$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: jpqrKrlgpfgm5gTid5F0qfz2XSNsTxsKsaZTtwFAlnQ= Subject key identifier: FA:C5:A6:EC:AF:A5:CE:86:9D:17:EC:06:CD:54:B6:15:53:7F:55:C1 Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 04E2 Signing time: Mon 20 Oct 2025 16:05:14 +0000 Manifest this update: Mon 20 Oct 2025 16:05:13 +0000 Manifest next update: Mon 27 Oct 2025 16:05:13 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: zDP9wdb6sGygLBMe85JHpRSmu7NTS7qJu2/nJjiIGHE=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Oct 20 16:05:13 2025 GMT Not After : Oct 27 16:05:13 2025 GMT Subject: CN=68f65dba-582f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:bf:44:36:91:4b:a4:ed:1a:95:31:bb:c7: fd:37:f8:50:e5:ab:b2:f4:da:ac:1e:1c:bb:e6:77: d2:f0:65:4a:cc:9c:28:40:bc:25:48:b6:b6:81:3c: 07:29:b6:a3:1e:d7:a5:75:ae:25:03:36:80:d9:9d: 79:97:98:4f:4e:16:e5:c9:f5:57:73:49:aa:17:ac: 3d:ef:52:08:62:13:7b:f9:8e:36:cb:c1:d9:0c:79: 4b:f0:78:31:09:ea:41:23:0d:66:bc:e0:82:b4:02: 01:11:f4:44:3a:2a:0d:dc:39:ba:dd:4f:a1:b3:c0: 45:07:d8:aa:3c:e8:18:d0:b1:1e:0d:9e:77:52:03: 37:ec:69:d4:e1:3f:f5:2a:ef:1e:06:35:15:40:6c: a3:ab:ff:34:a3:6c:a3:dc:3f:51:6a:15:f9:55:07: 86:67:7b:96:7c:79:e3:67:9b:c0:f1:41:0f:c1:e3: a4:1e:0f:fe:13:58:8e:fc:02:53:4f:f6:3e:10:19: b1:63:57:b9:f2:f7:24:d7:d3:25:e5:b5:46:88:f9: 61:3a:be:c1:a5:b0:d8:da:1d:eb:f9:ed:de:8e:d1: ae:e6:23:e1:36:fa:c1:f6:55:d5:6a:c1:5f:4b:3f: 9a:3d:bf:fb:86:45:1d:f9:b8:de:a5:3a:4e:32:0d: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C5:A6:EC:AF:A5:CE:86:9D:17:EC:06:CD:54:B6:15:53:7F:55:C1 X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:64:2c:44:34:78:37:9d:66:13:10:ad:02:2f:22:4d:e0:0d: 51:3e:d0:f6:1b:e8:e8:9c:58:28:ad:28:9f:ae:22:c9:c5:de: b0:94:b1:2d:46:a6:a2:2c:00:fd:59:62:e4:4c:a8:f0:ad:1e: ba:90:eb:86:c1:d3:e0:bc:e3:53:62:29:30:8b:b3:0f:65:8b: 7f:cd:05:72:74:e8:ba:70:78:61:fe:24:89:2c:13:ea:af:1e: 7d:18:d8:67:56:c8:97:ad:49:f7:2f:a2:e1:7b:d7:0f:e8:70: 64:ad:f2:9d:87:61:7c:00:a5:9a:c1:88:a6:74:93:10:ff:fe: 1d:38:7f:e4:9b:03:5f:22:9e:70:fb:5c:b8:de:f2:a4:a7:58: 6f:6e:fc:04:02:c7:10:b3:80:d8:4d:be:d3:1f:8a:12:4e:fc: da:56:cb:2d:3c:d7:6d:22:8c:f1:64:6d:27:5a:c1:37:1b:1d: d2:3e:0b:9e:4f:25:90:69:60:05:d3:5e:f5:d3:1a:1b:da:4f: ee:94:80:03:8d:ba:00:9e:fc:74:9f:47:aa:f4:d0:e0:99:81: 64:37:69:09:bd:d3:3c:4f:ae:81:d7:9c:e2:a7:85:7f:35:8a: 7f:c2:79:a6:81:2a:fb:4c:f4:68:03:c0:ea:82:34:dc:49:13: 1e:0c:c2:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUxMDIwMTYwNTEzWhcNMjUxMDI3MTYwNTEzWjAYMRYwFAYD VQQDEw02OGY2NWRiYS01ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCK/RDaRS6TtGpUxu8f9N/hQ5auy9NqsHhy75nfS8GVKzJwoQLwlSLa2gTwH KbajHtelda4lAzaA2Z15l5hPThblyfVXc0mqF6w971IIYhN7+Y42y8HZDHlL8Hgx CepBIw1mvOCCtAIBEfREOioN3Dm63U+hs8BFB9iqPOgY0LEeDZ53UgM37GnU4T/1 Ku8eBjUVQGyjq/80o2yj3D9RahX5VQeGZ3uWfHnjZ5vA8UEPweOkHg/+E1iO/AJT T/Y+EBmxY1e58vck19Ml5bVGiPlhOr7BpbDY2h3r+e3ejtGu5iPhNvrB9lXVasFf Sz+aPb/7hkUd+bjepTpOMg1EFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrFpuyv pc6GnRfsBs1UthVTf1XBMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ZCxENHg3nWYTEK0CLyJN4A1RPtD2G+jonFgorSifriLJxd6wlLEt RqaiLAD9WWLkTKjwrR66kOuGwdPgvONTYikwi7MPZYt/zQVydOi6cHhh/iSJLBPq rx59GNhnVsiXrUn3L6Lhe9cP6HBkrfKdh2F8AKWawYimdJMQ//4dOH/kmwNfIp5w +1y43vKkp1hvbvwEAscQs4DYTb7TH4oSTvzaVsstPNdtIozxZG0nWsE3Gx3SPgue TyWQaWAF01710xob2k/ulIADjboAnvx0n0eq9NDgmYFkN2kJvdM8T66B15zip4V/ NYp/wnmmgSr7TPRoA8DqgjTcSRMeDMJ9 -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:30 2025 by rpki-client