$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json) Hash identifier: CR5A2IW2l54KjrQ062yRiisDs2KG+gbjzrv9ZsStgYQ= Subject key identifier: FD:38:FD:FA:56:A8:D8:DF:99:3E:F1:32:63:4C:03:DC:F5:57:62:F2 Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft Manifest number: 0695 Signing time: Sat 18 Oct 2025 23:51:50 +0000 Manifest this update: Sat 18 Oct 2025 23:51:50 +0000 Manifest next update: Sat 25 Oct 2025 23:51:50 +0000 Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: W6JT66Tp/THYOR4U+J79LaIrd9/UHAR9VF4HlW483po=) 2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: /i9RofZ06AYBMENjcaJpNwKG22jU3wGWaEpuwf3htx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Validity Not Before: Oct 18 23:51:50 2025 GMT Not After : Oct 25 23:51:50 2025 GMT Subject: CN=68f42816-415b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:c7:86:19:c8:99:7a:fe:ef:d2:a1:25:90: 70:d3:8a:2e:9b:1e:45:15:9b:4d:42:9a:b5:38:83: a7:86:48:62:6a:4b:06:26:1b:d3:fb:09:c7:de:34: e7:52:b1:59:80:7a:a3:d5:ad:fa:f8:f3:a0:20:21: cd:5f:5a:c3:5f:b6:e2:4a:a9:90:e2:cf:f9:32:e6: 66:d3:84:b9:16:00:0f:6f:d9:14:e3:d5:84:9f:ac: 1e:fb:7a:8f:92:b6:97:f8:a0:04:0f:be:7d:0b:eb: 57:23:98:15:53:b9:f4:bc:7f:39:d9:4c:3f:6d:a7: 2d:2f:49:3f:6d:de:24:82:c8:ac:9d:b7:0f:ff:cb: 96:4a:69:f8:5e:22:38:5e:77:db:45:98:27:00:76: be:cc:c0:2b:19:3c:c8:77:f0:58:90:57:9a:06:8a: f0:85:b0:8d:52:25:18:89:1d:2c:0d:26:46:76:72: 68:51:fa:d4:47:a8:fa:64:51:5d:56:12:e3:24:cc: 93:c1:0c:b5:85:43:1a:3a:c3:dd:6c:a3:b1:b0:16: a2:15:ce:eb:52:c5:be:df:31:02:8c:ac:00:46:fb: 78:bb:7d:e1:30:e5:c5:1b:9d:b3:91:5e:ac:5d:7e: b3:59:30:43:0c:7c:ad:65:0b:cd:6a:d8:37:94:4a: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:FD:FA:56:A8:D8:DF:99:3E:F1:32:63:4C:03:DC:F5:57:62:F2 X509v3 Authority Key Identifier: keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:28:1e:51:e9:41:35:b5:ae:c7:f1:70:ca:c6:91:4e:f8:67: 2d:02:e4:c8:24:14:a9:70:7e:b4:d0:be:d4:dd:1b:93:83:8c: 17:ce:14:15:97:63:4e:a7:7d:9c:1d:c4:ee:40:b5:f8:81:23: cf:ed:0a:9e:02:86:ef:07:2f:3a:32:3b:14:bd:db:88:ba:b9: e6:5a:c1:3a:48:af:95:be:a7:66:f4:89:99:ac:91:d7:1a:ca: 76:82:96:30:c4:34:b2:f0:2d:71:bb:db:b8:e9:fa:f8:e3:14: c8:b2:d4:f6:70:5e:1a:de:cb:fd:61:e5:c1:8b:36:af:ee:ab: 0f:fe:b2:b3:3a:58:30:c2:8f:0c:a7:82:59:5f:30:de:ba:0b: 1f:d4:de:4c:e1:45:3d:a6:31:c0:15:82:90:75:a1:71:e5:38: eb:93:11:de:18:52:95:e5:c4:cb:1e:53:c0:2c:6e:31:73:6c: 70:21:8a:14:75:5b:54:bd:2d:2e:cb:f5:ef:3b:cf:70:ce:50: 76:ae:e1:33:20:ef:ac:03:83:ee:08:6a:f1:d2:9f:2f:52:51: 30:42:56:f9:a1:5f:48:25:4e:b9:b0:a8:77:eb:8b:ee:8b:4f: d7:9e:94:df:97:45:b7:6c:d5:6e:16:70:db:b9:b7:d9:bc:70: 9a:31:a9:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD RkI1RjA2OTAwHhcNMjUxMDE4MjM1MTUwWhcNMjUxMDI1MjM1MTUwWjAYMRYwFAYD VQQDEw02OGY0MjgxNi00MTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLXHhhnImXr+79KhJZBw04oumx5FFZtNQpq1OIOnhkhiaksGJhvT+wnH3jTn UrFZgHqj1a36+POgICHNX1rDX7biSqmQ4s/5MuZm04S5FgAPb9kU49WEn6we+3qP kraX+KAED759C+tXI5gVU7n0vH852Uw/bactL0k/bd4kgsisnbcP/8uWSmn4XiI4 XnfbRZgnAHa+zMArGTzId/BYkFeaBorwhbCNUiUYiR0sDSZGdnJoUfrUR6j6ZFFd VhLjJMyTwQy1hUMaOsPdbKOxsBaiFc7rUsW+3zECjKwARvt4u33hMOXFG52zkV6s XX6zWTBDDHytZQvNatg3lEp+GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP04/fpW qNjfmT7xMmNMA9z1V2LyMB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjMxNy80RkQ1NzY4MDhDNkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtf blNheE9scW40M2JQdGZCcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWKB5R6UE1ta7H8XDKxpFO+GctAuTIJBSpcH600L7U3RuTg4wXzhQV l2NOp32cHcTuQLX4gSPP7QqeAobvBy86MjsUvduIurnmWsE6SK+Vvqdm9ImZrJHX Gsp2gpYwxDSy8C1xu9u46fr44xTIstT2cF4a3sv9YeXBizav7qsP/rKzOlgwwo8M p4JZXzDeugsf1N5M4UU9pjHAFYKQdaFx5TjrkxHeGFKV5cTLHlPALG4xc2xwIYoU dVtUvS0uy/XvO89wzlB2ruEzIO+sA4PuCGrx0p8vUlEwQlb5oV9IJU65sKh364vu i0/XnpTfl0W3bNVuFnDbubfZvHCaManL -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:19 2025 by rpki-client