$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: GEx75koWfOJdn+3N3hSjxW5XFafo7PXezbovNlgAV7A= Subject key identifier: 8A:82:FE:9E:F2:F6:3B:4A:B6:A8:80:C1:E2:53:DB:24:AE:30:6E:D5 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 0714 Signing time: Sat 18 Oct 2025 23:50:00 +0000 Manifest this update: Sat 18 Oct 2025 23:49:59 +0000 Manifest next update: Sat 25 Oct 2025 23:49:59 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: 3qrcojBMo5Y2uk0mjBFmUEL7hg78v4zE8ksx28N6vqw=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: j0xrsPerWvAmq5TrfXCCAXxhmW7uoVGvVR9TrXHmI/c=) 3: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 4: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: 317095E0A28911ECBC355360C4F9AE02.roa (hash: nnSzGYlerQsM9iKa/4jkZPWucx7hq6XlvmmOclZbbeI=) 7: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 8: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: I8a2tYdChMy0m+hYeHyoEloBcDOZ+JhPIXTugtfIp8g=) 9: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Oct 18 23:49:59 2025 GMT Not After : Oct 25 23:49:59 2025 GMT Subject: CN=68f427a7-5c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:fd:ff:27:fd:84:fa:45:c8:a6:e5:51:26: d5:95:84:f3:7f:b1:cd:49:0a:12:fa:39:57:54:df: 2e:e2:67:06:a1:1b:cc:eb:a8:29:48:43:38:76:c2: c4:a2:7e:23:d5:59:52:75:00:f9:10:8e:49:53:b5: 87:f5:bc:97:88:52:64:c8:98:89:05:6b:d9:71:0a: 0d:38:d7:b4:5c:fa:55:04:a6:0f:be:78:a6:e4:72: 5f:3c:7e:0b:f2:cd:44:21:32:08:51:1a:ed:6b:2d: 58:42:4b:10:8b:d1:ca:65:43:76:0f:58:4a:da:9e: 3a:95:a4:d5:a0:2b:f2:3c:04:6d:6b:b0:f4:cc:83: eb:f3:a7:1a:2c:a4:35:2b:3f:d0:02:30:3a:cd:f6: 1e:cf:87:9b:72:4c:ce:ee:17:95:53:55:54:0f:a2: 3b:3d:35:3b:0b:95:11:20:97:ba:06:fa:55:e8:5f: 90:33:d8:18:5c:d1:38:36:ee:0f:6d:89:7c:60:9d: 0d:27:a7:31:8b:86:f6:86:05:a7:98:40:67:c4:32: 6b:08:07:c7:27:fc:aa:55:31:55:88:22:d1:51:8a: b0:2a:c2:ad:99:6b:54:cd:e9:a5:ce:84:2f:a3:bb: f6:86:c2:b7:24:fd:a8:e7:7d:46:4c:ed:d4:43:c9: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:FE:9E:F2:F6:3B:4A:B6:A8:80:C1:E2:53:DB:24:AE:30:6E:D5 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2c:04:33:f6:b8:ae:63:49:74:7e:49:94:6f:e1:5a:00:a5: ee:13:dc:cc:18:a5:8b:46:f1:3e:e9:e1:26:fc:58:a6:99:f1: 73:c3:ff:ba:6c:4a:f2:ab:1f:88:99:cb:3d:e0:d7:e1:2c:46: c1:e6:1c:54:f9:16:87:57:f0:50:35:b0:1f:c0:ba:dd:83:6b: 7c:a0:f4:0a:f0:65:1f:c8:96:bb:58:d6:a6:b4:ed:e9:42:0a: d2:38:ea:5d:7f:5a:a5:93:bf:ee:93:ce:5d:5d:88:3b:c9:7a: bc:22:cb:70:47:54:04:58:e8:b9:94:38:a4:93:b6:79:86:1b: ad:f0:2e:8d:8c:df:40:4c:96:e2:9e:f5:d0:e3:3b:01:74:67: ec:56:c7:90:12:43:ac:fc:86:59:9d:d8:3b:68:35:3f:57:ef: 0a:ef:c2:2b:35:b5:b7:1f:63:80:d4:e6:c0:18:b2:53:cd:f4: 63:0b:6a:be:db:c6:72:73:66:8c:b0:a2:a6:74:54:75:98:82: b6:eb:ac:28:f8:66:46:7c:d5:cd:55:65:c7:23:be:1a:dd:2f: d5:5d:a1:e6:40:23:45:8c:03:67:ef:c4:22:80:6a:4a:a7:a0: bd:ab:86:15:a4:ce:20:de:f4:3c:d9:87:55:bc:6e:ab:f0:f5: f5:6c:df:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUxMDE4MjM0OTU5WhcNMjUxMDI1MjM0OTU5WjAYMRYwFAYD VQQDEw02OGY0MjdhNy01YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCH9/yf9hPpFyKblUSbVlYTzf7HNSQoS+jlXVN8u4mcGoRvM66gpSEM4dsLE on4j1VlSdQD5EI5JU7WH9byXiFJkyJiJBWvZcQoNONe0XPpVBKYPvnim5HJfPH4L 8s1EITIIURrtay1YQksQi9HKZUN2D1hK2p46laTVoCvyPARta7D0zIPr86caLKQ1 Kz/QAjA6zfYez4ebckzO7heVU1VUD6I7PTU7C5URIJe6BvpV6F+QM9gYXNE4Nu4P bYl8YJ0NJ6cxi4b2hgWnmEBnxDJrCAfHJ/yqVTFViCLRUYqwKsKtmWtUzemlzoQv o7v2hsK3JP2o531GTO3UQ8kowwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqC/p7y 9jtKtqiAweJT2ySuMG7VMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApLAQz9riuY0l0fkmUb+FaAKXuE9zMGKWLRvE+6eEm/FimmfFzw/+6 bEryqx+Imcs94NfhLEbB5hxU+RaHV/BQNbAfwLrdg2t8oPQK8GUfyJa7WNamtO3p QgrSOOpdf1qlk7/uk85dXYg7yXq8IstwR1QEWOi5lDikk7Z5hhut8C6NjN9ATJbi nvXQ4zsBdGfsVseQEkOs/IZZndg7aDU/V+8K78IrNbW3H2OA1ObAGLJTzfRjC2q+ 28Zyc2aMsKKmdFR1mIK266wo+GZGfNXNVWXHI74a3S/VXaHmQCNFjANn78QigGpK p6C9q4YVpM4g3vQ82YdVvG6r8PX1bN8f -----END CERTIFICATE-----Generated at Mon Oct 20 00:12:28 2025 by rpki-client