$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: QcSgU2TyyKbPlBq4VqZWSbOdbafFJofWv04+o/YfbLc= Subject key identifier: EC:67:CC:85:DF:6A:94:89:0A:7E:B3:BC:E0:BB:B4:34:52:2E:FC:C9 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0DBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0D9B Signing time: Sat 18 Oct 2025 18:36:50 +0000 Manifest this update: Sat 18 Oct 2025 18:36:49 +0000 Manifest next update: Sat 25 Oct 2025 18:36:49 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: VpLJ+/P5OD/+L5Zv9nB46ZZfCA42nv4Q+y+hWQhx1ic=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: znRSUO3caPihB9pwLwMc1O8NeSvwB5D6pWui44HfBSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Oct 18 18:36:49 2025 GMT Not After : Oct 25 18:36:49 2025 GMT Subject: CN=68f3de42-61ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:1a:a8:f3:b5:43:e4:bf:34:72:6c:66:e7: 08:4d:99:c3:1a:28:9a:48:f4:c7:1b:2b:10:d2:22: d1:c3:dc:f8:fd:7e:7c:d5:68:5a:cd:84:8d:39:21: 92:ed:24:d2:19:6a:5f:53:0f:d5:32:26:a0:2e:b3: 70:92:c2:b8:9d:86:6c:32:78:e6:15:87:2f:a5:62: 6a:3f:57:6c:2c:f7:65:30:ac:b6:a4:c0:bc:f8:3a: 09:21:cc:97:9d:40:a3:4a:e4:63:c7:58:d1:54:ab: 6e:ed:d8:05:c4:b8:61:92:94:90:69:8f:7c:0f:9e: de:e0:00:74:c2:8b:50:42:7a:6c:fd:a8:a5:42:48: 03:57:9e:39:8c:fe:16:b3:1d:f8:f6:bb:94:20:af: 22:0a:4e:ee:9a:04:ba:fb:89:c6:f5:f4:f2:a8:79: 82:83:7e:ba:e1:ef:da:e1:e6:e2:18:e0:11:a6:4a: a1:bd:30:c3:aa:c1:30:01:7c:82:1d:86:0e:4b:04: d9:30:90:6a:09:84:fc:ab:bd:fb:ae:c0:31:76:6b: 70:ec:88:70:c8:15:36:b3:9f:2c:f0:c4:ef:52:cc: d3:34:cd:14:63:f2:12:86:5d:a4:9a:3e:58:1e:af: 92:26:c2:25:01:45:14:e6:67:b7:ec:42:27:b8:ca: a2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:67:CC:85:DF:6A:94:89:0A:7E:B3:BC:E0:BB:B4:34:52:2E:FC:C9 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:28:51:8c:f9:2f:1a:eb:33:48:02:a5:3c:5f:eb:b2:bc:b8: f8:d3:ff:4c:e8:13:07:b5:42:4b:2c:f7:bf:5d:11:67:f8:10: 8f:6d:54:dd:52:99:81:d7:34:91:72:d5:90:55:d7:91:cb:36: df:a1:bc:f6:07:d7:d6:ce:76:6e:f5:e5:a6:5c:dc:c6:ca:e4: 1b:cf:23:2b:b9:71:c1:df:23:91:a9:45:ce:51:f7:61:f5:0a: c2:a5:31:d2:ab:6e:0c:82:19:6e:f4:f0:9e:8a:c9:d8:0c:26: f5:44:df:cd:ca:9c:71:b1:59:44:82:a2:18:be:ca:12:63:7e: f8:47:4a:65:ce:af:de:e8:92:15:52:63:a2:67:f8:c4:f0:a8: e9:d3:af:e4:6f:8d:66:35:bc:69:fa:6d:c0:a6:55:2f:f4:88: 8b:8b:64:af:d4:ba:21:ee:f9:df:87:f3:76:15:5a:c6:72:22: 3c:bf:9d:11:77:6a:01:8c:61:2a:b8:99:6c:80:6b:82:fa:c9: b8:76:38:99:0b:c7:a3:65:36:d4:9c:d3:63:6e:1d:f5:b9:4d: 3d:bb:fb:30:50:c4:0f:e5:43:1c:10:fb:26:8b:45:de:82:26: 5d:bf:75:b7:25:4d:b4:9f:85:ee:c2:2f:83:7d:e3:04:f7:4d: b1:62:6a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUxMDE4MTgzNjQ5WhcNMjUxMDI1MTgzNjQ5WjAYMRYwFAYD VQQDEw02OGYzZGU0Mi02MWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF8aqPO1Q+S/NHJsZucITZnDGiiaSPTHGysQ0iLRw9z4/X581WhazYSNOSGS 7STSGWpfUw/VMiagLrNwksK4nYZsMnjmFYcvpWJqP1dsLPdlMKy2pMC8+DoJIcyX nUCjSuRjx1jRVKtu7dgFxLhhkpSQaY98D57e4AB0wotQQnps/ailQkgDV545jP4W sx349ruUIK8iCk7umgS6+4nG9fTyqHmCg3664e/a4ebiGOARpkqhvTDDqsEwAXyC HYYOSwTZMJBqCYT8q737rsAxdmtw7IhwyBU2s58s8MTvUszTNM0UY/IShl2kmj5Y Hq+SJsIlAUUU5me37EInuMqiFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxnzIXf apSJCn6zvOC7tDRSLvzJMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMKFGM+S8a6zNIAqU8X+uyvLj40/9M6BMHtUJLLPe/XRFn+BCPbVTd UpmB1zSRctWQVdeRyzbfobz2B9fWznZu9eWmXNzGyuQbzyMruXHB3yORqUXOUfdh 9QrCpTHSq24Mghlu9PCeisnYDCb1RN/NypxxsVlEgqIYvsoSY374R0plzq/e6JIV UmOiZ/jE8Kjp06/kb41mNbxp+m3AplUv9IiLi2Sv1Loh7vnfh/N2FVrGciI8v50R d2oBjGEquJlsgGuC+sm4djiZC8ejZTbUnNNjbh31uU09u/swUMQP5UMcEPsmi0Xe giZdv3W3JU20n4Xuwi+DfeME902xYmpS -----END CERTIFICATE-----Generated at Mon Oct 20 05:29:51 2025 by rpki-client