$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: SWoSi7gcMgbFtqaAvQpsL9xq9Fa0g0k43pgsR6IMy5k= Subject key identifier: A6:7B:9A:CC:6F:27:F4:9E:30:C2:48:C1:2C:B4:5E:55:3A:2E:88:6D Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 0307 Signing time: Sun 19 Oct 2025 03:16:33 +0000 Manifest this update: Sun 19 Oct 2025 03:16:33 +0000 Manifest next update: Sun 26 Oct 2025 03:16:33 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: 7TgpLEG/mxjtd2PTOTuWT8xPi/k1nSTJXtd3hzuhzX4=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: dMqJTsYzp1pmPIaM1/eJLOhl+l3EGAIHqHSSCk8rEN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: Oct 19 03:16:33 2025 GMT Not After : Oct 26 03:16:33 2025 GMT Subject: CN=68f45811-2484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:4e:4a:3a:70:4b:f5:ea:b9:0c:22:bd:97: 9f:17:72:49:41:05:80:91:70:96:97:ae:fd:69:28: 93:16:2e:a8:fb:0e:95:f9:02:d8:43:b7:64:9a:2e: 7c:46:6c:d7:b1:2e:a0:14:23:69:b5:30:0c:ec:83: 12:7f:7d:2b:07:aa:eb:7d:8f:60:1d:5a:fe:81:f9: b6:d9:ef:29:94:77:7c:0f:cf:04:3f:a7:96:54:c2: d8:98:42:b3:e3:87:6b:e8:9b:cb:09:0d:ca:ba:d9: 26:f4:22:b7:c4:f9:24:8f:b2:da:58:66:6f:a3:94: ea:5d:74:f4:20:72:22:96:a0:fb:34:37:8c:b8:05: cc:15:e4:da:a7:e7:5a:f9:bd:83:cd:73:d4:49:5a: bd:94:c0:16:f6:f1:34:0e:57:76:c0:51:f9:de:45: 6c:2c:3f:e0:8f:b6:9c:1b:15:00:05:41:0b:43:60: bb:fa:0c:95:c5:6c:14:8a:c8:5f:4e:5d:da:0a:51: 4d:03:a6:87:15:93:5c:94:74:d7:49:2f:7f:e5:a9: dd:5f:7f:7a:80:19:11:32:cd:82:cb:2f:c5:90:c9: 7a:0f:b8:dc:db:48:97:20:f5:26:52:ce:10:5c:2f: 88:aa:eb:83:c8:b7:b0:5a:bb:32:6f:6e:06:89:88: 67:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:9A:CC:6F:27:F4:9E:30:C2:48:C1:2C:B4:5E:55:3A:2E:88:6D X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:f8:ef:e5:d8:18:f3:26:20:86:6d:71:9a:5b:f7:5b:4e: d3:d5:1a:23:37:63:a0:63:6a:9e:25:22:d1:58:0b:75:ce:a8: b8:f4:3f:f1:aa:b1:76:a0:b4:99:4b:ee:46:2b:22:cb:2e:d0: f1:2d:4c:3d:56:2c:d3:e7:8c:bf:19:4d:ce:7e:0f:f4:88:c8: 19:58:15:d8:27:1b:1a:fc:bd:84:f8:7d:27:ed:74:21:83:d4: 72:cb:32:90:e5:18:94:14:7d:67:92:93:68:ee:31:0d:4f:94: f7:a6:dc:fc:ad:68:38:43:a3:9e:b8:97:2b:16:98:0d:cb:3a: ec:71:a7:e2:8a:34:31:ab:e8:17:56:b5:2e:47:fb:33:59:ea: fa:35:5a:8e:35:27:01:71:a5:2d:25:71:6c:32:a3:ae:7f:ef: 0e:ee:f3:86:03:33:a5:65:d9:f6:02:93:5c:5d:f8:d7:3e:07: 03:57:37:c4:1d:63:b5:1c:86:46:3b:3b:92:c9:25:84:15:8d: 43:46:85:4f:27:7c:a4:74:c3:de:9a:40:97:e9:80:fe:97:f6: bb:55:43:86:76:a7:60:e1:23:cb:7f:12:6a:fe:32:1d:e5:ea: 78:26:82:a7:9e:59:db:7e:59:67:38:e5:37:06:c3:31:3c:2b: 55:7f:85:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjUxMDE5MDMxNjMzWhcNMjUxMDI2MDMxNjMzWjAYMRYwFAYD VQQDEw02OGY0NTgxMS0yNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+hOSjpwS/XquQwivZefF3JJQQWAkXCWl679aSiTFi6o+w6V+QLYQ7dkmi58 RmzXsS6gFCNptTAM7IMSf30rB6rrfY9gHVr+gfm22e8plHd8D88EP6eWVMLYmEKz 44dr6JvLCQ3Kutkm9CK3xPkkj7LaWGZvo5TqXXT0IHIilqD7NDeMuAXMFeTap+da +b2DzXPUSVq9lMAW9vE0Dld2wFH53kVsLD/gj7acGxUABUELQ2C7+gyVxWwUishf Tl3aClFNA6aHFZNclHTXSS9/5andX396gBkRMs2Cyy/FkMl6D7jc20iXIPUmUs4Q XC+IquuDyLewWrsyb24GiYhnqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ7msxv J/SeMMJIwSy0XlU6LohtMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSJPjv5dgY8yYghm1xmlv3W07T1RojN2OgY2qeJSLRWAt1zqi49D/x qrF2oLSZS+5GKyLLLtDxLUw9VizT54y/GU3Ofg/0iMgZWBXYJxsa/L2E+H0n7XQh g9RyyzKQ5RiUFH1nkpNo7jENT5T3ptz8rWg4Q6OeuJcrFpgNyzrscafiijQxq+gX VrUuR/szWer6NVqONScBcaUtJXFsMqOuf+8O7vOGAzOlZdn2ApNcXfjXPgcDVzfE HWO1HIZGOzuSySWEFY1DRoVPJ3ykdMPemkCX6YD+l/a7VUOGdqdg4SPLfxJq/jId 5ep4JoKnnlnbfllnOOU3BsMxPCtVf4Vl -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:19 2025 by rpki-client