$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: xtnVassl4x5iKaSJMOS0p904WmuPKU4ZJyBsz2ggqEE= Subject key identifier: 0A:0F:63:7B:F9:AC:5F:AC:CA:F2:DD:59:58:A4:B9:29:A9:5A:D4:14 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 25CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 25C2 Signing time: Sat 18 Oct 2025 15:57:32 +0000 Manifest this update: Sat 18 Oct 2025 15:57:32 +0000 Manifest next update: Sat 25 Oct 2025 15:57:32 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: fjky25MxkcGe/xIjHQPHLz79fwN9Uh033pEQNh6gn1g=) 2: 96F26DD8E4A511EF8259C769C4F9AE02.roa (hash: 106BmLtTyVCv8aiEyQESyMsMUTUgBCG4YPN0EmuEMYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9678 (0x25ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Oct 18 15:57:32 2025 GMT Not After : Oct 25 15:57:32 2025 GMT Subject: CN=68f3b8ec-b842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:c6:9c:8d:6c:2c:a4:1b:b5:10:af:32:a4: 8e:8e:a8:e6:58:61:49:9a:a5:2b:0b:80:e6:8c:70: fd:59:1e:c7:d8:90:6e:80:d6:0c:31:a8:58:6c:e6: 61:fd:b9:4f:3b:8a:4e:19:c6:9a:80:6d:98:35:ae: 59:99:bc:d9:44:4a:8b:17:67:fa:53:35:c0:bb:31: 84:2d:2c:d5:ba:a8:ea:e2:c5:a7:d0:63:b6:bf:9c: d8:8f:ab:de:21:b9:72:7a:63:57:2f:14:4d:1d:de: a1:b2:96:fe:16:1f:75:0c:4b:35:26:b8:a0:c4:9d: 06:ef:02:b3:a0:0e:e1:61:3e:d7:a6:21:39:4b:51: 5d:5f:dd:99:2d:67:ca:e3:2d:30:e2:b2:6e:23:96: 06:6b:2c:99:22:31:5e:3c:2f:e1:fb:6b:cf:55:63: a4:1f:87:af:6a:d9:c1:4f:56:27:92:34:b2:91:de: 55:84:c3:ca:47:da:b7:0c:48:e7:d1:4e:db:33:e8: 3a:6f:49:3a:b4:bb:fb:15:1a:6e:70:73:76:d8:92: fa:fa:14:91:e7:c6:b7:a2:c2:10:08:5e:de:3b:18: 45:f1:26:26:17:36:a7:db:b1:c1:69:12:e6:33:07: 02:a7:17:7b:d8:8d:c5:45:93:be:6c:0e:95:db:c4: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0F:63:7B:F9:AC:5F:AC:CA:F2:DD:59:58:A4:B9:29:A9:5A:D4:14 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a3:a5:64:6f:0f:31:6b:e5:fa:b9:44:91:7b:ec:9a:3a:9f: c5:78:e6:e0:35:2d:61:c1:bd:13:49:a2:a9:14:fc:cf:b9:f1: 29:da:39:57:ee:d6:e6:3b:c9:51:4c:d2:fe:44:5b:ac:40:2b: 2b:36:5c:bd:4a:4d:1a:d5:40:a5:f2:98:f5:f8:5c:19:3d:33: 07:eb:08:ef:53:d9:04:93:9f:2a:3b:06:fc:e5:05:b5:f7:fa: 0e:9e:82:f7:29:5f:eb:c4:27:60:f3:c5:f7:bd:87:47:7c:34: 81:e2:75:e1:d5:6b:fc:76:d6:89:6c:b7:d1:74:cb:fb:9c:bc: b7:67:4e:ee:e5:b3:cf:21:23:69:27:a3:c2:95:64:1c:9b:78: 95:32:0d:f9:ac:16:12:49:bf:85:be:da:91:b3:fe:99:f0:06: 4d:e7:96:1c:4a:d5:98:2e:2f:2b:05:66:92:2d:3b:4b:60:a4: 04:d6:b6:b8:b1:2b:7a:ee:26:70:6c:10:2f:3c:35:88:29:6f: a6:02:1a:bb:99:3e:7d:92:4e:91:7c:21:53:2a:4a:36:e5:e3: 73:6f:dd:1f:2c:46:28:8b:b1:cb:3d:cd:92:43:e2:3b:03:2c: fb:02:3f:38:a9:ca:07:7a:76:37:e2:cf:dc:ad:6c:9e:9e:71: 0b:57:3c:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjUxMDE4MTU1NzMyWhcNMjUxMDI1MTU1NzMyWjAYMRYwFAYD VQQDEw02OGYzYjhlYy1iODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IjGnI1sLKQbtRCvMqSOjqjmWGFJmqUrC4DmjHD9WR7H2JBugNYMMahYbOZh /blPO4pOGcaagG2YNa5ZmbzZREqLF2f6UzXAuzGELSzVuqjq4sWn0GO2v5zYj6ve IblyemNXLxRNHd6hspb+Fh91DEs1JrigxJ0G7wKzoA7hYT7XpiE5S1FdX92ZLWfK 4y0w4rJuI5YGayyZIjFePC/h+2vPVWOkH4evatnBT1YnkjSykd5VhMPKR9q3DEjn 0U7bM+g6b0k6tLv7FRpucHN22JL6+hSR58a3osIQCF7eOxhF8SYmFzan27HBaRLm MwcCpxd72I3FRZO+bA6V28Qz/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoPY3v5 rF+syvLdWVikuSmpWtQUMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRo6Vkbw8xa+X6uUSRe+yaOp/FeObgNS1hwb0TSaKpFPzPufEp2jlX 7tbmO8lRTNL+RFusQCsrNly9Sk0a1UCl8pj1+FwZPTMH6wjvU9kEk58qOwb85QW1 9/oOnoL3KV/rxCdg88X3vYdHfDSB4nXh1Wv8dtaJbLfRdMv7nLy3Z07u5bPPISNp J6PClWQcm3iVMg35rBYSSb+FvtqRs/6Z8AZN55YcStWYLi8rBWaSLTtLYKQE1ra4 sSt67iZwbBAvPDWIKW+mAhq7mT59kk6RfCFTKko25eNzb90fLEYoi7HLPc2SQ+I7 Ayz7Aj84qcoHenY34s/crWyennELVzyT -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:22 2025 by rpki-client