$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: 17AzLVhnY+SvqCAOd0EEo2U3b8pQ+eLKHI72nGwXrw4= Subject key identifier: 74:C3:7F:94:D8:3E:67:FE:3D:F5:BE:64:AB:D5:A0:1B:49:CF:81:C6 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0CEC Signing time: Mon 20 Oct 2025 18:41:26 +0000 Manifest this update: Mon 20 Oct 2025 18:41:26 +0000 Manifest next update: Mon 27 Oct 2025 18:41:26 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: 4VlcJRdqJh+cym42TPNb9Qu3XpVv2Zcy5as5Ad3qGLc=) 2: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: WwXl48vJNivZYV02F4DhTAdSziCXHjo0WT9hGEi74tE=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: odtdAeT3uybzWOWQg7rEN3DZC1Lg8w9hAFA2d8d7ZGI=) 4: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Oct 20 18:41:26 2025 GMT Not After : Oct 27 18:41:26 2025 GMT Subject: CN=68f68256-7fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:68:be:eb:83:79:25:53:63:84:87:28:af: 27:03:ac:e4:f9:83:2b:64:f1:e2:0e:2b:8e:6e:6a: 1e:78:cb:41:4c:90:c3:fa:e5:5f:3c:35:cd:6c:33: 39:6e:74:23:f3:6f:b3:c1:b2:e7:cf:5f:1b:39:e0: 80:4d:48:2d:f6:b8:ab:61:6c:63:a3:44:e2:70:b6: de:2c:03:71:b0:49:61:c3:14:dd:40:68:86:46:af: 05:59:51:b1:fb:fc:c4:d3:5e:4f:49:a3:a5:6f:49: f3:50:52:1a:93:c2:84:60:aa:88:3e:fc:e3:ab:01: 82:dd:92:25:f5:fe:40:01:d6:a8:28:fa:8e:4d:e3: f0:34:a5:bb:74:ba:76:f0:11:2f:e3:e8:d0:e5:ed: f6:bd:7f:be:c3:c4:51:70:f9:7f:48:7e:fc:ed:ef: 92:ca:4a:b6:90:04:7f:77:cc:b4:2d:85:8d:2f:3d: 35:0d:0f:aa:17:89:5f:dc:f2:28:f3:10:c2:7f:05: 43:72:57:b9:e2:97:da:8a:ac:79:5a:3a:c9:1e:77: 25:9a:a0:ce:28:3f:1f:36:3f:d9:d0:f2:7d:88:5c: e5:e7:9f:1c:e6:c2:62:bf:e2:85:1c:24:4b:a2:dd: 92:e4:12:82:3f:d6:53:ad:04:53:01:b9:21:70:f1: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C3:7F:94:D8:3E:67:FE:3D:F5:BE:64:AB:D5:A0:1B:49:CF:81:C6 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:13:5a:c9:a4:a1:92:3e:a5:40:e8:12:7a:0b:f8:c2:b4:d7: 95:23:27:8b:e7:d5:db:0b:91:b0:e2:7c:f4:22:42:63:da:c9: f5:fa:28:ec:70:b0:1f:60:fd:18:cc:96:38:4d:e5:93:f2:74: 67:dc:45:dd:bb:01:e8:d0:42:db:a0:d1:ee:e0:c2:19:48:7f: eb:37:97:a6:d1:86:50:b0:10:48:81:c0:7e:41:62:b7:f9:56: 0f:ff:4f:ae:0d:b7:d6:d2:9f:be:bb:c2:4a:20:2c:47:39:c1: 1b:e8:46:be:5e:66:0c:cd:67:7a:e3:bd:0c:24:f8:11:a3:37: c1:2b:bd:ea:0a:90:97:61:44:c0:a5:68:7d:6f:de:39:da:eb: 14:12:9e:95:3f:6f:ef:a9:32:d9:61:34:dd:1f:c9:46:83:60: ce:79:94:1f:ce:b0:46:c1:d2:13:57:62:19:57:3d:e1:44:a5: 8d:91:e4:26:28:7e:55:6f:07:68:84:fd:1f:e4:a3:ce:15:10: 48:34:ed:b0:99:d9:fc:cd:05:d5:ac:0d:95:62:f1:58:d7:77: 4c:55:1f:a8:f3:2b:80:00:0c:8a:ef:5d:7d:e7:f9:07:1f:3c: 9e:20:49:91:00:33:0b:cb:89:c8:f5:5c:58:7f:cf:76:00:45: c8:d3:50:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUxMDIwMTg0MTI2WhcNMjUxMDI3MTg0MTI2WjAYMRYwFAYD VQQDEw02OGY2ODI1Ni03ZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9xovuuDeSVTY4SHKK8nA6zk+YMrZPHiDiuObmoeeMtBTJDD+uVfPDXNbDM5 bnQj82+zwbLnz18bOeCATUgt9rirYWxjo0TicLbeLANxsElhwxTdQGiGRq8FWVGx +/zE015PSaOlb0nzUFIak8KEYKqIPvzjqwGC3ZIl9f5AAdaoKPqOTePwNKW7dLp2 8BEv4+jQ5e32vX++w8RRcPl/SH787e+Sykq2kAR/d8y0LYWNLz01DQ+qF4lf3PIo 8xDCfwVDcle54pfaiqx5WjrJHnclmqDOKD8fNj/Z0PJ9iFzl558c5sJiv+KFHCRL ot2S5BKCP9ZTrQRTAbkhcPFG0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTDf5TY Pmf+PfW+ZKvVoBtJz4HGMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVE1rJpKGSPqVA6BJ6C/jCtNeVIyeL59XbC5Gw4nz0IkJj2sn1+ijs cLAfYP0YzJY4TeWT8nRn3EXduwHo0ELboNHu4MIZSH/rN5em0YZQsBBIgcB+QWK3 +VYP/0+uDbfW0p++u8JKICxHOcEb6Ea+XmYMzWd6470MJPgRozfBK73qCpCXYUTA pWh9b9452usUEp6VP2/vqTLZYTTdH8lGg2DOeZQfzrBGwdITV2IZVz3hRKWNkeQm KH5VbwdohP0f5KPOFRBINO2wmdn8zQXVrA2VYvFY13dMVR+o8yuAAAyK71195/kH HzyeIEmRADMLy4nI9VxYf892AEXI01Av -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:35 2025 by rpki-client