$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: tQsIK7bl4gzrdEsyLvAkdJoqziPUKE3cu0ts+YILHHc= Subject key identifier: A7:77:B6:82:76:15:41:D8:E6:81:4C:F8:5E:A1:9E:E3:B6:4F:5D:A8 Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 019D Signing time: Sun 19 Oct 2025 05:57:23 +0000 Manifest this update: Sun 19 Oct 2025 05:57:23 +0000 Manifest next update: Sun 26 Oct 2025 05:57:23 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: zlF2h88dItmAdtvkZCgv2qaZfqOFhnByQ50/pYwKj4I=) 2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: tXyHZWiyLccCa4dm7RkGGfRei0ZIky7sg5whsG/aUrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Oct 19 05:57:23 2025 GMT Not After : Oct 26 05:57:23 2025 GMT Subject: CN=68f47dc3-4447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ee:21:0a:94:db:53:38:4d:36:0a:6b:c8:10: a3:fd:3e:10:de:d3:3c:79:a9:8f:08:f4:5a:3d:fe: 76:5f:e2:df:e5:cb:28:72:b4:6d:3a:05:f9:a2:f9: fd:d3:33:7b:48:c0:16:db:df:93:e4:9a:27:dc:1f: 17:74:43:ac:04:0a:c2:b5:66:7f:82:75:08:b4:b3: bf:29:ee:73:12:ba:37:01:e1:83:c2:ec:8d:c3:9d: b8:c8:0a:1c:3d:8b:7d:28:ec:66:51:f8:ba:4a:04: 4f:8a:82:50:42:a2:17:ff:48:31:62:3e:c8:ab:d5: 6f:fa:f4:d7:50:60:dd:a6:2f:00:f8:03:c4:d4:57: b8:9f:26:97:aa:77:6c:0e:20:9c:42:56:7b:bb:0b: c6:7c:05:e9:62:c9:11:8f:50:82:49:c2:52:99:e5: 68:fe:2b:c2:cb:0a:f2:64:19:7d:4c:11:ef:3f:5b: 86:07:aa:1e:7b:e1:68:33:0e:23:44:21:ee:40:5a: 41:2c:e7:56:0c:09:b9:09:7b:8b:f9:10:1c:db:f6: 73:78:c2:d3:b8:8f:e6:d0:95:86:04:30:d4:22:21: 2f:bf:0b:ec:48:cf:12:8a:5e:86:ef:55:5e:04:8e: 99:17:12:dc:87:54:b5:b0:09:d6:a5:e5:57:e8:49: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:77:B6:82:76:15:41:D8:E6:81:4C:F8:5E:A1:9E:E3:B6:4F:5D:A8 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a7:19:fe:c0:53:a0:a0:9b:32:05:1b:74:d4:fa:5a:5c:f2: 98:c3:fd:a7:96:45:f9:c1:fd:d8:00:94:28:3f:b5:0a:fa:aa: cf:f7:0e:9a:5d:bd:2f:8a:cd:11:0a:92:d5:d9:dd:8e:4a:4e: 5f:ed:52:a0:d5:28:8d:5e:70:91:46:40:8c:45:76:2c:63:0b: b9:ac:99:09:18:7b:f2:c8:14:a2:a6:ba:c4:a2:1b:6b:68:b6: da:8e:2a:7f:c0:96:70:9f:1a:b0:82:11:7d:76:dd:24:3e:c0: a1:5d:37:6e:7c:c5:0c:87:6e:09:9a:59:d0:25:27:43:70:cf: 2b:76:d0:b9:04:46:73:72:f0:a6:5d:58:54:23:50:9a:be:92: 14:ca:a7:f6:04:06:c4:0e:b1:c1:5f:f6:e3:88:df:7e:37:8d: ac:24:96:74:77:1c:29:a4:a8:29:46:ac:c6:f5:d8:4a:6a:30: 3d:51:80:de:3c:c7:34:08:d7:e9:44:61:9e:0e:b5:b8:1c:dc: 94:66:f4:84:47:36:35:90:1d:0a:5f:d0:1a:23:25:8a:79:a2: 06:b2:a4:ee:82:d9:2b:f0:82:a7:c4:4a:44:f9:0b:88:ba:0f: 6d:ca:fd:4b:16:97:38:c6:0d:63:0c:73:ef:76:16:63:b3:c4: c2:39:c1:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjUxMDE5MDU1NzIzWhcNMjUxMDI2MDU1NzIzWjAYMRYwFAYD VQQDEw02OGY0N2RjMy00NDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2e4hCpTbUzhNNgpryBCj/T4Q3tM8eamPCPRaPf52X+Lf5csocrRtOgX5ovn9 0zN7SMAW29+T5Jon3B8XdEOsBArCtWZ/gnUItLO/Ke5zEro3AeGDwuyNw524yAoc PYt9KOxmUfi6SgRPioJQQqIX/0gxYj7Iq9Vv+vTXUGDdpi8A+APE1Fe4nyaXqnds DiCcQlZ7uwvGfAXpYskRj1CCScJSmeVo/ivCywryZBl9TBHvP1uGB6oee+FoMw4j RCHuQFpBLOdWDAm5CXuL+RAc2/ZzeMLTuI/m0JWGBDDUIiEvvwvsSM8Sil6G71Ve BI6ZFxLch1S1sAnWpeVX6EmSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKd3toJ2 FUHY5oFM+F6hnuO2T12oMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOpxn+wFOgoJsyBRt01PpaXPKYw/2nlkX5wf3YAJQoP7UK+qrP9w6a Xb0vis0RCpLV2d2OSk5f7VKg1SiNXnCRRkCMRXYsYwu5rJkJGHvyyBSiprrEohtr aLbajip/wJZwnxqwghF9dt0kPsChXTdufMUMh24JmlnQJSdDcM8rdtC5BEZzcvCm XVhUI1CavpIUyqf2BAbEDrHBX/bjiN9+N42sJJZ0dxwppKgpRqzG9dhKajA9UYDe PMc0CNfpRGGeDrW4HNyUZvSERzY1kB0KX9AaIyWKeaIGsqTugtkr8IKnxEpE+QuI ug9tyv1LFpc4xg1jDHPvdhZjs8TCOcHU -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:26 2025 by rpki-client