$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json) Hash identifier: j0UTU9j/3m+5EbKMMsOKU8LCNG94m0rJJ37ygXS4n9I= Subject key identifier: 93:74:FF:6E:A2:DD:31:62:5E:6E:3F:CB:A3:0E:C9:D4:4B:74:5E:60 Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 095B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft Manifest number: 0952 Signing time: Sat 18 Oct 2025 21:13:45 +0000 Manifest this update: Sat 18 Oct 2025 21:13:44 +0000 Manifest next update: Sat 25 Oct 2025 21:13:44 +0000 Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: EAM/nSFFjiXwDrmNVaxwmZ/lnr7KcUGtfXlgiAEwdxg=) 2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: 9fYoRLuvAE3GnGPowVCGSoqu6QzF0dUDca3PyP5zjdg=) 3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Oct 18 21:13:44 2025 GMT Not After : Oct 25 21:13:44 2025 GMT Subject: CN=68f40308-456a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:09:86:7b:0f:3f:ef:a2:d5:98:4e:47:e4:27: 1e:22:c7:09:ee:d9:47:0e:f6:f1:7a:19:4a:04:ae: 55:23:4c:73:c4:41:fe:79:3c:c0:50:8a:a5:3f:77: 38:0b:41:34:1f:18:a6:f6:a9:dc:d1:b6:6d:0a:14: 08:36:da:30:e6:93:6f:54:dd:77:00:8d:ac:1c:c7: 17:13:ba:81:98:1f:2d:f1:b1:7c:8f:83:78:00:68: 7b:c1:85:ee:ee:cc:94:31:be:f0:77:ea:01:1d:b5: fe:7f:fe:77:87:9b:59:0c:45:c5:60:3b:39:3e:04: 0e:e6:04:ce:31:f3:1e:e8:71:d9:85:82:f9:35:05: c3:43:56:6e:69:17:1f:0c:d2:c0:2d:fa:0a:ae:35: 29:43:11:77:0f:ee:5b:12:12:1f:34:5c:e8:d0:e7: 22:22:4c:77:d6:43:c5:91:c5:22:be:db:25:e2:6b: 40:ad:d4:af:3d:1e:d6:2a:cb:f1:99:58:ee:0a:11: 4a:49:b9:86:a6:d8:00:ff:10:b9:13:a0:18:78:4e: 55:2e:be:b0:0c:f7:23:9e:ab:6f:e0:ed:d9:1f:67: 03:9d:51:bc:10:62:e4:a8:83:3f:6e:6e:88:b2:f0: f7:75:04:31:45:b2:a8:72:57:95:50:a9:ce:ea:3b: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:74:FF:6E:A2:DD:31:62:5E:6E:3F:CB:A3:0E:C9:D4:4B:74:5E:60 X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:77:53:41:ac:6b:d4:fb:55:b1:07:f4:76:ac:c7:02:89:32: 1e:90:14:85:1d:d4:6c:47:22:07:72:ed:96:d0:b9:26:71:36: 4e:02:7b:92:d2:a2:09:bf:cb:0f:a1:e7:fe:4f:9f:eb:6a:cf: f8:f3:ce:1c:b7:45:97:59:ad:b8:0d:56:d5:3b:6e:1d:c9:3c: af:f6:b3:e1:a6:4f:0a:ad:25:a0:f6:e0:bc:5d:95:f1:a1:6e: d6:f8:17:50:26:48:ee:4b:8c:7f:4e:b4:fd:b5:f4:62:3c:aa: 68:34:68:8c:ee:3f:fe:29:9b:7b:a9:9c:41:fa:3e:8e:0e:6d: 9d:04:57:58:d1:b1:f7:46:11:8a:7e:65:1c:3c:19:a3:d6:7a: a7:b1:fa:95:0a:74:96:80:82:44:90:4a:e2:50:f3:9e:4a:5f: e2:99:2f:f9:86:01:0d:16:fb:0b:8c:fa:df:d5:f1:8c:48:73: c8:66:83:53:ee:8a:e0:33:00:57:64:0b:13:11:a9:85:fd:78: 99:02:b5:de:82:b4:6d:b6:91:96:64:d0:4d:19:93:9a:80:19: 0a:72:3c:98:2b:e0:db:f6:68:ab:9a:f0:31:dd:62:5d:9c:3f: 24:10:ea:15:f5:30:4b:4c:6f:bd:77:dc:23:1b:3d:f8:9f:f9: 6b:87:2b:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjUxMDE4MjExMzQ0WhcNMjUxMDI1MjExMzQ0WjAYMRYwFAYD VQQDEw02OGY0MDMwOC00NTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gmGew8/76LVmE5H5CceIscJ7tlHDvbxehlKBK5VI0xzxEH+eTzAUIqlP3c4 C0E0Hxim9qnc0bZtChQINtow5pNvVN13AI2sHMcXE7qBmB8t8bF8j4N4AGh7wYXu 7syUMb7wd+oBHbX+f/53h5tZDEXFYDs5PgQO5gTOMfMe6HHZhYL5NQXDQ1ZuaRcf DNLALfoKrjUpQxF3D+5bEhIfNFzo0OciIkx31kPFkcUivtsl4mtArdSvPR7WKsvx mVjuChFKSbmGptgA/xC5E6AYeE5VLr6wDPcjnqtv4O3ZH2cDnVG8EGLkqIM/bm6I svD3dQQxRbKocleVUKnO6jselQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN0/26i 3TFiXm4/y6MOydRLdF5gMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXd1NBrGvU+1WxB/R2rMcCiTIekBSFHdRsRyIHcu2W0LkmcTZOAnuS 0qIJv8sPoef+T5/ras/4884ct0WXWa24DVbVO24dyTyv9rPhpk8KrSWg9uC8XZXx oW7W+BdQJkjuS4x/TrT9tfRiPKpoNGiM7j/+KZt7qZxB+j6ODm2dBFdY0bH3RhGK fmUcPBmj1nqnsfqVCnSWgIJEkEriUPOeSl/imS/5hgENFvsLjPrf1fGMSHPIZoNT 7orgMwBXZAsTEamF/XiZArXegrRttpGWZNBNGZOagBkKcjyYK+Db9mirmvAx3WJd nD8kEOoV9TBLTG+9d9wjGz34n/lrhytS -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:52 2025 by rpki-client