$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: c/nWcqc67yThG8ZP0kBNhWGF+K+e/4ZXON4VOTY56/I= Subject key identifier: C9:33:D3:75:E0:00:4E:40:87:FC:8E:02:9D:29:40:2D:16:15:37:0C Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 01C7 Signing time: Sun 19 Oct 2025 05:22:25 +0000 Manifest this update: Sun 19 Oct 2025 05:22:24 +0000 Manifest next update: Sun 26 Oct 2025 05:22:24 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: Mh+WZtjCjZcIDXmgpUrLm8tZ9/cEeGKM3HuXYoF0Ang=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: VgWfSFvnBqBZBBT7n2uea4PCFkDi3gg2tHZzpCuKDJA=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: gpne2Z9eCccwlEkyZjX90RD5Y2MRSV5puraHdA9qCqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Oct 19 05:22:24 2025 GMT Not After : Oct 26 05:22:24 2025 GMT Subject: CN=68f47590-a7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:02:21:6c:ea:d1:86:be:91:47:ee:3c:69: ee:42:0f:e9:03:90:17:82:ed:b9:3e:d8:8b:02:d1: 4f:7f:36:c5:33:8c:7b:e7:62:c5:27:06:5c:24:51: 9c:16:fa:48:ed:6d:d9:0a:b8:45:18:f0:51:f2:ad: 0a:42:f7:b8:d0:1d:ed:56:cc:76:bd:b3:83:12:78: 26:c3:fc:ee:11:7c:5d:27:71:50:a3:b4:ff:eb:04: f3:97:48:be:83:a6:8f:0c:76:9f:42:b6:36:1a:23: 14:ee:2d:3c:cf:ed:55:6f:e8:f8:0d:b7:e5:0b:7f: 93:ee:9d:c1:90:36:c6:4a:fd:c3:5b:58:da:66:38: f6:24:ba:dc:61:4c:8e:78:10:39:52:90:37:1a:c4: 5a:74:3e:87:d9:2b:76:9a:17:bb:f9:21:98:da:0e: ae:4b:d3:e3:4b:ee:81:e2:ef:ec:e5:21:0b:87:36: 89:34:ba:24:49:82:ec:9a:42:91:85:65:44:63:97: eb:58:44:19:bf:bd:f2:2c:99:24:69:68:a4:59:fa: 29:cd:b2:25:f6:f6:c7:c4:28:d6:0f:8d:f5:55:2f: ee:74:6f:26:0a:04:77:e9:f8:93:49:fe:62:0b:4a: 5e:f9:09:67:39:2f:dd:45:52:63:79:69:5f:71:22: 01:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:33:D3:75:E0:00:4E:40:87:FC:8E:02:9D:29:40:2D:16:15:37:0C X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:72:77:c6:94:cd:fd:c6:c4:39:95:a2:fd:82:41:5d:b5:8a: bc:2a:64:f7:9c:8e:b1:b1:86:2d:27:43:0c:17:4a:95:16:a5: 94:bb:29:af:40:fa:d9:a1:6c:98:97:eb:13:bb:84:79:a8:c1: 72:28:c1:a3:0c:07:8f:58:b1:34:76:5f:24:d5:e7:d5:6a:02: 41:a9:8b:e6:49:4f:e3:0e:06:b7:7f:27:4f:18:61:c8:a6:9d: dd:40:b0:3c:b5:34:b3:db:03:db:87:c2:5b:20:7a:a0:d8:f2: 78:72:7d:74:7e:f4:21:d1:77:03:8a:50:47:fc:b3:b0:96:95: 21:b5:7e:66:6c:33:32:bf:d9:b6:82:d3:2b:c0:d8:0c:8e:cb: 62:06:c5:fc:cf:2a:ce:0f:9f:76:34:c3:5e:2a:1b:a8:16:8b: 6a:02:4e:c0:81:96:1f:1a:46:d2:ea:61:f4:a0:65:ed:a4:78: 40:51:d7:e8:b5:84:53:2b:5c:39:3c:87:33:8d:09:9f:3c:95: e8:df:95:f4:d7:bc:38:7e:46:b6:79:9d:41:92:c1:81:85:bb: 7b:62:cd:91:ce:ea:be:a0:a0:a1:44:65:f5:21:ec:2c:37:b1: 78:4d:9f:c5:07:60:16:e0:33:af:5f:96:08:e6:bb:89:78:14: 1f:9d:44:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjUxMDE5MDUyMjI0WhcNMjUxMDI2MDUyMjI0WjAYMRYwFAYD VQQDEw02OGY0NzU5MC1hN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22ACIWzq0Ya+kUfuPGnuQg/pA5AXgu25PtiLAtFPfzbFM4x752LFJwZcJFGc FvpI7W3ZCrhFGPBR8q0KQve40B3tVsx2vbODEngmw/zuEXxdJ3FQo7T/6wTzl0i+ g6aPDHafQrY2GiMU7i08z+1Vb+j4DbflC3+T7p3BkDbGSv3DW1jaZjj2JLrcYUyO eBA5UpA3GsRadD6H2St2mhe7+SGY2g6uS9PjS+6B4u/s5SELhzaJNLokSYLsmkKR hWVEY5frWEQZv73yLJkkaWikWfopzbIl9vbHxCjWD431VS/udG8mCgR36fiTSf5i C0pe+QlnOS/dRVJjeWlfcSIBQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkz03Xg AE5Ah/yOAp0pQC0WFTcMMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAcnfGlM39xsQ5laL9gkFdtYq8KmT3nI6xsYYtJ0MMF0qVFqWUuymv QPrZoWyYl+sTu4R5qMFyKMGjDAePWLE0dl8k1efVagJBqYvmSU/jDga3fydPGGHI pp3dQLA8tTSz2wPbh8JbIHqg2PJ4cn10fvQh0XcDilBH/LOwlpUhtX5mbDMyv9m2 gtMrwNgMjstiBsX8zyrOD592NMNeKhuoFotqAk7AgZYfGkbS6mH0oGXtpHhAUdfo tYRTK1w5PIczjQmfPJXo35X017w4fka2eZ1BksGBhbt7Ys2Rzuq+oKChRGX1Iews N7F4TZ/FB2AW4DOvX5YI5ruJeBQfnURg -----END CERTIFICATE-----Generated at Tue Oct 21 00:06:26 2025 by rpki-client