$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: 8VdNkTJIi0OC1BnDqGycDlEcXjZwEkmoF0DSpEkrJxk= Subject key identifier: 04:90:9F:CC:E5:13:70:DB:69:75:78:DF:08:51:F0:EA:12:16:4C:FF Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 102B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0FA6 Signing time: Sat 18 Oct 2025 18:11:57 +0000 Manifest this update: Sat 18 Oct 2025 18:11:56 +0000 Manifest next update: Sat 25 Oct 2025 18:11:56 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: 0ZMEOx3sTNuCtdH4BiXSV8GTOM44SG3CRS0Mjf46Cr0=) 2: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: zq3r2bqYk5JoyYAxGmuwDEsSoCRJP0AIOXoJJj3slFs=) 3: B35E5B46334111EF9770A542C4F9AE02.roa (hash: eo1b+Yq2Qt1v8H4Ltid7fTu6HkQPul0DLMpDr+LxnZs=) 4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: ZKO21v7I5AsbeHedpQVwlDjC0YYOzEud39SdbR3CgmA=) 5: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: wE9Ja7ZzAfw7/oCX8jXb3Mmdvu+AmH7Xr6q2xftQxQg=) 6: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 7: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 05k3Et6L9d2nE0FPEy+35+jv6KXbsZR/t8jrPFetuWc=) 8: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU=) 9: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 10: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4139 (0x102b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Oct 18 18:11:56 2025 GMT Not After : Oct 25 18:11:56 2025 GMT Subject: CN=68f3d86c-b15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:96:9b:a9:d3:91:76:a0:83:48:e2:11:66: ff:4d:7e:fe:0d:0b:b7:a6:46:ed:59:c5:bb:02:32: 04:8c:e8:ed:d6:09:da:78:41:ba:a9:e0:e8:19:10: d5:bd:30:99:8f:b6:e5:25:03:03:10:e9:2a:54:c5: 8e:d7:0e:80:ca:39:59:3b:00:ad:d4:ea:24:8b:48: 39:22:a7:85:f8:95:53:7c:ba:c8:f5:c0:14:bf:aa: 85:2d:23:55:30:c3:b6:77:76:04:dc:af:7e:93:df: 1e:c6:61:91:88:ba:2c:50:2c:c9:01:cf:8d:51:15: 40:4e:c4:36:66:f4:ed:e9:75:77:f0:65:0e:f0:1e: c2:bc:34:b2:66:12:c9:b1:69:39:1b:9e:50:62:d3: 2f:13:73:1b:df:ff:85:a3:e4:7e:84:15:bf:d9:0e: 4f:da:e5:d3:89:c7:6b:2a:c8:db:fb:5e:04:9f:18: 4e:80:7f:f7:6c:2e:6c:44:80:2d:4b:36:3f:03:9a: ef:b4:04:77:94:ae:5f:7b:a2:30:44:20:8c:bf:b2: 47:7f:94:cc:ce:21:86:92:91:ba:d9:f9:57:da:4a: e5:1f:fa:76:09:e6:ec:cf:da:c0:81:72:4e:86:98: fb:09:5b:94:85:1c:a3:d1:88:f2:69:4f:cd:68:47: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:90:9F:CC:E5:13:70:DB:69:75:78:DF:08:51:F0:EA:12:16:4C:FF X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:25:84:3f:30:a7:48:d2:8f:c5:b6:77:37:46:64:68:8b:f7: 12:15:b0:7f:82:67:da:a4:f1:a6:7b:cc:55:3c:d8:22:50:d9: 55:08:45:c9:50:2b:06:8b:52:3a:0b:c9:f3:ac:35:28:7c:4e: 95:05:75:e9:09:ca:de:6d:fd:8d:df:49:59:f2:29:b1:10:95: 9e:b0:5d:8b:92:a2:f9:1c:1c:1f:51:8d:85:04:22:15:6e:c8: eb:89:4b:3f:8b:12:d6:f3:75:a0:ca:8f:50:37:4b:84:52:e4: 13:6c:94:bb:9f:da:45:b6:e0:0a:82:91:83:30:62:4a:0b:cc: 89:73:2b:1a:43:4a:db:1b:03:19:ba:0f:a7:ae:dd:f7:61:ab: 0c:5c:a9:22:4c:62:2d:8a:3f:62:57:e1:3e:c6:f2:0f:2f:fa: 69:5d:f8:0d:1c:aa:f5:5e:77:d7:56:84:be:db:c7:b0:ac:55: 6f:a0:41:e1:16:57:7e:3d:88:f3:92:25:b4:ac:ac:a4:c5:51: 44:85:d6:fb:01:11:38:37:32:0e:6c:0e:d7:c0:db:bf:bb:3a: cd:7d:8f:0e:a8:f6:7e:fc:de:88:c2:10:37:26:bd:4c:42:aa: 0e:83:90:d2:44:80:ea:3c:1d:43:d1:bd:a1:39:4e:66:05:be: 3d:f4:4c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUxMDE4MTgxMTU2WhcNMjUxMDI1MTgxMTU2WjAYMRYwFAYD VQQDEw02OGYzZDg2Yy1iMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1CWm6nTkXagg0jiEWb/TX7+DQu3pkbtWcW7AjIEjOjt1gnaeEG6qeDoGRDV vTCZj7blJQMDEOkqVMWO1w6AyjlZOwCt1Ooki0g5IqeF+JVTfLrI9cAUv6qFLSNV MMO2d3YE3K9+k98exmGRiLosUCzJAc+NURVATsQ2ZvTt6XV38GUO8B7CvDSyZhLJ sWk5G55QYtMvE3Mb3/+Fo+R+hBW/2Q5P2uXTicdrKsjb+14EnxhOgH/3bC5sRIAt SzY/A5rvtAR3lK5fe6IwRCCMv7JHf5TMziGGkpG62flX2krlH/p2Cebsz9rAgXJO hpj7CVuUhRyj0YjyaU/NaEfikQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASQn8zl E3DbaXV43whR8OoSFkz/MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNJYQ/MKdI0o/Ftnc3RmRoi/cSFbB/gmfapPGme8xVPNgiUNlVCEXJ UCsGi1I6C8nzrDUofE6VBXXpCcrebf2N30lZ8imxEJWesF2LkqL5HBwfUY2FBCIV bsjriUs/ixLW83Wgyo9QN0uEUuQTbJS7n9pFtuAKgpGDMGJKC8yJcysaQ0rbGwMZ ug+nrt33YasMXKkiTGItij9iV+E+xvIPL/ppXfgNHKr1XnfXVoS+28ewrFVvoEHh Fld+PYjzkiW0rKykxVFEhdb7ARE4NzIObA7XwNu/uzrNfY8OqPZ+/N6IwhA3Jr1M QqoOg5DSRIDqPB1D0b2hOU5mBb499Eyq -----END CERTIFICATE-----Generated at Mon Oct 20 00:32:32 2025 by rpki-client