$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft File: S1wWI_uzPZaiQas12w8L3rXDnLA.mft (raw, json) Hash identifier: LBfEc0RUPqawcu47ZmYpeG+Fz9QennPfALvAs9yHHrM= Subject key identifier: 0D:AF:35:B1:C7:11:2F:EE:38:37:9F:F5:83:B3:17:55:02:BC:5B:68 Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 Certificate issuer: /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft Manifest number: 0229 Signing time: Sun 19 Oct 2025 04:59:22 +0000 Manifest this update: Sun 19 Oct 2025 04:59:22 +0000 Manifest next update: Sun 26 Oct 2025 04:59:22 +0000 Files and hashes: 1: S1wWI_uzPZaiQas12w8L3rXDnLA.crl (hash: qURn+IRko0/S4+zg3ZNeJ5WpL+kLjwoIUCfEDs511eY=) 2: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (hash: m14z6Uh4ysiLxJ7zkokYHBwiwVXoe+55LfJcOc7XaG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Validity Not Before: Oct 19 04:59:22 2025 GMT Not After : Oct 26 04:59:22 2025 GMT Subject: CN=68f4702a-65c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:45:00:7f:97:01:50:50:fc:2c:53:1c:6a: a9:7a:ef:6f:5e:0a:e2:fa:52:c3:a9:49:f0:4f:97: ae:4e:fb:75:7e:2e:55:d3:a7:86:96:28:b1:76:22: 8d:3d:50:bd:9f:bb:fb:2d:c9:e5:c8:aa:6f:c9:63: e8:e2:49:19:6b:12:ca:ef:49:bd:66:77:3a:5d:8e: 64:76:c2:79:5f:80:41:e4:e0:c4:d4:42:de:dc:50: ca:fa:35:ed:7a:bb:e9:21:1b:5a:ef:ce:2c:5a:29: c1:e3:57:4e:c1:c4:80:50:48:18:16:d1:5f:1c:f5: 47:fc:14:d6:05:18:d9:32:72:be:c9:05:12:92:37: 85:d4:53:d1:2a:b5:32:ad:63:bf:45:1f:60:e5:a2: 85:3a:19:ea:22:18:a0:ea:91:74:a7:2a:7a:99:06: 94:19:06:62:3f:13:05:48:25:d3:87:e8:a5:9e:de: 4f:8b:17:ee:88:1a:38:d7:73:96:eb:2b:dc:3e:18: 6b:3c:60:60:3c:b7:40:c1:4d:d7:76:f1:72:d7:57: 8d:8f:85:8f:b5:3b:f1:39:31:34:0f:64:0c:5f:47: 12:76:e5:c2:13:24:57:28:b4:03:75:cc:81:e2:02: 67:3a:cc:b8:e1:f0:7e:e3:00:df:32:48:9b:14:32: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AF:35:B1:C7:11:2F:EE:38:37:9F:F5:83:B3:17:55:02:BC:5B:68 X509v3 Authority Key Identifier: keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:aa:0e:91:5a:63:4d:84:33:e7:fb:9f:de:27:67:37:a5:69: 7f:35:ea:51:c4:e9:88:ee:23:c7:75:27:b4:2e:93:fb:5e:33: 67:b4:0b:0a:1d:56:73:9e:e6:58:23:5b:cf:94:cb:80:9e:e7: e5:70:b6:ee:f8:b1:9a:4c:19:e2:ad:4f:3e:be:8c:6a:09:3b: 89:24:26:64:62:44:f0:2a:2b:92:3e:e2:92:4c:2c:12:ed:a4: fe:46:29:03:34:ec:07:a1:2f:a2:da:fc:e6:9c:b5:77:5f:07: f3:33:55:ff:12:69:23:c8:a2:6d:6f:af:06:72:dc:53:57:7a: 85:51:9d:6b:0c:7c:3b:2a:96:6c:59:90:65:9f:d4:63:91:d6: 33:76:98:65:5a:8e:53:ed:d0:35:0d:0b:e0:b0:b7:c8:ba:0d: b5:d5:58:48:68:77:95:cd:c7:11:0d:e4:4c:4c:ab:89:c5:8c: e6:b1:b2:99:5e:e1:c9:90:5e:0a:b7:f9:a3:cd:68:b9:21:aa: f2:55:5d:4c:24:6b:1b:29:9e:f8:f3:b8:e3:fa:af:07:ec:c1: db:0b:4b:82:78:91:e3:ea:f8:37:1d:96:ad:0f:b6:9b:6c:52: 0c:db:9d:4c:76:cb:3c:49:0c:85:08:c7:32:d6:78:7f:7e:7b: 2e:7c:30:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDYxNDExMC8GA1UEBRMoNEI1QzE2MjNGQkIzM0Q5NkEyNDFBQjM1REIwRjBCREVC NUMzOUNCMDAeFw0yNTEwMTkwNDU5MjJaFw0yNTEwMjYwNDU5MjJaMBgxFjAUBgNV BAMTDTY4ZjQ3MDJhLTY1YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPxkUAf5cBUFD8LFMcaql6729eCuL6UsOpSfBPl65O+3V+LlXTp4aWKLF2Io09 UL2fu/styeXIqm/JY+jiSRlrEsrvSb1mdzpdjmR2wnlfgEHk4MTUQt7cUMr6Ne16 u+khG1rvzixaKcHjV07BxIBQSBgW0V8c9Uf8FNYFGNkycr7JBRKSN4XUU9EqtTKt Y79FH2DlooU6GeoiGKDqkXSnKnqZBpQZBmI/EwVIJdOH6KWe3k+LF+6IGjjXc5br K9w+GGs8YGA8t0DBTdd28XLXV42PhY+1O/E5MTQPZAxfRxJ25cITJFcotAN1zIHi Amc6zLjh8H7jAN8ySJsUMoU9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDa81sccR L+44N5/1g7MXVQK8W2gwHwYDVR0jBBgwFoAUS1wWI/uzPZaiQas12w8L3rXDnLAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJENjE0LzFERjA3NUUyQkVE QzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFphaVFhczEydzhMM3JYRG5M QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzF3V0lfdXpQWmFpUWFzMTJ3OEwzclhEbkxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE NjE0LzFERjA3NUUyQkVEQzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFph aVFhczEydzhMM3JYRG5MQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK2qDpFaY02EM+f7n94nZzelaX816lHE6YjuI8d1J7Quk/teM2e0Cwod VnOe5lgjW8+Uy4Ce5+Vwtu74sZpMGeKtTz6+jGoJO4kkJmRiRPAqK5I+4pJMLBLt pP5GKQM07AehL6La/OactXdfB/MzVf8SaSPIom1vrwZy3FNXeoVRnWsMfDsqlmxZ kGWf1GOR1jN2mGVajlPt0DUNC+Cwt8i6DbXVWEhod5XNxxEN5ExMq4nFjOaxsple 4cmQXgq3+aPNaLkhqvJVXUwkaxspnvjzuOP6rwfswdsLS4J4kePq+Dcdlq0Ptpts UgzbnUx2yzxJDIUIxzLWeH9+ey58MCs= -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:07 2025 by rpki-client