$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: DlguZGf8gfbirR6O/j6cmm5WZ4iiHJHHM2rTBxYKE7Q= Subject key identifier: B7:28:F0:AA:E4:71:E2:DA:07:9A:F2:11:1E:24:C3:C6:F7:A2:BF:B9 Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 01F1 Signing time: Sun 19 Oct 2025 04:53:16 +0000 Manifest this update: Sun 19 Oct 2025 04:53:15 +0000 Manifest next update: Sun 26 Oct 2025 04:53:15 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: pIC1fAy6UtEnSZX01nGVlXvGvpVbsU5uc7TQ8KcZ7l8=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Oct 19 04:53:15 2025 GMT Not After : Oct 26 04:53:15 2025 GMT Subject: CN=68f46ebc-f2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:ec:83:66:ae:97:ff:b0:cb:aa:ed:1a:32: 54:ef:b4:66:51:a5:b2:ed:24:49:93:57:c1:07:ce: e8:30:39:4d:13:98:4c:19:6c:eb:9d:a0:47:67:59: 4b:b6:5a:24:93:10:d5:f7:a7:2e:0f:36:33:82:04: 2e:82:69:12:b7:d8:17:1d:db:13:4c:69:93:7f:39: ac:15:2c:42:5a:57:18:59:f2:9b:65:28:f5:53:a8: 9b:51:38:13:45:01:25:4c:62:bf:81:f1:0b:21:b3: 83:2d:96:ef:f9:72:38:6d:54:e1:50:9e:57:d3:05: 2c:bd:5e:0e:b3:b5:a4:c2:4f:f5:72:ad:9f:1b:2d: ec:45:2f:e7:24:4b:1d:97:2f:d4:b8:e8:ef:25:96: 2a:53:6d:56:d8:93:67:6d:5d:5a:36:82:35:d9:bf: c6:46:2f:0f:0f:2b:ff:f1:40:19:32:88:ec:86:c6: 98:1f:1f:63:d0:62:e3:8e:64:3a:88:b6:61:eb:41: 12:e5:73:6f:c9:e7:85:d9:56:4b:55:e0:ce:84:3c: 67:63:6b:1e:10:f5:a4:19:03:07:d7:83:77:f3:51: 2b:16:7d:8f:5a:d4:d1:a7:ff:62:30:dd:84:bc:8d: 4b:5f:e2:ab:e2:5e:89:0b:9b:0b:87:02:97:23:07: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:28:F0:AA:E4:71:E2:DA:07:9A:F2:11:1E:24:C3:C6:F7:A2:BF:B9 X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:99:87:da:09:e9:67:be:96:e2:4a:57:5f:e7:ff:2d:4d:73: e0:5f:61:e3:df:07:18:76:41:ee:09:07:6f:99:bd:70:00:5a: fe:dd:a7:6e:e0:fd:d5:38:0e:17:a0:f5:91:cc:ac:59:50:59: e9:d0:8d:7e:ce:04:65:f4:2f:f6:89:c8:fc:31:73:71:79:80: 12:1a:fc:1b:0f:18:46:45:1e:37:66:10:b8:1b:85:af:31:72: 6e:a9:c3:3b:61:f8:e9:94:c2:94:3b:db:5a:17:a1:7a:32:bc: fa:7e:e4:0d:e0:44:c4:fd:49:79:fc:36:d2:7d:fa:e7:6e:fe: 62:d3:be:f7:45:97:42:f2:ce:7f:a2:27:2c:ac:55:9c:4c:e4: 86:86:ac:8e:a5:b2:e7:1e:69:4a:99:12:78:36:a1:a0:2f:de: 2f:bb:d7:ad:33:4a:44:b2:06:48:35:9c:01:7b:1a:dd:cd:6e: b8:60:17:ae:e8:21:57:6d:83:9d:cc:e3:4e:1f:1e:b0:0e:f4: ca:52:e8:f7:72:f7:ea:8c:72:34:12:76:06:c6:a1:09:3f:74: 20:61:90:c2:b6:45:0a:38:8e:6b:11:bf:ce:66:df:b3:ce:48: f2:27:a8:9c:a2:6a:55:b6:99:b7:9c:fe:23:9e:f1:69:cc:99: 41:55:a2:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUxMDE5MDQ1MzE1WhcNMjUxMDI2MDQ1MzE1WjAYMRYwFAYD VQQDEw02OGY0NmViYy1mMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4zsg2aul/+wy6rtGjJU77RmUaWy7SRJk1fBB87oMDlNE5hMGWzrnaBHZ1lL tlokkxDV96cuDzYzggQugmkSt9gXHdsTTGmTfzmsFSxCWlcYWfKbZSj1U6ibUTgT RQElTGK/gfELIbODLZbv+XI4bVThUJ5X0wUsvV4Os7Wkwk/1cq2fGy3sRS/nJEsd ly/UuOjvJZYqU21W2JNnbV1aNoI12b/GRi8PDyv/8UAZMojshsaYHx9j0GLjjmQ6 iLZh60ES5XNvyeeF2VZLVeDOhDxnY2seEPWkGQMH14N381ErFn2PWtTRp/9iMN2E vI1LX+Kr4l6JC5sLhwKXIwchOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLco8Krk ceLaB5ryER4kw8b3or+5MB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1mYfaCelnvpbiSldf5/8tTXPgX2Hj3wcYdkHuCQdvmb1wAFr+3adu 4P3VOA4XoPWRzKxZUFnp0I1+zgRl9C/2icj8MXNxeYASGvwbDxhGRR43ZhC4G4Wv MXJuqcM7YfjplMKUO9taF6F6Mrz6fuQN4ETE/Ul5/DbSffrnbv5i0773RZdC8s5/ oicsrFWcTOSGhqyOpbLnHmlKmRJ4NqGgL94vu9etM0pEsgZINZwBexrdzW64YBeu 6CFXbYOdzONOHx6wDvTKUuj3cvfqjHI0EnYGxqEJP3QgYZDCtkUKOI5rEb/OZt+z zkjyJ6icompVtpm3nP4jnvFpzJlBVaIl -----END CERTIFICATE-----Generated at Mon Oct 20 04:15:01 2025 by rpki-client