$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft File: U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json) Hash identifier: bmreeOoXYbtAufBUFNM94Ov8Q1TT1KrRu4a/PMXOGTQ= Subject key identifier: 5E:56:00:F3:A7:B3:E8:66:7C:5E:78:B2:57:DE:65:05:76:2E:DD:3E Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 Certificate issuer: /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft Manifest number: DC Signing time: Sun 19 Oct 2025 08:38:00 +0000 Manifest this update: Sun 19 Oct 2025 08:38:00 +0000 Manifest next update: Sun 26 Oct 2025 08:38:00 +0000 Files and hashes: 1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: 75rSVjW8Z6iGQ7xQZwX1ZGEDPiA5TploDh2FmP59a/0=) 2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: GCMBGFfjL07x7SqicgzDicIqCejugsZ+LueaE228tBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Validity Not Before: Oct 19 08:38:00 2025 GMT Not After : Oct 26 08:38:00 2025 GMT Subject: CN=68f4a368-041c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:18:bd:29:9f:25:71:fc:53:3a:c2:aa:df: 42:6a:5b:f4:81:1f:97:38:08:45:b9:14:69:1e:5f: ac:4a:0a:b6:c0:63:a3:31:d3:15:b8:28:d6:45:33: 66:ac:92:83:3f:45:eb:43:60:af:5d:52:ec:86:5c: d2:9b:5f:9a:21:5a:2c:49:93:94:f5:8c:a6:48:4e: 64:0d:bd:bb:22:75:88:58:38:de:cc:94:62:a0:57: 14:f9:28:4a:45:09:40:28:6b:ed:0e:56:2d:04:22: 3c:c3:b1:e8:c7:7c:6e:c2:c8:96:bc:ed:8d:1f:b0: ec:6b:9d:6b:46:41:75:f6:69:d5:49:a4:a4:1f:98: 56:a2:2b:ec:8d:1f:de:e1:56:d2:6b:49:ac:f1:03: ae:32:42:8d:fe:df:2a:5f:40:de:87:ce:b9:6f:b1: e5:08:5c:56:67:62:b0:f9:f1:fd:69:cb:a9:c7:52: 26:37:bd:71:1d:af:81:52:37:aa:7a:62:ce:07:56: 7f:b3:4d:1a:ec:35:98:eb:7d:43:2a:b5:b2:34:b8: c2:f7:7d:8c:8b:38:fd:43:53:cf:d4:4f:78:66:7e: fa:d8:67:6c:39:fe:41:ef:0f:37:0d:0d:45:7b:fc: 8a:18:8f:76:5d:08:cc:69:3f:78:bc:c2:53:96:83: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:56:00:F3:A7:B3:E8:66:7C:5E:78:B2:57:DE:65:05:76:2E:DD:3E X509v3 Authority Key Identifier: keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9f:28:77:4a:eb:b3:38:4c:e5:0a:8c:27:0c:fc:bd:d8:42: e3:a3:32:9c:35:50:16:03:4c:e9:2e:2d:c5:31:16:c0:98:f8: 2f:a3:3f:e8:82:52:52:a1:cc:5e:34:a7:ae:b5:6f:d4:15:5e: 7d:9c:0c:60:82:44:fd:5c:35:10:fc:54:cc:2d:06:7b:ff:87: 82:6d:c3:58:d4:7d:d3:d7:60:f2:20:ec:93:07:47:d9:69:1d: be:9e:e5:36:6e:d9:56:e2:2e:a7:c6:b3:19:a2:13:a1:70:6d: 1a:53:f1:9f:af:69:91:b1:9f:e0:64:0e:15:8e:c7:1c:c5:39: 45:73:22:da:e4:8f:b4:a7:19:c2:30:b7:4e:a8:e3:dd:ef:e9: 3a:df:44:0c:13:3b:ec:11:40:ee:ea:5a:2a:bd:f8:68:85:9f: ca:70:9c:cf:a6:90:cb:d2:02:fb:ab:18:f5:08:60:01:ac:70: 4e:56:24:10:e0:eb:ab:03:6a:8c:1b:9c:93:b7:e3:d8:8b:36: 61:8b:b1:ae:b3:11:a0:a4:38:b1:6e:a9:37:4e:4c:f7:28:28: 85:89:43:1a:20:0a:7e:9d:a2:90:b2:32:1b:ba:f5:34:30:f6: ab:82:b9:f2:60:db:f0:78:01:12:45:7a:f5:ab:28:81:0b:d7: 32:b9:99:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E3MzUxMTAvBgNVBAUTKDUzN0IxQkExQzAxQjQ4NjM0NzM4QUExMTU5QUUyQjk1 NTkwREREOTEwHhcNMjUxMDE5MDgzODAwWhcNMjUxMDI2MDgzODAwWjAYMRYwFAYD VQQDEw02OGY0YTM2OC0wNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCMYvSmfJXH8UzrCqt9Calv0gR+XOAhFuRRpHl+sSgq2wGOjMdMVuCjWRTNm rJKDP0XrQ2CvXVLshlzSm1+aIVosSZOU9YymSE5kDb27InWIWDjezJRioFcU+ShK RQlAKGvtDlYtBCI8w7Hox3xuwsiWvO2NH7Dsa51rRkF19mnVSaSkH5hWoivsjR/e 4VbSa0ms8QOuMkKN/t8qX0Deh865b7HlCFxWZ2Kw+fH9acupx1ImN71xHa+BUjeq emLOB1Z/s00a7DWY631DKrWyNLjC932Mizj9Q1PP1E94Zn762GdsOf5B7w83DQ1F e/yKGI92XQjMaT94vMJTloOQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5WAPOn s+hmfF54slfeZQV2Lt0+MB8GA1UdIwQYMBaAFFN7G6HAG0hjRziqEVmuK5VZDd2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTczNS9EMEU5QjFFRTYz OUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNHTkhPS29SV2E0cmxWa04z WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Uzc2JvY0FiU0dOSE9Lb1JXYTRybFZrTjNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTczNS9EMEU5QjFFRTYzOUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNH TkhPS29SV2E0cmxWa04zWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBnyh3SuuzOEzlCownDPy92ELjozKcNVAWA0zpLi3FMRbAmPgvoz/o glJSocxeNKeutW/UFV59nAxggkT9XDUQ/FTMLQZ7/4eCbcNY1H3T12DyIOyTB0fZ aR2+nuU2btlW4i6nxrMZohOhcG0aU/Gfr2mRsZ/gZA4VjsccxTlFcyLa5I+0pxnC MLdOqOPd7+k630QMEzvsEUDu6loqvfhohZ/KcJzPppDL0gL7qxj1CGABrHBOViQQ 4OurA2qMG5yTt+PYizZhi7GusxGgpDixbqk3Tkz3KCiFiUMaIAp+naKQsjIbuvU0 MPargrnyYNvweAESRXr1qyiBC9cyuZmM -----END CERTIFICATE-----Generated at Mon Oct 20 21:54:00 2025 by rpki-client