$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: MoJ8HGeruOaoedcaH399j3lrFJkR9RyK6srp/3s1ZlI= Subject key identifier: 6D:29:D9:52:77:BA:65:C6:86:53:BE:EC:FC:23:60:4E:52:35:D9:4D Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 0160 Signing time: Sun 19 Oct 2025 07:19:10 +0000 Manifest this update: Sun 19 Oct 2025 07:19:09 +0000 Manifest next update: Sun 26 Oct 2025 07:19:09 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: LDTv+CddxdSCs3BQVBLnvJSxzuE8gDxcKMmDV7n+r/M=) 2: 860FE244E7F211EEA82C4340C4F9AE02.roa (hash: MOt4/rtczZ2XuWNA4OgwbPaAH6x2sV9WPLPyaiDEfR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Oct 19 07:19:09 2025 GMT Not After : Oct 26 07:19:09 2025 GMT Subject: CN=68f490ed-1f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:fe:73:bc:6f:df:0a:0e:cb:e9:e0:fd:85: a9:ba:9b:e5:04:54:c6:98:9b:08:72:71:4c:9a:c9: f7:69:e9:5d:45:10:1b:bc:c5:57:95:79:a4:73:f2: dc:3e:03:79:fd:38:f6:b0:70:43:a7:35:dc:e6:8c: c3:14:0c:f8:61:5b:e0:cf:74:89:de:4d:e2:9e:08: 9d:70:16:a2:bd:bc:5a:ff:9a:ab:4a:2f:b8:da:05: e4:38:06:c2:da:e6:a9:01:80:d7:90:21:d5:c5:31: 53:fb:de:0e:c3:f8:6d:31:3e:5a:a5:ee:01:36:63: aa:c2:e0:4b:28:36:86:b6:5e:28:dc:6f:b8:52:d3: 35:e3:7b:bf:da:fa:06:33:ca:04:ff:5f:a3:de:6f: 82:80:74:0c:1e:37:f7:ee:de:ac:57:88:f6:63:b1: 6d:0f:e8:bc:77:ea:9d:72:c9:03:29:21:41:9e:f0: ac:6e:44:ca:f6:f6:15:ec:d0:4c:ef:c4:bf:4c:2f: 93:f6:6a:ca:00:0c:f8:79:f8:de:80:e6:41:8d:c0: fd:25:d1:c6:c7:6e:d1:b3:aa:b0:8d:11:6e:10:08: 4a:02:58:c1:77:a9:77:27:dc:df:b1:9e:4c:f7:42: 0e:55:3c:4d:78:12:14:d1:d3:77:71:da:28:db:6f: ac:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:29:D9:52:77:BA:65:C6:86:53:BE:EC:FC:23:60:4E:52:35:D9:4D X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a6:f6:11:f7:43:11:35:87:f4:46:e6:bf:ab:b1:75:3e:e4: e5:b8:2d:22:df:41:40:ca:ee:3e:d4:a4:6b:42:b1:4a:98:34: 7a:33:5d:ed:ef:8b:87:8e:47:12:c1:fe:7d:fd:0e:67:39:13: d9:86:ac:d6:24:40:16:f8:ec:83:8d:07:6e:73:8a:5d:68:6e: fe:92:49:93:35:5c:00:f0:2c:06:bb:ac:e7:1f:b4:cd:d3:ed: d0:6b:b5:29:54:b3:69:1a:76:38:7a:08:56:e1:e3:e9:e4:f9: ed:42:52:ff:da:4f:e6:89:b1:d9:a8:fc:f8:5a:40:38:35:e2: 2c:9c:44:49:e7:da:41:23:1c:21:f2:cd:f8:ee:f9:45:4a:ac: 4e:b5:f6:4b:d2:78:9f:d2:76:24:de:ae:5c:06:d2:6b:64:a4: a4:91:17:ae:93:4e:68:75:84:97:f2:47:05:75:d4:02:0c:ce: 91:f2:5c:22:dd:37:30:e7:05:4d:c4:9c:31:9b:78:99:41:df: 61:4a:b9:a2:9e:3c:13:45:88:43:d4:ed:c6:e8:32:e7:ce:51: 7c:7e:fe:e4:2c:e8:d0:6f:45:35:4b:92:fd:39:b9:40:fc:0c: 48:1d:91:87:16:58:4f:c1:6c:73:6c:26:31:6b:88:e1:5c:67: 15:ce:36:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjUxMDE5MDcxOTA5WhcNMjUxMDI2MDcxOTA5WjAYMRYwFAYD VQQDEw02OGY0OTBlZC0xZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueD+c7xv3woOy+ng/YWpupvlBFTGmJsIcnFMmsn3aeldRRAbvMVXlXmkc/Lc PgN5/Tj2sHBDpzXc5ozDFAz4YVvgz3SJ3k3ingidcBaivbxa/5qrSi+42gXkOAbC 2uapAYDXkCHVxTFT+94Ow/htMT5ape4BNmOqwuBLKDaGtl4o3G+4UtM143u/2voG M8oE/1+j3m+CgHQMHjf37t6sV4j2Y7FtD+i8d+qdcskDKSFBnvCsbkTK9vYV7NBM 78S/TC+T9mrKAAz4efjegOZBjcD9JdHGx27Rs6qwjRFuEAhKAljBd6l3J9zfsZ5M 90IOVTxNeBIU0dN3cdoo22+s/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0p2VJ3 umXGhlO+7PwjYE5SNdlNMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmpvYR90MRNYf0Rua/q7F1PuTluC0i30FAyu4+1KRrQrFKmDR6M13t 74uHjkcSwf59/Q5nORPZhqzWJEAW+OyDjQduc4pdaG7+kkmTNVwA8CwGu6znH7TN 0+3Qa7UpVLNpGnY4eghW4ePp5PntQlL/2k/mibHZqPz4WkA4NeIsnERJ59pBIxwh 8s347vlFSqxOtfZL0nif0nYk3q5cBtJrZKSkkReuk05odYSX8kcFddQCDM6R8lwi 3Tcw5wVNxJwxm3iZQd9hSrminjwTRYhD1O3G6DLnzlF8fv7kLOjQb0U1S5L9OblA /AxIHZGHFlhPwWxzbCYxa4jhXGcVzjYN -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:56 2025 by rpki-client