$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json) Hash identifier: ipl12UrqK887YQe5bQPrQ52TRqXHVzslMJ63NJBiyHc= Subject key identifier: 54:31:9C:02:9C:73:21:65:8E:5D:06:40:98:F7:73:90:35:7B:C2:73 Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft Manifest number: 24 Signing time: Sun 19 Oct 2025 11:17:44 +0000 Manifest this update: Sun 19 Oct 2025 11:17:44 +0000 Manifest next update: Sun 26 Oct 2025 11:17:44 +0000 Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: IohTL1H34RrFbdU0VCIiiudWr1HzxqDk+95CDywYzsQ=) 2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: jTESa3U73YRI0+Qom5Rj/Y57jrY10Y9T/v9pDSvTy48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Validity Not Before: Oct 19 11:17:44 2025 GMT Not After : Oct 26 11:17:44 2025 GMT Subject: CN=68f4c8d8-77f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:22:b4:9e:a1:d5:be:e9:c8:87:e5:0c:df: 97:10:c1:85:c3:a4:3a:1d:a2:0b:a3:64:74:b1:06: e6:a2:af:10:80:68:66:93:c1:61:6d:64:06:ba:95: d6:56:36:a0:8e:5f:30:18:60:78:f8:6c:2b:b0:64: 8c:ca:51:0d:a1:6c:d6:4b:c7:b0:58:c6:1e:79:fb: 48:7d:6d:f1:93:65:f2:b5:c9:e6:49:40:70:a9:3d: 2e:d9:59:57:e4:0f:c3:18:70:1d:e3:c6:3c:79:6d: 24:24:2e:14:c1:2d:bb:d2:29:93:1c:96:0f:8b:93: b1:60:77:c4:4b:82:ec:ef:ff:d8:3f:a5:e9:0a:07: 06:6d:d9:2a:b5:b6:c7:da:09:2d:3a:f0:a4:6e:3a: 0b:2f:ef:76:72:02:cd:db:59:b5:41:57:c2:98:06: 18:6a:db:f3:65:b8:30:71:6f:8f:93:73:71:b2:45: ff:94:36:2f:9c:e8:d7:fe:ed:d2:d0:df:06:2b:4a: c4:fc:c7:44:40:ca:0c:c9:c6:f4:07:f5:0a:e2:f9: ec:c3:c9:12:1e:5e:24:a0:ba:e0:fe:ef:ec:7d:2d: f2:67:c3:d6:d0:c7:be:86:77:cd:3c:12:50:90:6a: af:bf:7c:66:79:ac:3c:2e:6f:0a:59:c9:49:eb:04: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:31:9C:02:9C:73:21:65:8E:5D:06:40:98:F7:73:90:35:7B:C2:73 X509v3 Authority Key Identifier: keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:29:20:33:61:e3:7a:42:b9:54:65:88:43:d6:b1:dd:88:99: 8e:b2:eb:5a:f3:a4:4d:28:ba:3c:72:c7:79:d0:39:f0:c7:6a: 4a:02:cd:ac:7e:0d:c6:2b:42:dd:94:8c:ad:98:7f:25:3d:d7: e5:ec:ae:74:87:7b:72:5c:ff:82:40:32:4d:e3:56:f1:ce:81: 7a:11:ca:94:a5:ea:fc:d7:dc:82:d0:f5:3c:59:ee:0f:72:61: e2:e8:03:c0:78:7b:b1:84:c0:37:70:3c:32:f5:bc:4d:f3:24: ab:b0:de:48:a3:06:51:08:79:a5:0e:6d:d0:a1:52:97:3d:65: 7d:fa:35:c4:f9:b7:03:51:63:cb:15:4c:04:29:0f:83:6f:5b: 72:79:68:75:f2:cf:f4:16:89:b5:cd:e5:95:e7:cf:ef:c7:0b: d1:bd:ce:b1:54:c2:6a:9e:87:ae:48:50:b2:fe:ec:d9:8e:db: 30:e9:2a:87:b2:ae:cf:c9:76:ee:73:4e:e5:90:0e:7a:db:75: ed:3d:d1:da:95:0c:39:9f:91:50:87:be:c0:28:fd:91:dc:80: 23:22:68:86:fd:ed:48:36:e0:89:dc:81:a5:76:72:9d:6b:14: 41:df:69:73:59:48:e9:19:a4:c6:16:f9:27:6c:dc:3f:ae:ce: 7a:66:e2:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTAxRTExMC8GA1UEBRMoMEJCQkE0MTI0QkE0QzdDOEE3RjlEMDk3RUVFQUE5ODMy RjA5Nzk2NzAeFw0yNTEwMTkxMTE3NDRaFw0yNTEwMjYxMTE3NDRaMBgxFjAUBgNV BAMTDTY4ZjRjOGQ4LTc3ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2CiK0nqHVvunIh+UM35cQwYXDpDodogujZHSxBuairxCAaGaTwWFtZAa6ldZW NqCOXzAYYHj4bCuwZIzKUQ2hbNZLx7BYxh55+0h9bfGTZfK1yeZJQHCpPS7ZWVfk D8MYcB3jxjx5bSQkLhTBLbvSKZMclg+Lk7Fgd8RLguzv/9g/pekKBwZt2Sq1tsfa CS068KRuOgsv73ZyAs3bWbVBV8KYBhhq2/NluDBxb4+Tc3GyRf+UNi+c6Nf+7dLQ 3wYrSsT8x0RAygzJxvQH9Qri+ezDyRIeXiSguuD+7+x9LfJnw9bQx76Gd808ElCQ aq+/fGZ5rDwubwpZyUnrBN5PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVDGcApxz IWWOXQZAmPdzkDV7wnMwHwYDVR0jBBgwFoAUC7ukEkukx8in+dCX7uqpgy8JeWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5MDFFL0U2RTg4MEQ4NzhE QTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzd1a0VrdWt4OGluLWRDWDd1cXBneThKZVdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 MDFFL0U2RTg4MEQ4NzhEQTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhp bi1kQ1g3dXFwZ3k4SmVXYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACApIDNh43pCuVRliEPWsd2ImY6y61rzpE0oujxyx3nQOfDHakoCzax+ DcYrQt2UjK2YfyU91+XsrnSHe3Jc/4JAMk3jVvHOgXoRypSl6vzX3ILQ9TxZ7g9y YeLoA8B4e7GEwDdwPDL1vE3zJKuw3kijBlEIeaUObdChUpc9ZX36NcT5twNRY8sV TAQpD4NvW3J5aHXyz/QWibXN5ZXnz+/HC9G9zrFUwmqeh65IULL+7NmO2zDpKoey rs/Jdu5zTuWQDnrbde090dqVDDmfkVCHvsAo/ZHcgCMiaIb97Ug24IncgaV2cp1r FEHfaXNZSOkZpMYW+Sds3D+uznpm4us= -----END CERTIFICATE-----Generated at Mon Oct 20 11:41:25 2025 by rpki-client