$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: 8oiqvpM3czWMqKeQsGz3n8liVzaMGJsJs5oeG/Weurs= Subject key identifier: 9D:91:6A:72:C1:A0:13:DC:C3:88:86:38:DD:1D:93:0B:FD:85:02:D8 Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 0384 Signing time: Sun 19 Oct 2025 02:50:21 +0000 Manifest this update: Sun 19 Oct 2025 02:50:20 +0000 Manifest next update: Sun 26 Oct 2025 02:50:20 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: Npbx/7yPH09klIlJ/1DmDQzNHjMO5Lga2x8L0UhDzQA=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Oct 19 02:50:20 2025 GMT Not After : Oct 26 02:50:20 2025 GMT Subject: CN=68f451ec-1a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:9d:e6:e6:f1:8b:eb:13:66:d0:35:47:3a: d5:8f:83:13:3e:91:bd:9b:c6:a4:b2:3e:3b:fe:b3: 0e:8f:da:0b:84:4e:48:ca:d7:02:ac:8f:cf:af:09: 1c:39:9f:22:b2:54:4b:3b:35:db:cb:c1:a6:ac:a8: 71:b8:8b:08:d0:d6:54:aa:65:9a:5d:ae:6d:ab:c5: 16:13:13:8b:50:65:23:bd:10:dc:5b:3e:95:ac:a4: 3c:af:5b:1c:b2:04:d8:0c:af:87:80:37:cd:ad:a5: e5:a6:9b:f4:4c:46:b4:75:24:09:53:9b:8b:2b:c6: 9f:84:2a:bd:09:86:8b:7c:87:1c:c6:a4:9e:0b:75: 98:5a:73:eb:e4:7b:89:d0:9a:72:8a:ff:af:1a:72: 2b:ba:01:03:a0:be:ca:5f:84:c3:4d:c3:a3:25:54: d9:89:90:3b:dc:69:71:8c:1b:79:13:63:7f:e1:10: 2b:d8:5e:bf:55:c1:ab:bf:4e:a0:18:44:d6:3c:4c: 98:2a:3c:c4:2f:6c:d2:fa:b6:a7:53:d5:67:b1:ff: 6e:2e:bc:c3:5c:22:e7:94:68:49:75:7e:cb:59:d0: e7:19:c6:b9:b6:c9:38:22:f9:72:b8:af:e9:55:88: 35:49:08:c6:29:92:77:05:07:cf:a5:22:58:9e:c4: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:91:6A:72:C1:A0:13:DC:C3:88:86:38:DD:1D:93:0B:FD:85:02:D8 X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ab:16:38:77:96:63:08:f1:81:24:50:4b:c6:95:0c:93:87: 24:aa:31:63:c3:2e:cf:20:3d:10:fa:38:10:e6:c4:2e:a5:bb: ed:f4:10:04:cf:2a:7a:71:22:48:20:86:34:1a:4e:ef:7f:4a: 43:22:d6:1f:0b:3d:fa:fc:b8:80:96:6c:74:97:26:46:6b:0b: 53:31:a9:7c:a0:af:65:26:ed:9d:ac:66:38:7d:76:b3:f8:6a: 83:ab:4b:99:91:52:7d:fc:44:31:63:9f:9c:3a:87:49:81:6a: 76:f1:70:62:21:4a:f5:c2:09:68:d7:14:34:8a:0c:d7:16:96: 00:7c:ef:6a:02:66:49:8c:4b:5c:a8:6d:8e:09:37:d6:29:89: 7c:91:ed:c6:c2:30:a0:2c:44:7e:4f:aa:26:1f:b3:89:e9:1d: 92:5b:84:b2:cd:2b:ed:13:73:60:e1:22:d0:b1:c1:46:a9:ba: e8:df:dd:ce:31:ce:bf:14:7f:76:41:e3:72:1f:a7:79:fd:9f: ba:88:22:12:c6:6c:8e:b0:1f:0f:21:40:9c:61:16:8e:bc:fc: f4:32:b8:aa:07:46:a9:67:75:0c:99:60:81:fa:f4:9a:d4:71: 9d:a8:d8:c4:b3:57:f6:32:3a:01:a9:53:43:30:39:ae:8b:84: 1c:22:37:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUxMDE5MDI1MDIwWhcNMjUxMDI2MDI1MDIwWjAYMRYwFAYD VQQDEw02OGY0NTFlYy0xYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Nud5ubxi+sTZtA1RzrVj4MTPpG9m8aksj47/rMOj9oLhE5IytcCrI/Prwkc OZ8islRLOzXby8GmrKhxuIsI0NZUqmWaXa5tq8UWExOLUGUjvRDcWz6VrKQ8r1sc sgTYDK+HgDfNraXlppv0TEa0dSQJU5uLK8afhCq9CYaLfIccxqSeC3WYWnPr5HuJ 0Jpyiv+vGnIrugEDoL7KX4TDTcOjJVTZiZA73GlxjBt5E2N/4RAr2F6/VcGrv06g GETWPEyYKjzEL2zS+ranU9Vnsf9uLrzDXCLnlGhJdX7LWdDnGca5tsk4IvlyuK/p VYg1SQjGKZJ3BQfPpSJYnsT2MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2RanLB oBPcw4iGON0dkwv9hQLYMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOqxY4d5ZjCPGBJFBLxpUMk4ckqjFjwy7PID0Q+jgQ5sQupbvt9BAE zyp6cSJIIIY0Gk7vf0pDItYfCz36/LiAlmx0lyZGawtTMal8oK9lJu2drGY4fXaz +GqDq0uZkVJ9/EQxY5+cOodJgWp28XBiIUr1wglo1xQ0igzXFpYAfO9qAmZJjEtc qG2OCTfWKYl8ke3GwjCgLER+T6omH7OJ6R2SW4SyzSvtE3Ng4SLQscFGqbro393O Mc6/FH92QeNyH6d5/Z+6iCISxmyOsB8PIUCcYRaOvPz0MriqB0apZ3UMmWCB+vSa 1HGdqNjEs1f2MjoBqVNDMDmui4QcIjf7 -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:36 2025 by rpki-client