$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: uiPKhn8aGirVsBRHVzGp1rd+6NG8Sev4NWZSENuYyb8= Subject key identifier: A1:F2:75:AE:42:DF:AB:21:69:E6:38:4A:23:15:83:30:49:07:74:62 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 21BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 21B4 Signing time: Mon 20 Oct 2025 16:07:39 +0000 Manifest this update: Mon 20 Oct 2025 16:07:38 +0000 Manifest next update: Mon 27 Oct 2025 16:07:38 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: hDefavh6Txmm+RQxd09h5GV4YkkOMeHN9hCjTgm7Qiw=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: PxUOEDED+JHKJelWKhOvajOHx5KTZi4sFxCqv9/Wuds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8638 (0x21be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Oct 20 16:07:38 2025 GMT Not After : Oct 27 16:07:38 2025 GMT Subject: CN=68f65e4a-7838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:81:1d:71:b0:1d:a0:5d:9e:4d:81:a1:3b: a1:45:3e:42:12:85:2a:50:42:59:48:28:aa:44:fa: d7:bc:d2:72:c4:f8:bf:94:4a:74:f1:16:c8:a8:f8: 84:bb:b9:cb:e0:a3:95:59:b8:72:69:73:6f:90:e8: 77:3a:96:34:af:be:9c:bf:bd:89:46:56:2e:9d:98: ae:33:7a:ce:45:d4:f3:cd:9b:c0:63:3f:b9:f5:f3: 56:50:77:8a:5f:e4:fb:e7:a3:d9:f8:2c:c9:eb:7c: bb:88:bd:c8:f5:ca:8b:50:80:0c:f6:ac:90:6e:86: 48:4e:a1:40:e0:19:b5:c4:68:dc:f0:c9:ad:f4:42: 13:92:d7:bc:3c:37:eb:a6:b5:1b:c3:a3:aa:ad:7b: 5d:39:40:89:92:5f:6b:49:92:e5:5c:2b:70:e9:57: f9:a9:c8:03:83:50:69:86:4d:77:bd:52:a9:2f:39: 58:84:6e:c8:c1:d3:90:8f:30:61:28:57:6e:3b:97: e1:0d:f8:03:39:bd:5f:c3:f8:66:98:ed:2d:32:7e: 58:e8:94:b9:80:47:d3:eb:b4:9e:0c:50:2f:5a:1c: 70:02:af:7d:90:30:6c:56:39:a0:b1:6c:3f:08:07: 4b:c8:ce:04:0f:8c:24:52:33:7a:87:de:c8:48:cc: ef:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F2:75:AE:42:DF:AB:21:69:E6:38:4A:23:15:83:30:49:07:74:62 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:18:40:fc:d6:76:8e:b2:13:6f:01:d8:e1:64:b9:51:80:75: ed:ae:45:61:c2:43:6a:03:8f:ca:20:2e:c0:e5:06:8d:32:94: f0:4b:b9:de:4f:6c:87:16:f3:b3:c0:c4:98:7a:f9:a3:79:aa: 15:f7:08:59:d7:a1:66:3e:c7:64:b3:8b:b6:71:28:54:9b:45: 18:c6:f8:46:c0:60:14:e9:b4:5a:73:df:ed:ab:f8:81:82:4f: a4:63:90:85:0d:9a:e5:e0:f9:fd:d5:88:e6:05:ff:61:1d:ab: 79:ca:7d:a3:da:45:c3:d2:aa:ce:de:05:08:a6:17:3a:03:f5: e5:0d:d8:14:99:60:99:72:80:f5:8c:62:0e:77:77:4b:3a:e8: c6:56:2a:c6:d4:ea:d6:34:e0:4b:e6:5b:fa:74:1a:c6:10:de: 88:53:db:78:e4:24:c3:f2:9a:93:67:c1:92:2c:52:78:e7:19: 2c:ef:b2:23:25:93:3e:02:50:d5:1e:0a:63:48:d1:0b:fe:cd: 32:ad:3b:54:16:d6:fa:b7:c3:11:76:cb:a8:ed:cb:65:71:4d: 68:05:cb:b3:55:63:21:05:62:0e:00:37:84:b7:48:0a:d8:dd: 32:00:70:ed:92:69:e2:07:6b:e6:aa:b5:db:0b:fb:00:9f:b0: 70:5e:b6:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUxMDIwMTYwNzM4WhcNMjUxMDI3MTYwNzM4WjAYMRYwFAYD VQQDEw02OGY2NWU0YS03ODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleSBHXGwHaBdnk2BoTuhRT5CEoUqUEJZSCiqRPrXvNJyxPi/lEp08RbIqPiE u7nL4KOVWbhyaXNvkOh3OpY0r76cv72JRlYunZiuM3rORdTzzZvAYz+59fNWUHeK X+T756PZ+CzJ63y7iL3I9cqLUIAM9qyQboZITqFA4Bm1xGjc8Mmt9EITkte8PDfr prUbw6OqrXtdOUCJkl9rSZLlXCtw6Vf5qcgDg1Bphk13vVKpLzlYhG7IwdOQjzBh KFduO5fhDfgDOb1fw/hmmO0tMn5Y6JS5gEfT67SeDFAvWhxwAq99kDBsVjmgsWw/ CAdLyM4ED4wkUjN6h97ISMzv/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHyda5C 36shaeY4SiMVgzBJB3RiMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQGED81naOshNvAdjhZLlRgHXtrkVhwkNqA4/KIC7A5QaNMpTwS7ne T2yHFvOzwMSYevmjeaoV9whZ16FmPsdks4u2cShUm0UYxvhGwGAU6bRac9/tq/iB gk+kY5CFDZrl4Pn91YjmBf9hHat5yn2j2kXD0qrO3gUIphc6A/XlDdgUmWCZcoD1 jGIOd3dLOujGVirG1OrWNOBL5lv6dBrGEN6IU9t45CTD8pqTZ8GSLFJ45xks77Ij JZM+AlDVHgpjSNEL/s0yrTtUFtb6t8MRdsuo7ctlcU1oBcuzVWMhBWIOADeEt0gK 2N0yAHDtkmniB2vmqrXbC/sAn7BwXraR -----END CERTIFICATE-----Generated at Mon Oct 20 21:43:58 2025 by rpki-client