$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json) Hash identifier: DGRwOwfxSWKCFAGtzTah5NBBwnnqF93IPFNX5oKEPC8= Subject key identifier: 87:AF:6A:D0:68:6F:6E:04:86:7F:71:71:40:C5:9C:8A:3D:D1:3D:CC Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft Manifest number: 0177 Signing time: Sun 19 Oct 2025 06:25:34 +0000 Manifest this update: Sun 19 Oct 2025 06:25:34 +0000 Manifest next update: Sun 26 Oct 2025 06:25:34 +0000 Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: kEoRnko6aOoB2teVaE0hF4M0pjG5kqdUkgnxcygTNkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Validity Not Before: Oct 19 06:25:34 2025 GMT Not After : Oct 26 06:25:34 2025 GMT Subject: CN=68f4845e-2703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:a5:56:d0:1d:77:27:c5:16:f1:11:5c:50: 5c:fd:cf:cd:e8:1c:f1:22:e1:fa:36:ac:2b:21:d0: 54:63:f7:d1:40:84:65:ad:93:32:00:02:21:2a:af: c7:8e:76:b2:c9:f4:d4:ae:b8:a6:fb:02:da:a9:c9: 0d:37:e1:fd:d5:c9:0f:8b:32:3b:de:ab:9c:ee:7b: 21:bd:50:d9:55:bc:9d:7e:db:91:b8:02:6a:ad:20: 2d:93:4b:f8:9c:fb:2c:12:26:f4:a3:96:19:61:be: 0c:6f:ef:39:77:c7:b3:0b:0b:5d:21:58:6d:98:58: 8f:64:13:2a:85:13:2f:21:70:bb:de:e1:0b:2b:88: dc:b6:b8:01:4d:d2:af:a0:7c:e8:33:74:59:78:83: f0:3f:13:66:ec:bb:4c:6f:ae:93:df:0a:fa:f6:a6: 17:f4:45:06:b4:ed:6e:f2:db:90:6f:34:a7:fb:be: e5:96:26:d3:28:8b:5c:2e:de:d3:a5:d2:13:81:95: 5a:76:61:87:cd:d4:9f:ff:ea:cc:9e:b9:15:51:42: 9c:6f:b7:a4:e5:e8:3c:80:99:e4:39:7c:41:0c:15: 8f:1c:b8:a1:c4:01:e1:96:2c:b3:9a:c9:83:cd:b2: 67:ca:03:3c:90:10:7b:90:c1:c7:39:0d:b3:68:ce: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AF:6A:D0:68:6F:6E:04:86:7F:71:71:40:C5:9C:8A:3D:D1:3D:CC X509v3 Authority Key Identifier: keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:66:7a:10:5b:00:c0:8a:a6:7d:ed:9b:96:8b:cc:a1:3e:f9: 8f:b4:93:64:02:d6:4e:f1:ca:19:51:8f:5a:8b:f0:72:69:af: b0:1b:91:57:51:99:86:8c:02:59:3d:e8:28:ad:12:34:84:b9: 5d:20:1d:8d:62:49:ba:c7:bd:e9:07:c2:29:cf:82:24:ac:d7: ee:28:5b:f2:52:fc:21:3b:df:50:6b:ff:b0:7c:a5:d6:a0:01: fc:b9:87:4c:07:27:82:6d:bf:75:b8:70:47:75:b6:e4:87:6a: 71:9d:f1:27:98:0e:87:99:ac:39:0b:a3:2c:d5:88:5b:87:9c: f6:02:40:10:b3:34:6e:b9:57:63:e9:35:63:2a:33:43:1a:52: ac:76:37:2f:24:6e:c2:1e:8e:2a:68:f0:d1:da:68:9f:71:12: 4f:67:37:ab:5e:22:8b:44:7c:7c:08:4c:cf:21:69:f0:d2:1d: c3:20:c8:8f:44:7b:5c:a3:d0:ae:7c:c1:db:2c:7f:e0:f6:db: aa:42:e3:e7:99:ba:35:87:be:51:a6:fe:2a:a4:bf:65:f8:f1: 63:e6:2b:82:78:58:4d:fd:55:c3:ef:51:6f:40:11:ac:0d:1b: 1a:c1:db:55:2f:ac:55:ae:ab:f6:29:93:06:0a:39:be:3f:c4: 16:78:b7:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU1MTQxMTAvBgNVBAUTKEQyQURCQUYwRDdENTJDQjk0RDRBMTM5NzhCMzIwNTNC Q0RGNzdBMEYwHhcNMjUxMDE5MDYyNTM0WhcNMjUxMDI2MDYyNTM0WjAYMRYwFAYD VQQDEw02OGY0ODQ1ZS0yNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAot6lVtAddyfFFvERXFBc/c/N6BzxIuH6NqwrIdBUY/fRQIRlrZMyAAIhKq/H jnayyfTUrrim+wLaqckNN+H91ckPizI73quc7nshvVDZVbydftuRuAJqrSAtk0v4 nPssEib0o5YZYb4Mb+85d8ezCwtdIVhtmFiPZBMqhRMvIXC73uELK4jctrgBTdKv oHzoM3RZeIPwPxNm7LtMb66T3wr69qYX9EUGtO1u8tuQbzSn+77llibTKItcLt7T pdITgZVadmGHzdSf/+rMnrkVUUKcb7ek5eg8gJnkOXxBDBWPHLihxAHhliyzmsmD zbJnygM8kBB7kMHHOQ2zaM7AMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIevatBo b24Ehn9xcUDFnIo90T3MMB8GA1UdIwQYMBaAFNKtuvDX1Sy5TUoTl4syBTvN93oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTUxNC9EOEVERjY4RTZF RjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxMbE5TaE9YaXpJRk84MzNl ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBxMjY4TmZWTExsTlNoT1hpeklGTzgzM2VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTUxNC9EOEVERjY4RTZFRjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxM bE5TaE9YaXpJRk84MzNlZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChZnoQWwDAiqZ97ZuWi8yhPvmPtJNkAtZO8coZUY9ai/Byaa+wG5FX UZmGjAJZPegorRI0hLldIB2NYkm6x73pB8Ipz4IkrNfuKFvyUvwhO99Qa/+wfKXW oAH8uYdMByeCbb91uHBHdbbkh2pxnfEnmA6Hmaw5C6Ms1Yhbh5z2AkAQszRuuVdj 6TVjKjNDGlKsdjcvJG7CHo4qaPDR2mifcRJPZzerXiKLRHx8CEzPIWnw0h3DIMiP RHtco9CufMHbLH/g9tuqQuPnmbo1h75Rpv4qpL9l+PFj5iuCeFhN/VXD71FvQBGs DRsawdtVL6xVrqv2KZMGCjm+P8QWeLfw -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:55 2025 by rpki-client