$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: B9a+D/XnhhNoS/l1MML910ix+lz+wcJQ5V1KkRLsJDc= Subject key identifier: CC:DB:CE:0D:86:19:8D:74:5B:8F:D1:6E:CB:A2:B0:8A:22:C1:7F:62 Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 2493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 2467 Signing time: Sat 18 Oct 2025 16:02:40 +0000 Manifest this update: Sat 18 Oct 2025 16:02:39 +0000 Manifest next update: Sat 25 Oct 2025 16:02:39 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: 4wk4amugjbBCiy4npswK38VNKJbx8yOQlspW7Pd3fLw=) 2: E8976FF0928211EF8D2A551EC4F9AE02.roa (hash: KaXP6yLqLy6u16YQgUTkal+kksEzHmImjnWX4XyyF9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9363 (0x2493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: Oct 18 16:02:39 2025 GMT Not After : Oct 25 16:02:39 2025 GMT Subject: CN=68f3ba20-95bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:d4:43:ca:c1:99:52:23:0f:55:30:72:7c: c4:b0:b9:08:c0:0b:73:f2:4e:8f:58:8f:bc:10:07: e5:af:ad:fc:2c:d5:65:9d:ad:ee:4d:e9:74:bf:43: 29:ba:f5:57:00:79:59:2f:1e:fc:57:63:9a:cd:8d: 89:9d:de:d4:fd:83:a4:16:25:3a:e8:d7:08:22:c5: 3f:d2:cf:fa:6d:36:e3:39:8c:ad:97:e0:a8:0c:5b: 36:d2:33:3c:02:52:8a:e0:26:ea:d0:43:bb:8f:63: 56:01:f3:e1:d3:19:97:5c:fd:ad:b2:03:64:3c:c9: d1:50:cb:f0:73:98:70:ce:b6:16:ae:d0:00:49:63: 32:13:48:b8:46:a6:1b:1f:fa:f8:90:0b:2b:1c:9e: 02:de:d2:41:13:5a:fc:a1:d4:4d:dd:49:19:55:45: 7a:ce:14:64:d6:13:22:df:8d:bc:e5:9d:78:20:5e: ed:e1:a8:29:cb:75:7b:b3:da:8e:d5:67:bb:8b:a2: 6d:ea:08:34:7c:15:72:f8:bc:d5:1c:37:b6:9f:5c: 4d:87:e2:4e:b8:6d:20:97:4f:d7:83:f6:69:3e:e8: 7d:73:4f:03:3e:6d:a2:63:b9:6a:98:d1:ef:7d:d5: 0c:d6:d0:7c:a3:85:aa:b3:1b:c6:bf:eb:d5:72:36: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DB:CE:0D:86:19:8D:74:5B:8F:D1:6E:CB:A2:B0:8A:22:C1:7F:62 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:36:06:de:5a:76:47:0f:77:48:0e:6b:14:8d:b4:34:8c:eb: 2b:34:e4:a7:16:bc:4a:ce:62:d1:29:35:d4:45:3e:8a:bf:0e: d2:61:9e:36:da:52:b0:f5:51:ec:da:2e:f1:d7:af:83:ed:f9: 7e:9b:99:9a:7f:23:70:1a:85:a6:63:1b:11:47:2e:b7:ba:29: cc:69:5a:ee:cb:df:a5:69:c8:70:12:1d:a6:71:1f:54:2d:fd: 71:f0:0a:63:df:8f:3b:ec:29:2a:a7:59:d5:a7:c5:ce:03:8f: 24:39:7d:43:32:b9:fb:d1:6f:f3:25:cb:2e:ca:8e:5b:6e:01: d0:96:0e:60:35:6b:c3:a8:e0:b4:11:c3:77:2a:95:88:13:dd: 88:32:d0:56:34:92:d1:a2:f2:43:da:40:e2:3a:2e:4b:00:98: 49:c6:4e:e2:76:f7:e8:a5:3c:d9:9c:76:7f:f2:af:a6:73:36: 7f:d5:cc:a6:a1:29:0f:db:99:5c:b9:17:8c:51:02:da:63:3f: 4d:70:11:0e:4f:6f:32:e7:6c:55:43:78:ae:d5:f3:38:31:f5: 30:2d:79:1a:bc:60:a1:92:1c:b8:11:9d:2b:a1:ed:e1:69:2a: b7:6b:99:33:8a:ee:a6:96:aa:23:6f:5d:23:26:18:aa:19:cb: 06:5b:7d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjUxMDE4MTYwMjM5WhcNMjUxMDI1MTYwMjM5WjAYMRYwFAYD VQQDEw02OGYzYmEyMC05NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZLUQ8rBmVIjD1UwcnzEsLkIwAtz8k6PWI+8EAflr638LNVlna3uTel0v0Mp uvVXAHlZLx78V2OazY2Jnd7U/YOkFiU66NcIIsU/0s/6bTbjOYytl+CoDFs20jM8 AlKK4Cbq0EO7j2NWAfPh0xmXXP2tsgNkPMnRUMvwc5hwzrYWrtAASWMyE0i4RqYb H/r4kAsrHJ4C3tJBE1r8odRN3UkZVUV6zhRk1hMi34285Z14IF7t4agpy3V7s9qO 1We7i6Jt6gg0fBVy+LzVHDe2n1xNh+JOuG0gl0/Xg/ZpPuh9c08DPm2iY7lqmNHv fdUM1tB8o4WqsxvGv+vVcjZ2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzbzg2G GY10W4/RbsuisIoiwX9iMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/NgbeWnZHD3dIDmsUjbQ0jOsrNOSnFrxKzmLRKTXURT6Kvw7SYZ42 2lKw9VHs2i7x16+D7fl+m5mafyNwGoWmYxsRRy63uinMaVruy9+lachwEh2mcR9U Lf1x8Apj34877Ckqp1nVp8XOA48kOX1DMrn70W/zJcsuyo5bbgHQlg5gNWvDqOC0 EcN3KpWIE92IMtBWNJLRovJD2kDiOi5LAJhJxk7idvfopTzZnHZ/8q+mczZ/1cym oSkP25lcuReMUQLaYz9NcBEOT28y52xVQ3iu1fM4MfUwLXkavGChkhy4EZ0roe3h aSq3a5kziu6mlqojb10jJhiqGcsGW33F -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:11 2025 by rpki-client