$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: tPPjbWfuNibjCc7R+YGjogYnQUbI7fe4Oe78RxK0A5w= Subject key identifier: 1A:52:BA:D7:A8:C7:90:2F:9F:47:59:D6:D7:9F:CE:5D:16:F7:0D:38 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 059F Signing time: Sun 19 Oct 2025 00:50:41 +0000 Manifest this update: Sun 19 Oct 2025 00:50:41 +0000 Manifest next update: Sun 26 Oct 2025 00:50:41 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: A+vxzRvaX+3JCmAEH8wvK6GcRD+raC8ti+oFYDfXk4I=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: jxQWNR1P8sYKVza0W/49c3uTybsGhMQmKrsxrcNc/xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Oct 19 00:50:41 2025 GMT Not After : Oct 26 00:50:41 2025 GMT Subject: CN=68f435e1-f193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:44:9c:e1:24:4e:5f:83:5d:57:75:9f:ff: ba:6e:6c:89:a6:79:22:6d:c6:54:9f:ed:de:63:6e: ca:4b:eb:5d:26:7d:44:b5:09:d8:67:a3:4d:34:90: c9:35:31:16:85:39:42:2d:d3:24:cd:f8:e8:87:01: 77:ef:e7:d0:c0:f5:f9:ed:e9:6e:d1:fc:82:22:a5: fc:26:19:88:47:3b:0c:3f:a9:46:db:4d:3f:80:de: 9e:65:43:a7:f9:d5:17:e0:fb:1a:9f:1c:57:c5:18: 43:5c:2c:d6:dd:e6:59:1f:f0:67:a3:32:9b:25:03: 61:36:3d:39:d5:cf:e9:68:70:e7:2c:4d:72:fd:11: e6:a3:5d:13:6f:c3:3a:c9:12:51:98:70:1d:9c:d6: 3a:25:8f:76:0c:2a:b7:0c:ac:87:15:c0:30:a9:90: 4d:31:50:48:de:c0:f5:00:3d:e6:46:d5:ca:03:45: 49:e3:8d:39:43:a1:b3:c7:37:1a:7a:89:cd:a2:8e: 02:e6:ed:bf:40:46:a2:4e:74:00:ac:88:e8:3f:fa: 24:6d:11:d1:ba:ce:cf:a9:75:c8:f3:0a:1f:32:e0: f0:32:5f:0d:26:3a:bb:a6:ee:89:a8:e9:ed:ed:d6: 23:da:75:c8:ed:ed:d4:96:d6:a3:51:71:ba:ab:0d: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:BA:D7:A8:C7:90:2F:9F:47:59:D6:D7:9F:CE:5D:16:F7:0D:38 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b8:3f:43:c1:49:e1:46:98:23:93:dd:bf:82:3a:ef:db:e0: d6:dc:f1:ff:e9:89:85:c1:8e:cc:e6:e2:6b:3e:10:1a:04:62: 60:09:d5:fd:b7:52:81:88:bc:fe:9c:e1:d2:27:da:d3:b3:3a: d9:18:12:d8:94:f2:c0:8a:4b:fc:d4:c0:57:77:3a:50:a9:ec: 5a:60:38:61:e6:bf:cf:e0:36:9a:40:fc:14:f3:a0:a7:2d:d5: b9:b5:1e:89:0c:4e:0a:31:7f:a4:05:0e:d6:c7:f1:f1:a7:78: 42:11:08:2b:4c:9d:50:3a:b0:5f:11:01:0a:8a:bb:29:d2:51: 69:87:7f:be:28:f4:5f:1b:42:37:b8:a9:3c:57:fe:1f:d8:62: cc:01:5b:9c:6a:23:1a:54:b0:0b:f9:d6:f7:50:ca:27:57:6d: a7:7f:89:c0:a3:1a:39:e6:0b:c5:f4:4f:6e:ff:1e:ae:8a:e1: 31:fb:b8:a4:cd:d9:c0:6b:b6:9a:16:91:98:44:e7:3a:3c:ce: d6:f2:71:78:78:2e:7a:64:9e:97:18:9f:01:06:f4:60:e3:a2: df:59:88:2d:23:72:f2:7d:44:63:da:3f:1f:91:ad:22:eb:f7: 15:36:23:2e:93:b1:c4:10:26:6b:51:03:91:cf:35:88:fa:c8: 19:d8:64:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUxMDE5MDA1MDQxWhcNMjUxMDI2MDA1MDQxWjAYMRYwFAYD VQQDEw02OGY0MzVlMS1mMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnNEnOEkTl+DXVd1n/+6bmyJpnkibcZUn+3eY27KS+tdJn1EtQnYZ6NNNJDJ NTEWhTlCLdMkzfjohwF37+fQwPX57elu0fyCIqX8JhmIRzsMP6lG200/gN6eZUOn +dUX4PsanxxXxRhDXCzW3eZZH/BnozKbJQNhNj051c/paHDnLE1y/RHmo10Tb8M6 yRJRmHAdnNY6JY92DCq3DKyHFcAwqZBNMVBI3sD1AD3mRtXKA0VJ4405Q6Gzxzca eonNoo4C5u2/QEaiTnQArIjoP/okbRHRus7PqXXI8wofMuDwMl8NJjq7pu6JqOnt 7dYj2nXI7e3UltajUXG6qw3uQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpSuteo x5Avn0dZ1tefzl0W9w04MB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQuD9DwUnhRpgjk92/gjrv2+DW3PH/6YmFwY7M5uJrPhAaBGJgCdX9 t1KBiLz+nOHSJ9rTszrZGBLYlPLAikv81MBXdzpQqexaYDhh5r/P4DaaQPwU86Cn LdW5tR6JDE4KMX+kBQ7Wx/Hxp3hCEQgrTJ1QOrBfEQEKirsp0lFph3++KPRfG0I3 uKk8V/4f2GLMAVucaiMaVLAL+db3UMonV22nf4nAoxo55gvF9E9u/x6uiuEx+7ik zdnAa7aaFpGYROc6PM7W8nF4eC56ZJ6XGJ8BBvRg46LfWYgtI3LyfURj2j8fka0i 6/cVNiMuk7HEECZrUQORzzWI+sgZ2GR2 -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:22 2025 by rpki-client