$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: CSRYIcU3T9eWtpAY4LcHsT+pIh75bByRkYimkbwvvNM= Subject key identifier: E6:D9:CA:28:B2:D2:2A:D0:83:62:9E:31:CD:16:9E:5B:03:A7:4C:25 Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 02DE Signing time: Sun 19 Oct 2025 03:24:45 +0000 Manifest this update: Sun 19 Oct 2025 03:24:44 +0000 Manifest next update: Sun 26 Oct 2025 03:24:44 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: mDoAT2kFJahn2tvpUBZYPd3lmuOEGMfGRLGbUJ0g/AE=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: Oct 19 03:24:44 2025 GMT Not After : Oct 26 03:24:44 2025 GMT Subject: CN=68f459fd-f751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:cd:8b:d8:eb:f9:66:07:65:6b:42:7d:9f: e5:24:46:0b:0e:47:fc:56:3f:58:bd:c6:e4:7e:06: 84:6d:74:a7:aa:44:d9:5d:d1:5c:f7:a9:f3:37:74: ae:63:5d:a1:d2:a0:ae:00:9e:5f:c4:cc:69:74:ea: 5a:b9:55:75:23:77:fc:1e:94:66:25:9e:a3:c4:67: f2:96:d0:e0:59:38:d6:4c:7c:0f:43:5f:83:40:f1: ee:e0:13:0a:1f:23:a7:d8:f5:fa:63:05:93:f3:09: 94:d0:da:c1:b0:78:64:34:44:e9:66:6e:64:f1:bd: 8a:3e:ed:b0:42:36:a5:23:98:c5:7a:c7:a4:6b:cb: d3:b2:9a:53:a9:85:41:82:6a:6c:fb:2a:f5:de:e4: a4:32:86:1a:53:c0:54:33:17:26:0f:af:3b:0c:51: a7:35:31:33:4e:55:d5:2b:3a:b8:2d:8c:01:70:59: 46:7c:4d:bf:95:7c:32:0e:ff:85:ca:2c:96:ae:08: c6:bc:79:8f:7d:59:aa:a2:51:e3:bb:b2:9a:98:6f: 24:3c:13:53:02:07:2b:75:9e:b2:96:90:40:5b:ac: 84:8c:74:ef:c6:ea:4c:58:25:e5:07:dc:c6:34:f3: 7d:26:09:58:1a:34:54:16:d2:01:45:0b:6a:1d:f9: c2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D9:CA:28:B2:D2:2A:D0:83:62:9E:31:CD:16:9E:5B:03:A7:4C:25 X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:88:23:cb:b7:34:62:03:1f:5d:9d:70:6b:0e:68:1b:d4:13: 9e:4e:03:4b:89:a7:9e:ec:90:ab:8d:b5:10:a8:a8:b2:8d:73: 07:39:cb:1c:8f:e3:29:32:5b:ce:9e:90:87:55:04:47:97:2d: 9f:8f:91:d3:e7:2a:1c:40:c8:69:19:0f:f0:9f:85:c5:fa:16: 07:19:0e:5c:6e:d1:55:a5:6e:e7:b7:63:7f:1e:f5:8e:af:97: 55:dd:f7:f7:2e:2c:40:21:5a:97:bb:a1:6f:c6:74:54:73:e4: 62:73:b1:f2:aa:d9:a9:c8:e1:82:54:1f:ce:50:bc:ca:30:b8: 93:a3:5d:42:2a:33:93:fb:d2:f9:dd:f2:a3:12:bf:5c:58:69: ef:71:f0:97:32:0e:61:6d:e7:8b:4f:e0:03:39:aa:2c:cb:75: 52:2c:64:2e:6c:57:2a:80:54:d7:cd:d3:e2:ea:b8:a2:4e:8d: db:8f:77:bc:02:49:b8:8c:e8:59:af:ce:b2:82:0e:16:a2:4a: 76:5e:c4:c1:a3:f6:0e:21:ac:b7:ea:f8:d6:ba:e5:4c:5f:ea: 5c:38:af:c7:6e:4d:a9:14:ec:e7:21:db:53:fa:4b:16:c6:40: 48:26:42:59:4d:32:e1:45:a9:f9:00:fb:85:4d:4c:bc:d1:f0: 76:fb:93:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUxMDE5MDMyNDQ0WhcNMjUxMDI2MDMyNDQ0WjAYMRYwFAYD VQQDEw02OGY0NTlmZC1mNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmajNi9jr+WYHZWtCfZ/lJEYLDkf8Vj9YvcbkfgaEbXSnqkTZXdFc96nzN3Su Y12h0qCuAJ5fxMxpdOpauVV1I3f8HpRmJZ6jxGfyltDgWTjWTHwPQ1+DQPHu4BMK HyOn2PX6YwWT8wmU0NrBsHhkNETpZm5k8b2KPu2wQjalI5jFeseka8vTsppTqYVB gmps+yr13uSkMoYaU8BUMxcmD687DFGnNTEzTlXVKzq4LYwBcFlGfE2/lXwyDv+F yiyWrgjGvHmPfVmqolHju7KamG8kPBNTAgcrdZ6ylpBAW6yEjHTvxupMWCXlB9zG NPN9JglYGjRUFtIBRQtqHfnCbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObZyiiy 0irQg2KeMc0WnlsDp0wlMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4iCPLtzRiAx9dnXBrDmgb1BOeTgNLiaee7JCrjbUQqKiyjXMHOcsc j+MpMlvOnpCHVQRHly2fj5HT5yocQMhpGQ/wn4XF+hYHGQ5cbtFVpW7nt2N/HvWO r5dV3ff3LixAIVqXu6FvxnRUc+Ric7HyqtmpyOGCVB/OULzKMLiTo11CKjOT+9L5 3fKjEr9cWGnvcfCXMg5hbeeLT+ADOaosy3VSLGQubFcqgFTXzdPi6riiTo3bj3e8 Akm4jOhZr86ygg4Wokp2XsTBo/YOIay36vjWuuVMX+pcOK/Hbk2pFOznIdtT+ksW xkBIJkJZTTLhRan5APuFTUy80fB2+5OC -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:11 2025 by rpki-client