$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json) Hash identifier: +qJ5m/mcDNP+seqBzSbJ9hHb1DgeuvOMf5ZCaigfyPw= Subject key identifier: 9F:B0:1E:7C:AF:46:39:E2:DA:2C:68:61:FA:CD:02:62:28:83:5C:51 Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft Manifest number: 0171 Signing time: Sun 19 Oct 2025 06:29:59 +0000 Manifest this update: Sun 19 Oct 2025 06:29:58 +0000 Manifest next update: Sun 26 Oct 2025 06:29:58 +0000 Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: hO+mnVUoY7NM0jZLEZzEaq4fhCyic1jv3c9zzU5UMYY=) 2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: 2U1GUUuHz/HspZCAbX8MNYKTWmtmGMuAJscXPNynpMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Validity Not Before: Oct 19 06:29:58 2025 GMT Not After : Oct 26 06:29:58 2025 GMT Subject: CN=68f48566-4003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:f2:8d:39:08:66:a3:a4:88:c7:21:f1:b9: 81:0e:15:e6:ad:dd:1f:a6:b4:4a:64:f6:03:8d:b9: 36:57:cf:50:cd:1f:26:1a:88:aa:28:80:d5:c0:75: 79:5a:cd:9a:b4:9c:a4:e0:fa:69:64:7a:08:94:3e: 1b:4e:57:3f:b2:26:af:84:89:c9:c4:4b:6a:d1:1c: 82:b8:22:a9:8c:0b:4f:ed:f0:51:a3:02:1d:c7:ef: 66:97:02:33:d7:4a:cd:20:3d:3f:b6:06:56:cd:d7: 1b:d0:70:16:cb:ff:25:48:a4:4c:a2:d4:ff:4d:99: 31:6a:3b:5d:b0:14:07:09:88:30:42:38:b3:50:3c: 40:6e:4a:fc:ca:8a:be:4f:71:fd:e2:53:24:8b:15: 00:cd:0d:5d:9f:00:c8:ee:3d:1d:ab:62:89:ef:ef: d5:d9:ee:9c:68:9f:da:cb:bb:0d:37:53:c9:c0:06: b1:f6:c0:db:fb:f7:e4:cc:5b:03:5b:ba:13:be:f2: f0:40:f7:df:a4:1c:db:6e:f4:ec:3d:3f:2b:50:7e: 7c:93:02:54:e9:d8:27:40:88:8d:a0:f0:2d:1b:56: e1:04:27:9c:cf:91:f4:a1:12:48:96:ce:09:f3:43: 8f:d4:b6:77:9b:e7:3b:7e:2b:e5:2a:63:a0:fb:25: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B0:1E:7C:AF:46:39:E2:DA:2C:68:61:FA:CD:02:62:28:83:5C:51 X509v3 Authority Key Identifier: keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:34:86:c9:cb:0d:a3:a1:6b:5b:d3:a1:f6:f0:11:b0:c1:50: a2:99:2a:48:94:08:21:37:8e:40:61:17:c4:82:f6:9b:bf:7c: 48:2e:1f:7d:57:b2:45:93:0c:f9:8f:8a:46:b4:83:c5:a8:af: bd:e6:a6:c2:f6:ed:53:c4:40:a4:e3:09:44:da:c1:9d:13:a2: 26:ab:c8:da:ca:3b:02:57:0d:2c:73:7d:aa:9d:5a:65:90:d5: 0c:56:6a:d0:2e:ec:be:b4:54:bc:ba:14:2c:9e:94:06:f0:07: eb:08:e8:dc:e7:d2:ab:12:b3:71:ee:a3:a0:76:ca:c0:64:66: 6d:a8:76:c7:60:0f:d7:2c:d0:8d:65:04:f4:7b:47:51:42:a7: 0a:53:93:ff:95:92:44:f9:17:f3:8d:60:2a:49:8f:1b:b5:87: 0f:63:82:73:46:63:57:b4:7d:9a:b6:a8:b5:9f:eb:e6:4a:c6: 2e:55:90:a7:ef:16:0a:03:8b:03:21:68:3a:cd:6f:58:62:7e: d7:1b:a5:41:1d:33:c7:1b:e1:68:1e:71:1e:3c:fb:88:fe:90: 5e:94:e7:1d:33:17:2f:f9:6b:8d:4a:81:19:06:a3:0c:56:2a: 36:94:15:49:0a:a2:e1:59:d1:cd:8c:57:fc:0b:31:10:33:7c: eb:df:ea:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4 NERFOUQ3MEIwHhcNMjUxMDE5MDYyOTU4WhcNMjUxMDI2MDYyOTU4WjAYMRYwFAYD VQQDEw02OGY0ODU2Ni00MDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1vyjTkIZqOkiMch8bmBDhXmrd0fprRKZPYDjbk2V89QzR8mGoiqKIDVwHV5 Ws2atJyk4PppZHoIlD4bTlc/siavhInJxEtq0RyCuCKpjAtP7fBRowIdx+9mlwIz 10rNID0/tgZWzdcb0HAWy/8lSKRMotT/TZkxajtdsBQHCYgwQjizUDxAbkr8yoq+ T3H94lMkixUAzQ1dnwDI7j0dq2KJ7+/V2e6caJ/ay7sNN1PJwAax9sDb+/fkzFsD W7oTvvLwQPffpBzbbvTsPT8rUH58kwJU6dgnQIiNoPAtG1bhBCecz5H0oRJIls4J 80OP1LZ3m+c7fivlKmOg+yVx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+wHnyv Rjni2ixoYfrNAmIog1xRMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3 RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2 OUEwT09IOGh0RzZFM3Axd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAONIbJyw2joWtb06H28BGwwVCimSpIlAghN45AYRfEgvabv3xILh99 V7JFkwz5j4pGtIPFqK+95qbC9u1TxECk4wlE2sGdE6Imq8jayjsCVw0sc32qnVpl kNUMVmrQLuy+tFS8uhQsnpQG8AfrCOjc59KrErNx7qOgdsrAZGZtqHbHYA/XLNCN ZQT0e0dRQqcKU5P/lZJE+RfzjWAqSY8btYcPY4JzRmNXtH2atqi1n+vmSsYuVZCn 7xYKA4sDIWg6zW9YYn7XG6VBHTPHG+FoHnEePPuI/pBelOcdMxcv+WuNSoEZBqMM Vio2lBVJCqLhWdHNjFf8CzEQM3zr3+rU -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:15 2025 by rpki-client