$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json) Hash identifier: mF8q0O1JH5LhNkOn+YGtsyRNGTDNizEyOXhUhsYekiI= Subject key identifier: 23:1D:86:4F:BA:D6:2B:FD:E8:06:B5:71:83:B9:FF:DB:CB:33:21:E7 Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Certificate serial: 07C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft Manifest number: 07C2 Signing time: Sat 18 Oct 2025 22:33:10 +0000 Manifest this update: Sat 18 Oct 2025 22:33:09 +0000 Manifest next update: Sat 25 Oct 2025 22:33:09 +0000 Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: MKDkidqRyiyBXCabJXcJa6kplOzIs8x9qYn8/NItnfY=) 2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: +QmSQmsTCCd4yyTjh5mf70wyqAWPCaGTrX6lQ4meIO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Validity Not Before: Oct 18 22:33:09 2025 GMT Not After : Oct 25 22:33:09 2025 GMT Subject: CN=68f415a5-8669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:89:84:63:3f:0b:89:af:55:e0:7d:25:27: 6b:40:52:0d:04:a4:df:94:70:37:4d:a6:fe:c4:5e: 58:36:82:57:6e:b9:84:3e:15:1a:c6:da:7f:cf:3b: d6:12:25:04:5e:11:bb:59:22:fd:99:b8:f4:eb:2b: 4d:9f:b3:aa:29:2f:33:f3:2d:bc:26:0c:b9:e5:13: 84:c7:76:f5:05:1b:27:99:dc:d8:28:c3:89:d0:f0: 9f:15:b4:f2:ec:2b:61:56:f6:7f:4e:55:6b:a8:35: c1:6d:b8:18:a9:90:e9:20:8a:e2:15:ab:de:20:42: 15:2d:07:b5:74:b6:b9:65:2c:5a:92:26:74:1b:b4: f5:c1:ff:90:70:21:a4:0e:e9:60:ab:1f:23:4f:51: ba:c3:2d:63:90:57:23:79:48:85:a3:93:34:4e:da: fe:1c:0e:5c:f9:56:99:a3:f7:29:51:74:a4:c4:20: 08:da:cb:eb:1e:5a:42:f7:d7:57:dc:e6:7c:3f:8a: b5:0f:6b:5e:b2:03:cf:75:90:8c:e8:4f:28:43:32: d4:e4:6f:0a:7e:7e:26:46:48:b4:57:b9:df:cd:e7: 6a:0e:31:cd:ee:e3:1a:44:29:30:d4:b7:e6:1f:c3: 02:c3:98:4b:24:22:26:7d:45:a7:da:a0:b3:55:1d: 04:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:86:4F:BA:D6:2B:FD:E8:06:B5:71:83:B9:FF:DB:CB:33:21:E7 X509v3 Authority Key Identifier: keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:bd:5e:6e:27:d9:2d:8a:1c:1d:78:47:d9:12:de:a7:a6:74: ef:19:18:66:5e:2e:72:78:68:f2:f1:58:1a:39:4a:d2:e7:a5: be:f1:4e:df:58:2a:18:32:5a:ea:54:2a:81:f3:5d:04:b2:b2: 47:be:44:b0:b6:52:ce:ed:c5:da:e6:f0:18:1a:a0:e2:f6:c0: fd:8a:94:a4:f4:e7:8b:ed:b4:70:ee:50:77:4b:e0:7e:b2:5f: 43:c3:03:f5:fb:5d:5a:97:ea:cd:d6:52:18:1a:27:58:97:53: 2a:f8:4a:e6:95:61:77:fc:e9:24:32:b4:2f:9c:ef:ba:67:00: 1b:68:d8:11:9b:2b:6d:56:1b:5a:2c:ae:1a:86:68:39:eb:8c: a7:c4:4d:9d:eb:af:69:a8:ab:04:da:15:d3:a1:fc:fa:b0:d1: 56:dc:9f:2c:e8:91:83:a4:9c:d1:06:b1:15:e7:bd:69:4f:b4: b7:e1:dc:ed:ec:b7:8c:3f:00:a0:08:ac:2f:fb:33:67:e4:c8: 6e:ff:9a:e0:b5:9d:1e:d3:44:37:60:da:c3:a1:25:7c:fc:da: c2:5d:51:1c:b3:c2:bb:f9:71:fd:9f:b9:bc:8d:41:7c:f5:c7: 55:1f:7d:0f:79:a2:75:08:9a:b8:89:4d:04:79:0c:37:c1:6e: e3:de:7c:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy MUM0OTcwQ0IwHhcNMjUxMDE4MjIzMzA5WhcNMjUxMDI1MjIzMzA5WjAYMRYwFAYD VQQDEw02OGY0MTVhNS04NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHiJhGM/C4mvVeB9JSdrQFINBKTflHA3Tab+xF5YNoJXbrmEPhUaxtp/zzvW EiUEXhG7WSL9mbj06ytNn7OqKS8z8y28Jgy55ROEx3b1BRsnmdzYKMOJ0PCfFbTy 7CthVvZ/TlVrqDXBbbgYqZDpIIriFaveIEIVLQe1dLa5ZSxakiZ0G7T1wf+QcCGk Dulgqx8jT1G6wy1jkFcjeUiFo5M0Ttr+HA5c+VaZo/cpUXSkxCAI2svrHlpC99dX 3OZ8P4q1D2tesgPPdZCM6E8oQzLU5G8Kfn4mRki0V7nfzedqDjHN7uMaRCkw1Lfm H8MCw5hLJCImfUWn2qCzVR0E8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMdhk+6 1iv96Aa1cYO5/9vLMyHnMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXvV5uJ9ktihwdeEfZEt6npnTvGRhmXi5yeGjy8VgaOUrS56W+8U7f WCoYMlrqVCqB810EsrJHvkSwtlLO7cXa5vAYGqDi9sD9ipSk9OeL7bRw7lB3S+B+ sl9DwwP1+11al+rN1lIYGidYl1Mq+ErmlWF3/OkkMrQvnO+6ZwAbaNgRmyttVhta LK4ahmg564ynxE2d669pqKsE2hXTofz6sNFW3J8s6JGDpJzRBrEV571pT7S34dzt 7LeMPwCgCKwv+zNn5Mhu/5rgtZ0e00Q3YNrDoSV8/NrCXVEcs8K7+XH9n7m8jUF8 9cdVH30PeaJ1CJq4iU0EeQw3wW7j3nzZ -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:18 2025 by rpki-client