$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: 1RCgitwPKCTSIMWCl/mAYOSrQ80BGK5v/9Ado+DM1EQ= Subject key identifier: A0:77:BA:54:1D:2F:F7:0B:AC:E9:25:E0:65:09:BC:96:55:5A:EC:7C Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 04AB Signing time: Sun 19 Oct 2025 01:46:37 +0000 Manifest this update: Sun 19 Oct 2025 01:46:36 +0000 Manifest next update: Sun 26 Oct 2025 01:46:36 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: uopAP2lfFMpbQZP298MBe2KXcinK58ss+VLz6QWC358=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Oct 19 01:46:36 2025 GMT Not After : Oct 26 01:46:36 2025 GMT Subject: CN=68f442fd-4821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:b7:40:e4:5a:0b:7b:92:ca:f9:38:d7:63: b4:fa:0d:6c:44:81:5b:c1:72:3c:e6:44:5f:f4:d9: 36:10:e3:02:54:6a:cc:e8:3e:8d:34:7b:20:3d:ed: bd:7c:8a:5a:3c:85:e1:13:0a:78:7b:02:ad:b1:c8: 0a:ef:88:7a:7e:1a:c9:bf:3a:a7:7e:c0:e5:4a:d2: 5a:23:17:1b:ae:59:34:45:99:3b:02:67:e2:58:87: 24:fa:09:7d:37:40:91:35:53:dd:b3:05:bd:f1:ec: 15:8e:ba:9d:3f:83:39:23:55:f4:cd:b5:14:35:30: 47:00:ce:55:90:62:ee:49:89:ca:26:a9:87:5a:d7: c0:1d:0e:b9:df:7a:e6:22:d6:02:af:2b:d3:36:4d: 76:90:da:65:3d:4f:7e:da:6d:95:5f:49:75:8f:59: d3:a9:21:b4:fe:f4:00:6b:aa:bc:77:08:68:a5:9a: 33:38:15:f7:6a:ac:3e:fb:d4:84:d4:21:66:be:9e: 2e:8b:b8:9a:2f:0b:53:d1:f1:66:c6:98:64:89:33: b3:36:d8:a1:59:66:f6:37:e9:14:3b:6b:c5:64:ee: 22:5c:01:02:72:2c:fc:db:06:78:b8:f4:8f:71:28: 8b:e2:f1:f7:d8:10:96:05:7a:4f:68:7b:37:ff:0b: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:77:BA:54:1D:2F:F7:0B:AC:E9:25:E0:65:09:BC:96:55:5A:EC:7C X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:38:50:f9:1c:bb:3f:ba:6c:61:84:7d:e9:ab:8c:f4:9a:f0: 00:87:8c:23:96:51:de:dc:aa:9a:ba:5d:93:68:53:55:f2:01: d7:30:6f:1d:3e:b7:e2:b9:4f:6e:f8:2a:10:32:f7:06:fd:0f: a0:16:ca:1a:b2:54:39:01:ad:b9:84:ac:ca:12:61:dd:73:7f: 02:86:b1:23:ad:2b:69:34:96:b2:c5:5f:15:5c:02:44:6a:e2: 83:37:e4:00:d0:19:36:59:dc:f7:35:14:00:93:05:44:de:a2: cc:bc:8d:ec:2d:61:51:9f:85:74:1b:a6:5e:84:a8:6d:18:86: db:4b:e4:d5:9e:cb:c8:65:da:9d:ce:14:99:f9:bc:c3:60:38: 48:0a:34:10:cf:01:06:16:b7:fc:56:a1:8a:22:ff:da:ce:e0: bc:27:ce:60:6c:47:2e:3a:5c:83:dc:10:b2:cd:34:07:ba:9d: be:f1:1b:28:11:3d:ed:f5:75:35:43:8e:90:a2:fd:90:ab:92: 8d:98:96:e4:38:8a:5a:09:4a:3f:6e:e1:5d:8d:af:ee:5e:49: fa:e7:32:ee:68:b3:67:2d:2b:54:4f:49:eb:d1:cb:8c:8d:58: 9b:8a:3f:f3:ae:71:5b:c8:e9:27:aa:cd:fa:ec:42:f0:73:b3: b3:85:07:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUxMDE5MDE0NjM2WhcNMjUxMDI2MDE0NjM2WjAYMRYwFAYD VQQDEw02OGY0NDJmZC00ODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd63QORaC3uSyvk412O0+g1sRIFbwXI85kRf9Nk2EOMCVGrM6D6NNHsgPe29 fIpaPIXhEwp4ewKtscgK74h6fhrJvzqnfsDlStJaIxcbrlk0RZk7AmfiWIck+gl9 N0CRNVPdswW98ewVjrqdP4M5I1X0zbUUNTBHAM5VkGLuSYnKJqmHWtfAHQ6533rm ItYCryvTNk12kNplPU9+2m2VX0l1j1nTqSG0/vQAa6q8dwhopZozOBX3aqw++9SE 1CFmvp4ui7iaLwtT0fFmxphkiTOzNtihWWb2N+kUO2vFZO4iXAECciz82wZ4uPSP cSiL4vH32BCWBXpPaHs3/wtwPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB3ulQd L/cLrOkl4GUJvJZVWux8MB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfOFD5HLs/umxhhH3pq4z0mvAAh4wjllHe3Kqaul2TaFNV8gHXMG8d PrfiuU9u+CoQMvcG/Q+gFsoaslQ5Aa25hKzKEmHdc38ChrEjrStpNJayxV8VXAJE auKDN+QA0Bk2Wdz3NRQAkwVE3qLMvI3sLWFRn4V0G6ZehKhtGIbbS+TVnsvIZdqd zhSZ+bzDYDhICjQQzwEGFrf8VqGKIv/azuC8J85gbEcuOlyD3BCyzTQHup2+8Rso ET3t9XU1Q46Qov2Qq5KNmJbkOIpaCUo/buFdja/uXkn65zLuaLNnLStUT0nr0cuM jVibij/zrnFbyOknqs367ELwc7OzhQdT -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:27 2025 by rpki-client