$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: wSMQgcz9CCR6kt/i2Oez1c+t9CrqpLa7IgV0Ek9R63Y= Subject key identifier: 5C:FB:B4:7D:8A:84:0E:A9:7C:46:D5:82:87:9D:EA:B4:26:70:0E:D7 Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 014B Signing time: Sun 19 Oct 2025 07:04:24 +0000 Manifest this update: Sun 19 Oct 2025 07:04:23 +0000 Manifest next update: Sun 26 Oct 2025 07:04:23 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: R1vzci4t/Gp1uFlE7pB3tA8jK0MNe97g9DoAeJHSkXU=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: Oct 19 07:04:23 2025 GMT Not After : Oct 26 07:04:23 2025 GMT Subject: CN=68f48d78-1537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:25:cb:0b:e4:63:0a:eb:68:db:80:a7:7c: 39:1c:9c:36:9d:0a:be:31:f7:dd:5c:61:bf:85:f2: fc:e3:31:78:94:d2:49:dc:50:4f:04:9e:80:d6:75: 4d:3e:a1:e2:f9:ea:fa:13:4d:51:0d:c2:66:3e:61: b4:05:ac:29:8f:69:67:87:59:86:40:5d:79:2e:e1: be:91:84:62:40:dc:97:38:7c:b8:b5:92:96:91:0f: 2c:38:2d:84:5b:71:a3:97:35:56:cb:44:60:c1:77: 91:dc:c0:21:40:39:9c:e3:19:f7:f7:cc:84:97:05: 07:4a:0a:f3:47:4c:d0:6e:5a:6a:4d:b2:4b:77:8a: 46:4d:70:85:26:83:28:bb:f8:11:8e:71:0b:9e:fe: 63:f2:b6:a8:bd:71:8b:0f:16:5d:f7:26:fb:d2:ff: 7a:50:3d:75:86:f8:b5:d0:6f:31:b1:92:02:24:42: 07:4e:a8:c1:de:e1:bc:05:42:ae:00:58:93:17:8f: 20:5e:1a:65:21:ca:53:ca:a6:7c:ee:1f:34:32:4f: 66:fe:ec:14:bf:63:5c:31:7e:a0:89:bf:d9:0c:f8: 15:d5:60:5a:27:80:d8:8c:fd:37:ff:32:aa:c7:ae: 52:87:a8:f4:33:fc:b8:69:81:9c:ec:67:6a:8a:07: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FB:B4:7D:8A:84:0E:A9:7C:46:D5:82:87:9D:EA:B4:26:70:0E:D7 X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:24:69:f2:d1:97:94:af:c0:cb:1a:3a:f7:27:51:78:15:7b: f6:15:65:e3:00:a6:45:c9:4b:8a:57:5b:28:c1:b4:96:48:6f: 98:3c:a4:c5:a4:48:00:89:9b:9c:3e:00:63:a2:3d:ba:17:e4: d3:a1:7c:36:f9:58:45:17:3d:99:47:e3:39:e8:de:d2:82:dc: 06:ea:ae:b5:22:4a:e6:15:0b:cd:36:b3:66:70:52:d4:04:7e: ef:92:b8:6f:2b:4e:b1:7f:76:07:95:e6:f6:04:f5:11:83:fc: 4e:7a:6f:a2:cc:83:e2:92:8a:61:1f:ce:76:0a:c3:15:04:dd: 43:5b:4a:84:36:a3:c8:d2:3b:64:d8:4b:21:c4:ae:97:a8:2c: ee:37:21:47:07:a3:0b:5a:d2:bc:c7:f0:4e:7e:bd:cc:b7:17: 9d:80:c5:b8:08:ad:b0:0b:aa:17:84:4e:8b:56:a1:b0:b3:77: c6:d6:06:5b:46:1f:be:f2:cb:6b:07:cf:e6:07:a1:ab:84:d5: d4:ca:ee:e0:f4:f5:71:30:b9:18:67:7e:94:7e:31:0e:b9:9e: b7:d9:6e:32:27:4d:b8:48:65:e5:b8:55:a6:55:a6:1a:2c:24: 53:b1:45:af:1a:ba:df:e9:08:fb:c4:b5:36:51:1b:7a:11:0d: 12:b3:35:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjUxMDE5MDcwNDIzWhcNMjUxMDI2MDcwNDIzWjAYMRYwFAYD VQQDEw02OGY0OGQ3OC0xNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF4lywvkYwrraNuAp3w5HJw2nQq+MffdXGG/hfL84zF4lNJJ3FBPBJ6A1nVN PqHi+er6E01RDcJmPmG0Bawpj2lnh1mGQF15LuG+kYRiQNyXOHy4tZKWkQ8sOC2E W3GjlzVWy0RgwXeR3MAhQDmc4xn398yElwUHSgrzR0zQblpqTbJLd4pGTXCFJoMo u/gRjnELnv5j8raovXGLDxZd9yb70v96UD11hvi10G8xsZICJEIHTqjB3uG8BUKu AFiTF48gXhplIcpTyqZ87h80Mk9m/uwUv2NcMX6gib/ZDPgV1WBaJ4DYjP03/zKq x65Sh6j0M/y4aYGc7Gdqigcj3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz7tH2K hA6pfEbVgoed6rQmcA7XMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnJGny0ZeUr8DLGjr3J1F4FXv2FWXjAKZFyUuKV1sowbSWSG+YPKTF pEgAiZucPgBjoj26F+TToXw2+VhFFz2ZR+M56N7SgtwG6q61IkrmFQvNNrNmcFLU BH7vkrhvK06xf3YHleb2BPURg/xOem+izIPikophH852CsMVBN1DW0qENqPI0jtk 2EshxK6XqCzuNyFHB6MLWtK8x/BOfr3MtxedgMW4CK2wC6oXhE6LVqGws3fG1gZb Rh++8strB8/mB6GrhNXUyu7g9PVxMLkYZ36UfjEOuZ632W4yJ024SGXluFWmVaYa LCRTsUWvGrrf6Qj7xLU2URt6EQ0SszWd -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:09 2025 by rpki-client