$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: L+nHb/d+p0i/2HUi32GZNkxBnlCrCCajrl9GRdLqUc4= Subject key identifier: 0A:2F:7B:01:25:18:79:E7:AE:47:63:51:97:46:04:FA:A7:D7:36:FE Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 01CE Signing time: Sun 19 Oct 2025 05:23:14 +0000 Manifest this update: Sun 19 Oct 2025 05:23:13 +0000 Manifest next update: Sun 26 Oct 2025 05:23:13 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: DTEj+vj7xJ5t9xlX8DzOWnE0274andlFl/regxzxcD0=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: AIB5iRq0wZoH+M+QlWHGPd+eXgQBKYvmWuJJAuisaNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Oct 19 05:23:13 2025 GMT Not After : Oct 26 05:23:13 2025 GMT Subject: CN=68f475c1-c9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f5:4a:55:c3:0d:c2:dd:5b:8e:c2:d7:78:21: 9b:32:a5:18:39:12:f9:04:f7:e7:a0:bb:f5:81:55: cb:af:a7:0b:86:e8:e6:35:9d:26:dd:1f:ac:b0:e9: 29:de:7c:59:e9:1d:29:6a:cf:55:61:98:d7:71:2b: 70:75:53:46:cf:f0:93:8e:b4:1e:9c:00:9a:da:cf: fb:09:d0:90:48:3f:f0:4b:ca:69:0d:ff:ba:5a:80: 94:ee:4f:df:ba:ac:28:13:b0:b2:cd:ee:3d:74:39: 98:f6:26:d1:42:0c:dd:68:12:43:15:64:17:0e:a5: d1:ab:5b:dd:51:dc:cd:da:2d:da:ae:15:88:47:26: 5b:41:db:2f:91:de:e7:26:48:c9:65:fa:18:d5:d7: 7e:9b:24:6b:cc:19:68:3b:f3:ed:5c:4b:6b:82:38: 46:29:04:5d:54:fe:bc:58:88:bc:5c:6e:4a:3e:c4: 2f:de:7e:41:a1:75:dc:ed:73:6a:c9:e1:d7:ab:b2: 47:f7:53:8d:57:1d:33:67:f2:84:73:01:07:2b:b8: 13:d1:d2:09:c3:e2:30:be:6e:da:72:00:18:79:8a: 80:bc:cd:98:22:8f:cd:9a:cb:c7:12:17:3a:6f:bc: a7:d6:a6:46:97:fc:6e:c3:e1:94:7f:c8:05:4a:52: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2F:7B:01:25:18:79:E7:AE:47:63:51:97:46:04:FA:A7:D7:36:FE X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:32:7b:0f:54:4b:7a:96:38:f1:df:f4:00:27:03:9f:dc:f7: cf:d3:fa:ab:a3:f4:eb:e0:77:7a:4a:8b:0a:4a:a8:a4:13:66: ea:fd:48:24:07:fd:45:b0:98:41:03:36:d2:e4:42:54:87:23: a9:6a:96:a1:6e:39:f6:ba:e7:5d:6c:9c:be:c9:a7:02:c2:c7: 21:d9:b6:45:df:1f:0f:0b:59:a6:dd:1e:5f:4e:7f:a4:7b:83: ad:c0:85:7c:17:f1:2f:94:ac:17:07:fe:05:cd:d5:9c:c9:b0: be:cd:35:40:e6:a1:48:e8:31:1f:ae:17:91:b5:39:5d:8b:f4: 12:e4:a8:7b:af:98:0d:04:06:37:8a:c2:10:b8:f2:a3:01:5f: 36:ae:4f:f1:38:2d:89:8c:01:c8:cb:0f:d6:f9:03:b7:6a:38: 89:92:ed:b2:f9:90:ae:9d:c6:c5:60:00:85:79:18:b8:76:93: 34:75:0d:21:d0:79:48:f9:a9:f2:18:76:52:d0:6a:3d:b5:93: bf:8f:3b:ee:c9:73:07:e4:fc:d9:24:e6:a0:26:35:95:2d:b4: a4:a1:7a:8e:5b:7f:be:97:e1:51:2b:c2:cf:80:69:47:2e:78: 81:f1:73:34:6a:90:ed:70:9c:e2:c5:1e:b9:78:bc:ca:22:79: e6:64:12:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUxMDE5MDUyMzEzWhcNMjUxMDI2MDUyMzEzWjAYMRYwFAYD VQQDEw02OGY0NzVjMS1jOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/VKVcMNwt1bjsLXeCGbMqUYORL5BPfnoLv1gVXLr6cLhujmNZ0m3R+ssOkp 3nxZ6R0pas9VYZjXcStwdVNGz/CTjrQenACa2s/7CdCQSD/wS8ppDf+6WoCU7k/f uqwoE7Cyze49dDmY9ibRQgzdaBJDFWQXDqXRq1vdUdzN2i3arhWIRyZbQdsvkd7n JkjJZfoY1dd+myRrzBloO/PtXEtrgjhGKQRdVP68WIi8XG5KPsQv3n5BoXXc7XNq yeHXq7JH91ONVx0zZ/KEcwEHK7gT0dIJw+Iwvm7acgAYeYqAvM2YIo/NmsvHEhc6 b7yn1qZGl/xuw+GUf8gFSlLDzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAovewEl GHnnrkdjUZdGBPqn1zb+MB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtMnsPVEt6ljjx3/QAJwOf3PfP0/qro/Tr4Hd6SosKSqikE2bq/Ugk B/1FsJhBAzbS5EJUhyOpapahbjn2uuddbJy+yacCwsch2bZF3x8PC1mm3R5fTn+k e4OtwIV8F/EvlKwXB/4FzdWcybC+zTVA5qFI6DEfrheRtTldi/QS5Kh7r5gNBAY3 isIQuPKjAV82rk/xOC2JjAHIyw/W+QO3ajiJku2y+ZCuncbFYACFeRi4dpM0dQ0h 0HlI+anyGHZS0Go9tZO/jzvuyXMH5PzZJOagJjWVLbSkoXqOW3++l+FRK8LPgGlH LniB8XM0apDtcJzixR65eLzKInnmZBIe -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:04 2025 by rpki-client