$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json) Hash identifier: QghffZrEHyGNG0CwK0sQc4ZS730T/HYCUh/1FH+fi4s= Subject key identifier: DF:40:9C:ED:DC:B2:2B:F7:50:A2:38:ED:9A:33:43:64:26:3A:3F:A8 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft Manifest number: 013D Signing time: Sun 19 Oct 2025 00:59:05 +0000 Manifest this update: Sun 19 Oct 2025 00:59:04 +0000 Manifest next update: Sun 26 Oct 2025 00:59:04 +0000 Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: IUbeeIep9YiW3IVaUtm9dJZGIoQ1UEohn5sp9YRR9tg=) 2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: ZzX2pAU2hf9tsTLmwqMICAJ5lNGrFfo//Sr5B58TslI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Oct 19 00:59:04 2025 GMT Not After : Oct 26 00:59:04 2025 GMT Subject: CN=68f437d8-6460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:a8:b1:4f:bf:6c:dd:71:44:ec:cf:34:a7: a8:80:ee:43:6a:d8:a8:99:fc:e5:17:82:85:98:5b: 85:b6:d5:d8:4e:cf:b0:88:b5:01:fe:69:87:bc:bb: 69:be:89:c0:87:90:59:b4:c6:09:fd:ef:98:c1:46: 82:99:a8:0e:8f:96:f3:6f:4a:6b:04:46:1b:a4:cf: 8f:ad:d8:95:70:00:32:7d:bb:9e:e7:e3:a4:9a:18: d2:37:e0:ea:9f:56:8d:c8:e5:70:10:db:1f:f5:2f: 07:05:83:0c:9f:28:ea:81:b9:c7:08:3f:b4:a4:6d: 66:58:33:db:24:09:98:ab:45:d5:e1:c1:fc:4f:78: 4f:86:fd:19:ac:b8:4f:25:5d:3b:2f:c0:b6:82:06: 38:e9:14:7e:44:1b:86:66:10:dd:ad:72:e8:5b:5e: af:f7:d6:1f:3a:6c:87:09:a1:7c:9d:e1:33:37:ce: 96:7a:95:ff:43:c5:52:bc:1a:75:50:a4:87:b4:50: 2e:a7:5b:88:fb:10:dc:f1:bf:b2:09:66:eb:88:eb: 2b:9c:1d:15:6a:48:ea:3f:1c:ca:35:d6:c8:2a:e3: 90:19:61:d5:c4:df:83:bd:b1:18:e1:fe:99:53:a6: 4c:95:20:59:82:0a:b8:4f:c9:e7:66:0c:bf:ef:a1: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:40:9C:ED:DC:B2:2B:F7:50:A2:38:ED:9A:33:43:64:26:3A:3F:A8 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:17:cc:ba:fc:a9:b8:29:17:be:0b:54:42:a6:57:7e:b5:a3: be:db:f1:d0:bb:91:8e:29:71:6d:71:b6:23:a8:2a:b6:8d:d9: 4e:ed:04:13:d7:8a:68:20:c3:2f:ea:52:e1:0a:59:0f:68:87: a1:39:d2:08:3e:e9:1a:0c:fc:66:f1:b3:46:d4:5c:eb:80:3a: f1:23:01:af:ff:53:06:11:00:db:c3:ea:56:be:09:b3:d9:83: 92:75:73:b1:ba:f9:f4:78:2b:fb:bd:6b:53:10:97:4b:88:28: 46:a9:9d:03:fa:d9:bd:3c:b8:ce:c3:59:91:d9:41:e4:b6:34: cd:06:68:5a:a2:ab:0d:01:50:23:dc:31:6a:3f:06:8c:8f:45: a8:9f:1f:79:30:e2:5d:36:b6:dd:83:bb:d6:f3:fc:e4:e2:7a: ec:b9:e0:2e:b2:40:48:0e:f5:dc:15:a1:19:ff:de:b9:ba:e5: 5c:61:0f:b0:3f:e9:fc:d0:c7:fe:93:b8:13:0c:81:28:1c:82: 30:ed:1a:85:58:a9:78:dd:1e:b7:83:94:73:94:88:8b:06:3c: 64:8f:07:dd:2a:29:c8:4f:2d:66:dc:e5:38:5c:b1:42:4e:5a: 5c:86:21:68:82:af:91:c7:1e:18:6e:49:cb:31:32:86:6b:ca: a5:8b:c4:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz RjA4Q0M4RTIwHhcNMjUxMDE5MDA1OTA0WhcNMjUxMDI2MDA1OTA0WjAYMRYwFAYD VQQDEw02OGY0MzdkOC02NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LuosU+/bN1xROzPNKeogO5DatiomfzlF4KFmFuFttXYTs+wiLUB/mmHvLtp vonAh5BZtMYJ/e+YwUaCmagOj5bzb0prBEYbpM+PrdiVcAAyfbue5+OkmhjSN+Dq n1aNyOVwENsf9S8HBYMMnyjqgbnHCD+0pG1mWDPbJAmYq0XV4cH8T3hPhv0ZrLhP JV07L8C2ggY46RR+RBuGZhDdrXLoW16v99YfOmyHCaF8neEzN86WepX/Q8VSvBp1 UKSHtFAup1uI+xDc8b+yCWbriOsrnB0VakjqPxzKNdbIKuOQGWHVxN+DvbEY4f6Z U6ZMlSBZggq4T8nnZgy/76E8qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9AnO3c siv3UKI47ZozQ2QmOj+oMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3 OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+F8y6/Km4KRe+C1RCpld+taO+2/HQu5GOKXFtcbYjqCq2jdlO7QQT 14poIMMv6lLhClkPaIehOdIIPukaDPxm8bNG1FzrgDrxIwGv/1MGEQDbw+pWvgmz 2YOSdXOxuvn0eCv7vWtTEJdLiChGqZ0D+tm9PLjOw1mR2UHktjTNBmhaoqsNAVAj 3DFqPwaMj0Wonx95MOJdNrbdg7vW8/zk4nrsueAuskBIDvXcFaEZ/965uuVcYQ+w P+n80Mf+k7gTDIEoHIIw7RqFWKl43R63g5RzlIiLBjxkjwfdKinITy1m3OU4XLFC TlpchiFogq+Rxx4YbknLMTKGa8qli8Rg -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:02 2025 by rpki-client