$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: rN3OSbkeNu9ym8TUYIQ/20PLaY1tejIuXoAVNwPiAJ0= Subject key identifier: 5B:F7:A5:D2:09:FE:AA:2E:E6:B4:BF:F5:A9:3A:4A:FE:C3:C0:D6:99 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 0129 Signing time: Sun 19 Oct 2025 07:28:17 +0000 Manifest this update: Sun 19 Oct 2025 07:28:17 +0000 Manifest next update: Sun 26 Oct 2025 07:28:17 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: JoJ+Kb20F3fDFgivPFcV3UM2tebM0+W5XVDXf4ytIHM=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Oct 19 07:28:17 2025 GMT Not After : Oct 26 07:28:17 2025 GMT Subject: CN=68f49311-4f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f4:30:5e:ad:dc:91:d9:20:2e:22:9c:09:d0: 91:1e:9b:40:7b:4d:e8:58:cc:cd:63:c7:f4:e5:de: e0:35:f8:04:9a:c1:c1:a7:83:08:28:fe:c7:78:2a: ad:1a:b4:0e:86:04:b6:b5:bf:52:45:8f:e3:3d:5f: 17:55:63:1a:69:e9:bb:97:06:3e:7d:0b:2d:f9:3c: 69:39:c6:bd:27:b2:7b:34:0e:72:fa:7a:b2:42:9b: a1:e5:86:86:93:ee:09:5b:24:34:f6:45:d9:33:e3: f9:ab:e7:12:b1:77:4c:1a:af:62:4e:06:a4:b9:e3: e1:48:da:01:df:dc:7e:bf:4a:7f:bd:0d:88:de:bd: 2a:24:9a:3b:59:86:24:f5:dc:4b:b7:d9:36:49:fd: e3:e4:f4:03:5e:a3:59:35:f5:c2:3c:3d:cb:6f:ea: a8:96:93:78:38:cd:94:c6:fc:8e:6e:84:fc:4f:d6: 1e:b5:c6:39:55:e2:3c:c2:fb:ed:b0:99:c6:57:e4: 20:5b:73:f8:2c:52:36:0f:02:ec:a3:96:fb:07:37: a4:32:41:69:68:f7:13:c2:3f:5f:41:f9:bf:f4:57: 4f:7d:1e:94:4d:33:c5:ed:d5:a5:a4:c4:01:fd:89: b5:b0:1f:ef:fb:6d:2e:b7:61:b2:3d:3b:1a:dc:56: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F7:A5:D2:09:FE:AA:2E:E6:B4:BF:F5:A9:3A:4A:FE:C3:C0:D6:99 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ce:0d:82:33:99:14:b4:1d:d0:7e:9d:23:00:24:14:8a:68: c1:78:0b:7c:5e:c9:78:8d:af:e7:5a:14:45:ee:cb:08:e7:8a: 9b:15:6b:f4:c7:fb:e9:2f:11:41:9a:87:45:ed:d0:37:69:2a: 59:f2:9e:b2:13:f3:45:ae:e9:9e:2b:40:0a:93:e1:07:de:db: 54:9d:b0:4c:50:f2:d1:f3:f8:01:9c:a2:f1:90:03:24:07:f1: f0:16:e3:c4:44:dc:9d:1c:dc:65:fc:98:79:da:9f:89:b8:fb: 44:9f:d6:58:fc:07:bc:1c:90:54:68:ba:b9:6d:44:c5:5f:24: 38:5e:f4:d2:8b:89:0b:d1:c3:a8:f3:23:f2:93:37:10:96:4f: 68:c5:3c:ad:1a:8e:69:87:a0:cd:f2:7d:71:78:d7:42:52:22: 0e:07:f6:b7:1b:7c:00:0f:a3:79:62:ad:75:3e:03:b4:f1:51: cc:f2:05:3b:01:53:2d:3b:2e:04:03:bf:f1:c0:d7:1c:a7:4d: d2:d9:77:dc:8d:35:88:92:a4:98:b8:1a:63:15:a1:62:65:90: 11:dd:4c:09:f9:6b:d9:79:4c:e5:bc:0b:51:4c:88:21:14:b4: da:78:0c:28:98:7b:fa:07:63:e2:72:2a:fb:a4:a3:ea:b7:56: 6a:e3:13:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUxMDE5MDcyODE3WhcNMjUxMDI2MDcyODE3WjAYMRYwFAYD VQQDEw02OGY0OTMxMS00ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PQwXq3ckdkgLiKcCdCRHptAe03oWMzNY8f05d7gNfgEmsHBp4MIKP7HeCqt GrQOhgS2tb9SRY/jPV8XVWMaaem7lwY+fQst+TxpOca9J7J7NA5y+nqyQpuh5YaG k+4JWyQ09kXZM+P5q+cSsXdMGq9iTgakuePhSNoB39x+v0p/vQ2I3r0qJJo7WYYk 9dxLt9k2Sf3j5PQDXqNZNfXCPD3Lb+qolpN4OM2UxvyOboT8T9YetcY5VeI8wvvt sJnGV+QgW3P4LFI2DwLso5b7BzekMkFpaPcTwj9fQfm/9FdPfR6UTTPF7dWlpMQB /Ym1sB/v+20ut2GyPTsa3FZbDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv3pdIJ /qou5rS/9ak6Sv7DwNaZMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHzg2CM5kUtB3Qfp0jACQUimjBeAt8Xsl4ja/nWhRF7ssI54qbFWv0 x/vpLxFBmodF7dA3aSpZ8p6yE/NFrumeK0AKk+EH3ttUnbBMUPLR8/gBnKLxkAMk B/HwFuPERNydHNxl/Jh52p+JuPtEn9ZY/Ae8HJBUaLq5bUTFXyQ4XvTSi4kL0cOo 8yPykzcQlk9oxTytGo5ph6DN8n1xeNdCUiIOB/a3G3wAD6N5Yq11PgO08VHM8gU7 AVMtOy4EA7/xwNccp03S2XfcjTWIkqSYuBpjFaFiZZAR3UwJ+WvZeUzlvAtRTIgh FLTaeAwomHv6B2Picir7pKPqt1Zq4xNp -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:36 2025 by rpki-client