$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: rGbMwrALZoy4Rxni3lFBeduc6Oh0G1WcP4dhjiTYNm0= Subject key identifier: 09:62:B5:D1:ED:E4:11:D8:45:90:06:F9:BF:1D:5A:16:F0:EF:A0:55 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 016A Signing time: Sun 19 Oct 2025 06:33:26 +0000 Manifest this update: Sun 19 Oct 2025 06:33:26 +0000 Manifest next update: Sun 26 Oct 2025 06:33:26 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: 391JJ908nhFBsIO5MfeNagZ9fFn2ISu+9QTzucwmHDE=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: V7HVXcdZqekDWFKQPL+tYLxRmvuZTdFk8E168KA3XsM=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Oct 19 06:33:26 2025 GMT Not After : Oct 26 06:33:26 2025 GMT Subject: CN=68f48636-51f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:a5:af:fd:93:5a:6e:4c:72:12:c0:d0:2f: 52:a6:47:2d:f7:3c:f2:95:ef:d1:dc:fa:ae:87:c4: e8:19:7a:4b:1a:68:10:ba:9c:d8:c8:c6:bb:89:c6: 2e:f2:4d:32:fd:67:75:47:6f:21:8b:11:8d:40:d8: de:5d:80:2c:c4:64:52:41:9e:5f:65:ef:0d:c5:5e: fb:b9:8c:7c:03:ff:09:17:85:21:3b:3c:21:54:c4: 77:36:5e:a3:71:a7:6d:e8:50:6f:d4:d5:83:fa:57: 14:4e:ad:8c:3c:6b:7a:c6:db:75:5f:eb:cf:c9:0d: 2b:2c:e3:24:c2:46:01:9e:14:f0:23:ed:d6:e7:30: 37:fd:a2:9c:02:2f:bd:6c:3f:77:18:d7:fe:0e:36: c4:99:b7:1c:f0:90:a5:9c:b8:e0:b1:da:bb:1c:98: 8d:2c:42:07:cc:51:fe:99:28:b3:dd:b6:f9:b2:43: 15:a5:de:f0:15:4f:4e:03:50:30:e8:0e:8c:62:53: 55:21:76:df:03:72:95:3a:12:58:01:da:53:e4:a2: 72:97:83:7c:b5:ab:e7:27:c9:be:7c:1c:c1:e2:23: f1:95:0e:98:61:49:aa:bc:f7:f6:a7:09:59:e2:19: 18:ec:28:c4:c4:4d:ac:b2:6b:69:01:93:a8:e0:6e: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:62:B5:D1:ED:E4:11:D8:45:90:06:F9:BF:1D:5A:16:F0:EF:A0:55 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:81:83:40:64:a5:20:f2:48:d7:16:99:d3:79:1c:59:65:62: 83:94:46:94:4e:f9:13:40:59:32:fa:62:7f:57:e6:fc:e5:93: 25:ee:55:98:7d:d3:58:59:98:81:63:87:50:5b:58:1f:c8:a6: 26:46:ae:ab:a3:41:8b:b2:f6:b5:ab:07:e0:cb:30:4e:5a:e5: 47:c6:14:95:43:b2:e1:b1:48:26:53:ff:33:5a:3e:38:71:9e: c2:d0:ee:56:e5:79:d2:28:16:7e:39:82:7a:4c:68:c2:98:f6: f6:97:6d:cb:9d:cf:0b:a2:97:80:18:4f:5b:1e:5c:89:2c:5f: 11:b8:43:c0:8e:bf:f3:5f:3a:88:8a:4c:ab:36:0d:34:23:fd: b2:db:e7:90:1b:99:2b:ec:47:c9:98:0c:75:62:04:30:20:ec: 2d:9a:63:ef:6c:61:eb:c0:43:b5:e7:19:4f:09:ec:30:a4:b6: 72:7f:a1:18:05:f5:a2:d7:92:4b:67:72:d9:b3:91:a4:93:7d: f8:99:25:ee:86:1c:d7:d1:07:3a:bd:73:44:7a:79:83:29:c9: 3e:c6:cb:ff:fa:f9:a7:49:d6:38:c5:03:ad:3e:f0:4d:c5:58: 4f:5d:68:b6:c5:37:82:86:1f:49:fe:47:7f:98:81:f5:5c:d1: 89:de:d0:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUxMDE5MDYzMzI2WhcNMjUxMDI2MDYzMzI2WjAYMRYwFAYD VQQDEw02OGY0ODYzNi01MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMulr/2TWm5MchLA0C9Spkct9zzyle/R3Pquh8ToGXpLGmgQupzYyMa7icYu 8k0y/Wd1R28hixGNQNjeXYAsxGRSQZ5fZe8NxV77uYx8A/8JF4UhOzwhVMR3Nl6j cadt6FBv1NWD+lcUTq2MPGt6xtt1X+vPyQ0rLOMkwkYBnhTwI+3W5zA3/aKcAi+9 bD93GNf+DjbEmbcc8JClnLjgsdq7HJiNLEIHzFH+mSiz3bb5skMVpd7wFU9OA1Aw 6A6MYlNVIXbfA3KVOhJYAdpT5KJyl4N8tavnJ8m+fBzB4iPxlQ6YYUmqvPf2pwlZ 4hkY7CjExE2ssmtpAZOo4G6LdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlitdHt 5BHYRZAG+b8dWhbw76BVMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFgYNAZKUg8kjXFpnTeRxZZWKDlEaUTvkTQFky+mJ/V+b85ZMl7lWY fdNYWZiBY4dQW1gfyKYmRq6ro0GLsva1qwfgyzBOWuVHxhSVQ7LhsUgmU/8zWj44 cZ7C0O5W5XnSKBZ+OYJ6TGjCmPb2l23Lnc8LopeAGE9bHlyJLF8RuEPAjr/zXzqI ikyrNg00I/2y2+eQG5kr7EfJmAx1YgQwIOwtmmPvbGHrwEO15xlPCewwpLZyf6EY BfWi15JLZ3LZs5Gkk334mSXuhhzX0Qc6vXNEenmDKck+xsv/+vmnSdY4xQOtPvBN xVhPXWi2xTeChh9J/kd/mIH1XNGJ3tDH -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:38 2025 by rpki-client