ab:0d:e3:d1:f6:37:1e:5e:2d:96:7a:84: 8a:1c:71:3c:fc:63:34:c7:f7:bb:3a:c0:77:6b:ce: c3:5d:d6:8b:d4:1c:93:0b:b5:08:ad:01:b3:ad:e8: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C1:80:09:32:A6:AC:43:8F:67:1D:5C:06:E0:EE:39:1D:3C:5D:E6 X509v3 Authority Key Identifier: keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:81:0e:6c:cc:2f:ed:1c:a7:df:f9:f4:c3:61:9d:48:5c:de: 81:40:d7:79:f2:2d:1e:c7:98:16:ab:5b:b2:4a:e8:6d:d2:c7: c7:e0:2e:a1:ec:d0:74:ec:b3:d1:99:16:3b:90:83:74:24:14: 2a:f3:c5:86:3f:30:cc:fe:34:c4:28:91:bf:a6:e4:57:0f:4a: 7c:84:37:d6:32:41:a0:88:04:3d:82:4b:96:de:bb:58:f2:99: 4a:26:3a:7a:43:b6:2f:c6:1f:0b:a9:28:81:05:e5:f9:ef:1b: da:31:ce:6a:46:52:57:cf:60:b9:09:bb:3c:48:60:dd:72:a3: 42:fb:b4:b7:f2:55:ac:05:aa:c0:78:00:d3:9e:8c:40:2a:b8: 83:b2:bc:9a:34:2b:d3:94:7f:1f:c0:1a:63:0e:89:4f:2b:30: 2a:39:1d:c9:9e:b5:cd:16:92:f8:f0:60:9c:e9:77:b1:c1:24: f6:35:a8:97:41:a4:95:d6:8c:50:de:d0:3a:fd:a4:45:ee:17: cb:6a:fe:6f:26:b8:fe:34:48:0a:e9:fd:a0:0c:d6:94:0c:8e: e4:e6:f9:aa:1f:80:27:45:86:ff:56:e3:6d:6a:2e:aa:70:06: d9:3e:48:27:33:e2:30:29:ff:c7:e9:72:88:e5:54:9e:6f:a4: 7a:cd:d4:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0QkExMTAvBgNVBAUTKDgzQjZFN0VBMjNCREMzQTM4RDYwQjRGRkEyRUZGNUEx OEYxRENENjgwHhcNMjUxMDE5MDQ0NTQxWhcNMjUxMDI2MDQ0NTQxWjAYMRYwFAYD VQQDEw02OGY0NmNmNi1iNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5pQuk7IaMDms5LSli0r+cUZuZpAhkxSTsBo4A2/5tDWoOV0MfIuWUA/YUpQ prZ7nvSWkNQDm4Pir46Wo9C7ZYhz56wg768isc83/XgnlLa6FqKy6t8rRVR68UWt y4Kyh7fsMNXRIxwPmOpK05sgloS2w8iM0vetO8wtshWot/KJyvpxF6PTnTIJYQY1 pkxcYNUkvoONM3C/za6dFd9njI16LYBwWZH7qH8/mMsXIUBkW7m/7hwqg+AMBrCb i6W8C9k4dDUHRCI4fCFEsaD4b2rbYIqrDePR9jceXi2WeoSKHHE8/GM0x/e7OsB3 a87DXdaL1ByTC7UIrQGzreg78wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjBgAky pqxDj2cdXAbg7jkdPF3mMB8GA1UdIwQYMBaAFIO25+ojvcOjjWC0/6Lv9aGPHc1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjRCQS9DNzNFMTg0NDlD OUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2T05ZTFRfb3VfMW9ZOGR6 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3Ym42aU85dzZPTllMVF9vdV8xb1k4ZHpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjRCQS9DNzNFMTg0NDlDOUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2 T05ZTFRfb3VfMW9ZOGR6V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClgQ5szC/tHKff+fTDYZ1IXN6BQNd58i0ex5gWq1uySuht0sfH4C6h 7NB07LPRmRY7kIN0JBQq88WGPzDM/jTEKJG/puRXD0p8hDfWMkGgiAQ9gkuW3rtY 8plKJjp6Q7Yvxh8LqSiBBeX57xvaMc5qRlJXz2C5Cbs8SGDdcqNC+7S38lWsBarA eADTnoxAKriDsryaNCvTlH8fwBpjDolPKzAqOR3JnrXNFpL48GCc6XexwST2NaiX QaSV1oxQ3tA6/aRF7hfLav5vJrj+NEgK6f2gDNaUDI7k5vmqH4AnRYb/VuNtai6q cAbZPkgnM+IwKf/H6XKI5VSeb6R6zdQk -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:52 2025 by rpki-client