$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: ntB73EjLgDigmNjPXYcB3sLr3ixO2TXs+yZATBtUsWM= Subject key identifier: 22:98:42:B8:F0:DE:9E:3B:3C:23:D3:6A:21:73:47:5D:2C:BB:AB:5D Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 0A39 Signing time: Sat 18 Oct 2025 20:44:11 +0000 Manifest this update: Sat 18 Oct 2025 20:44:10 +0000 Manifest next update: Sat 25 Oct 2025 20:44:10 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: itZhwA9x/ZOlMMrRSVa3We8W0EZphfmJV36JxWQym2s=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: ACLukHzl4iP7lAUKq3zWaW1x17F+UkqOsay4tSs+0D0=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: WPHw7kNP0n6c5UltUwmrIvy70bAxnVBFcfWA6in4LsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2639 (0xa4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Oct 18 20:44:10 2025 GMT Not After : Oct 25 20:44:10 2025 GMT Subject: CN=68f3fc1a-fabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:36:c8:c6:c3:c1:ec:03:fd:43:ff:59:22: 8e:24:e0:3c:75:5c:1a:79:ff:07:cc:92:82:1b:cd: 35:8f:d5:56:ef:b3:5f:fc:a3:48:df:0d:2a:0d:09: c2:4b:61:ec:4b:1e:05:c9:f6:4d:ea:5d:ea:b1:5c: cf:d1:be:2e:6a:de:ab:56:61:8f:fb:0d:f2:c0:f6: 59:d6:15:4e:59:e0:26:b6:8a:a0:e3:31:67:50:6d: 57:cf:a6:4c:3c:2d:2f:fd:78:9c:7b:8a:b5:40:85: 4b:ca:f2:ae:48:3d:96:63:74:34:4d:08:ea:1c:fd: f7:d4:65:b9:5c:32:62:b6:29:c8:43:ba:7c:60:d3: a8:69:78:77:cb:3b:ab:e1:ee:5d:98:11:50:49:c3: 17:00:a6:8b:9a:0a:a7:0b:64:82:69:c3:ad:80:da: 87:a4:4e:b0:1e:73:6b:87:fa:bf:b8:6e:cc:06:39: b3:92:1a:cf:6b:c3:c4:44:e1:17:36:48:97:d0:1a: 15:0a:2a:70:86:21:76:c7:30:54:b5:95:9a:57:7c: 95:ee:a6:18:c5:85:4d:cf:df:7f:f5:4c:f4:47:a1: 23:7c:31:6f:8d:d9:b6:6c:aa:38:7b:0e:16:bd:8e: c2:65:2c:6e:72:e9:1d:be:13:60:da:26:87:7c:f2: 9b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:98:42:B8:F0:DE:9E:3B:3C:23:D3:6A:21:73:47:5D:2C:BB:AB:5D X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6f:90:b5:78:2b:57:41:aa:8b:53:d7:cb:45:57:5a:2f:89: a3:43:59:2b:34:48:fc:44:63:5e:8a:33:25:4a:42:7e:e5:7f: da:60:33:1d:35:f8:e7:62:9a:3e:55:5a:bc:30:f0:b1:9c:c6: d9:b3:eb:d3:a2:60:7d:75:f2:b3:cc:92:4a:4f:69:87:50:e2: a5:e3:d3:52:a3:ae:96:ce:96:39:33:fd:71:a8:9a:5e:72:d4: d5:96:73:8e:e6:40:40:26:ad:07:a1:14:fd:84:0b:98:e8:86: e7:f5:38:cd:2f:e9:a9:5f:8c:41:30:0b:68:94:37:2a:48:b8: 9b:24:e3:7b:9b:17:ee:5e:7e:d6:5b:18:52:bb:74:4a:e5:c5: 29:3c:79:82:2c:4f:5c:4c:38:13:69:a7:7b:e5:91:7d:27:09: 6b:99:fb:f7:d9:d3:7e:6d:c9:a2:ae:53:b5:4f:e7:04:f3:ee: f4:df:f5:2b:88:18:8b:1f:0b:60:4e:d9:c3:83:dc:d6:ce:5d: fe:1f:01:f6:9c:7d:91:29:45:39:11:96:6e:61:b3:b3:29:2a: b6:ed:df:63:07:36:a9:67:b8:92:c7:db:e8:2b:a3:2b:9c:17: 86:a7:49:09:ea:af:e0:71:68:d9:8f:94:0d:c5:1e:9b:b8:46: a1:82:7a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUxMDE4MjA0NDEwWhcNMjUxMDI1MjA0NDEwWjAYMRYwFAYD VQQDEw02OGYzZmMxYS1mYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyI2yMbDwewD/UP/WSKOJOA8dVwaef8HzJKCG801j9VW77Nf/KNI3w0qDQnC S2HsSx4FyfZN6l3qsVzP0b4uat6rVmGP+w3ywPZZ1hVOWeAmtoqg4zFnUG1Xz6ZM PC0v/Xice4q1QIVLyvKuSD2WY3Q0TQjqHP331GW5XDJitinIQ7p8YNOoaXh3yzur 4e5dmBFQScMXAKaLmgqnC2SCacOtgNqHpE6wHnNrh/q/uG7MBjmzkhrPa8PEROEX NkiX0BoVCipwhiF2xzBUtZWaV3yV7qYYxYVNz99/9Uz0R6EjfDFvjdm2bKo4ew4W vY7CZSxucukdvhNg2iaHfPKbkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKYQrjw 3p47PCPTaiFzR10su6tdMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGb5C1eCtXQaqLU9fLRVdaL4mjQ1krNEj8RGNeijMlSkJ+5X/aYDMd NfjnYpo+VVq8MPCxnMbZs+vTomB9dfKzzJJKT2mHUOKl49NSo66WzpY5M/1xqJpe ctTVlnOO5kBAJq0HoRT9hAuY6Ibn9TjNL+mpX4xBMAtolDcqSLibJON7mxfuXn7W WxhSu3RK5cUpPHmCLE9cTDgTaad75ZF9Jwlrmfv32dN+bcmirlO1T+cE8+703/Ur iBiLHwtgTtnDg9zWzl3+HwH2nH2RKUU5EZZuYbOzKSq27d9jBzapZ7iSx9voK6Mr nBeGp0kJ6q/gcWjZj5QNxR6buEahgnoT -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:38 2025 by rpki-client