$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: lSPCBpnBeVs2Il+4TU05pcxmuVNJgavJYuGYI+vsI74= Subject key identifier: D8:5E:75:A5:28:B7:DC:B1:08:05:FF:76:EA:AC:50:2D:D9:98:9C:1E Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 023D Signing time: Sun 19 Oct 2025 04:07:47 +0000 Manifest this update: Sun 19 Oct 2025 04:07:46 +0000 Manifest next update: Sun 26 Oct 2025 04:07:46 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: 0emX5JwBggH9tgHjkF0EwFG8m3mOKlN/kBjxnr73sRI=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: /cbaTktdW8E1yuwyyLv6euCmC3kworQWAZraDFOpKP8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 2mKwnMpgR04h28Vp1kCMChznHcUKBjq3JV55A80+RxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Oct 19 04:07:46 2025 GMT Not After : Oct 26 04:07:46 2025 GMT Subject: CN=68f46412-0cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a9:a0:a7:49:79:9b:80:ca:fe:8b:8e:40:67: e2:26:c9:d1:cd:45:70:ef:31:c3:fb:41:86:14:c9: 6c:bb:b2:23:30:9f:d1:f1:d2:1a:cc:3d:6f:aa:b3: 13:3e:95:9b:7f:63:d1:2f:33:57:d8:fe:ad:0a:da: ba:1d:d4:ce:a2:8f:a3:b9:0f:ae:0c:7f:10:1b:96: f8:8f:56:25:24:d0:65:f0:02:e7:41:da:67:11:44: 64:60:d4:84:a9:1c:03:8a:b1:bf:31:91:b5:bf:fe: f3:9e:5a:ea:36:75:89:b4:c2:72:dd:1b:7a:38:5a: e1:c0:73:95:24:02:2f:dd:df:e7:94:b1:98:59:9d: 88:3b:f6:ae:11:31:ba:b6:8d:c8:1b:20:79:c2:e5: 31:07:2b:aa:de:d7:7a:3c:aa:90:5d:ff:b2:2e:74: 5f:43:8d:20:e1:a8:5f:f0:b2:ae:21:eb:27:07:6a: ca:a6:8c:ee:e5:1a:49:1c:5f:f1:b3:90:15:e3:27: 40:32:90:02:8a:95:92:27:8d:43:ab:1d:54:17:6e: 82:7e:a3:18:2d:de:04:2a:d5:d1:b0:59:b5:dd:79: 09:2e:c4:b2:77:7c:52:11:6e:c3:02:a8:fb:17:09: 39:4e:01:ba:8e:bb:75:b6:6a:5f:de:e2:79:28:ed: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:75:A5:28:B7:DC:B1:08:05:FF:76:EA:AC:50:2D:D9:98:9C:1E X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b8:0c:17:94:cd:1c:a0:3e:0e:92:ba:fb:92:b0:c9:9c:28: 4b:31:59:7b:2c:f7:5d:cb:5b:9b:7a:a9:39:35:18:1d:d9:19: 5f:c5:e1:39:62:5c:d6:8f:ca:09:c9:c4:b3:dc:e4:1c:9f:45: f5:52:5d:cd:3e:b2:81:c7:80:aa:ff:3b:83:f2:e0:f7:82:b7: e2:33:1f:b4:08:09:51:66:d6:a9:e8:dd:bb:88:8e:d4:6e:b7: 29:5d:6c:67:c9:94:16:46:4a:75:f7:26:91:c9:b1:e0:35:5a: 23:b8:a8:16:d6:fb:66:c3:2c:0a:0e:85:23:5c:79:e4:da:a9: 2a:6f:ac:a2:41:6c:6e:12:7d:7f:e5:c4:b7:62:77:01:98:ed: 6f:24:4d:f9:cb:d8:ed:20:6b:51:f3:82:cd:47:1b:86:c4:66: 6c:1c:0f:9f:c1:83:88:fe:7f:08:0d:0d:57:f6:bd:0f:a1:91: bc:77:90:63:47:e6:89:39:40:02:f2:af:d6:a7:03:50:43:fb: 4c:3c:45:54:4f:e6:90:e1:f1:8c:9c:92:1f:54:a9:0d:49:dc: aa:8f:c5:80:d0:92:af:a0:a6:34:fa:cc:8c:de:4a:c1:5e:a0: 75:ac:95:2d:91:c1:20:6c:ab:2e:06:b6:ee:51:ba:8d:43:bd: 51:27:31:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUxMDE5MDQwNzQ2WhcNMjUxMDI2MDQwNzQ2WjAYMRYwFAYD VQQDEw02OGY0NjQxMi0wY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Kmgp0l5m4DK/ouOQGfiJsnRzUVw7zHD+0GGFMlsu7IjMJ/R8dIazD1vqrMT PpWbf2PRLzNX2P6tCtq6HdTOoo+juQ+uDH8QG5b4j1YlJNBl8ALnQdpnEURkYNSE qRwDirG/MZG1v/7znlrqNnWJtMJy3Rt6OFrhwHOVJAIv3d/nlLGYWZ2IO/auETG6 to3IGyB5wuUxByuq3td6PKqQXf+yLnRfQ40g4ahf8LKuIesnB2rKpozu5RpJHF/x s5AV4ydAMpACipWSJ41Dqx1UF26CfqMYLd4EKtXRsFm13XkJLsSyd3xSEW7DAqj7 Fwk5TgG6jrt1tmpf3uJ5KO3dSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhedaUo t9yxCAX/duqsUC3ZmJweMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFuAwXlM0coD4Okrr7krDJnChLMVl7LPddy1ubeqk5NRgd2RlfxeE5 YlzWj8oJycSz3OQcn0X1Ul3NPrKBx4Cq/zuD8uD3grfiMx+0CAlRZtap6N27iI7U brcpXWxnyZQWRkp19yaRybHgNVojuKgW1vtmwywKDoUjXHnk2qkqb6yiQWxuEn1/ 5cS3YncBmO1vJE35y9jtIGtR84LNRxuGxGZsHA+fwYOI/n8IDQ1X9r0PoZG8d5Bj R+aJOUAC8q/WpwNQQ/tMPEVUT+aQ4fGMnJIfVKkNSdyqj8WA0JKvoKY0+syM3krB XqB1rJUtkcEgbKsuBrbuUbqNQ71RJzF+ -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:09 2025 by rpki-client