$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: 2WXTdFEfWfkPcXhA30bi+PPW5xKKbXYK5kHLkxKGQqI= Subject key identifier: 73:FA:49:E2:4C:3B:5D:43:0D:6B:E0:6B:35:D8:7F:B9:3A:64:84:BA Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 0122 Signing time: Sun 19 Oct 2025 07:35:38 +0000 Manifest this update: Sun 19 Oct 2025 07:35:38 +0000 Manifest next update: Sun 26 Oct 2025 07:35:38 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: K+qYl3X+XuW9mKB0N40poFV4R0GhTiZ2CJTnAWXp6fc=) 2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=) 4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Oct 19 07:35:38 2025 GMT Not After : Oct 26 07:35:38 2025 GMT Subject: CN=68f494ca-21c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:05:06:4f:55:d6:e6:e5:1f:0d:cf:4d:0d: 3c:e0:8f:2d:b0:3d:72:48:34:b3:b3:48:02:a6:a6: 32:30:31:73:87:00:89:2e:c7:db:8f:01:15:a1:89: 4c:2c:cc:96:39:32:58:e4:f1:e6:40:a0:8a:66:c0: 4d:10:67:df:4e:1f:b0:56:f5:d0:51:30:bc:8c:f3: 48:04:2c:ef:28:b6:d5:d1:81:b5:1d:c2:64:a7:33: 55:69:02:46:b4:a5:ea:69:96:e3:69:f1:9d:24:b5: 72:02:0d:bd:70:1e:7c:75:2e:55:73:ef:b8:64:f1: d8:00:40:04:37:57:25:c8:f7:5e:f3:3d:1b:b2:8a: f7:f3:1a:ed:6f:61:0f:d8:28:70:68:21:67:0d:14: 40:a0:02:fa:aa:8a:fe:2a:a5:74:a9:20:b5:cc:66: f6:41:78:0e:d1:e5:4b:db:61:d5:13:33:ef:3e:99: 82:8c:e3:24:ef:2f:e9:ab:b6:34:ba:0c:4e:ce:45: f1:28:6e:7e:06:ac:bf:95:0f:3c:3f:70:8b:ee:73: 0f:b6:9b:ab:61:b2:07:66:73:36:d3:e5:50:c3:46: 00:24:99:02:6a:0f:bf:5f:de:7e:71:b5:33:49:21: a0:69:9c:29:4e:8d:fa:07:d8:29:d2:5f:70:c1:af: e6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FA:49:E2:4C:3B:5D:43:0D:6B:E0:6B:35:D8:7F:B9:3A:64:84:BA X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:51:63:d1:98:0b:3c:f8:37:0a:11:1b:57:a2:1d:bb:ea:fb: 87:df:e0:6a:cc:87:46:d9:c5:99:5b:e7:e4:45:ec:85:44:a7: 63:22:e5:cd:c7:fd:98:d5:5a:60:c8:6f:be:8d:bd:b2:4e:5d: 67:97:a0:47:99:01:ab:56:b5:d1:5e:1b:41:73:6b:cc:40:6d: 3a:c5:0d:10:13:2a:8d:59:ee:91:4d:2f:76:b0:51:45:3d:bb: 5c:da:1a:6c:77:ef:dc:f8:13:90:60:4b:17:81:20:72:79:fb: f1:e6:70:1b:6c:44:c3:05:32:90:5f:8a:06:fc:e1:25:9e:28: 53:8d:c4:d8:da:7f:98:87:39:07:fa:89:55:f2:82:9c:3f:b4: 17:a8:28:ec:d2:ed:73:3a:6e:bb:8c:0f:91:db:b9:7c:79:7c: 16:01:62:5f:68:45:fd:44:f5:8c:b9:f6:2e:46:8f:a8:0b:44: ff:14:64:b0:37:2e:87:5a:76:6b:14:07:b8:9e:ea:a6:06:ce: 09:b0:c0:78:37:b8:90:d3:60:0a:69:5a:35:d2:eb:d1:eb:33: 6c:a7:c5:e4:6e:77:ec:0a:ac:c1:b5:24:97:bd:20:7d:9e:75: 76:8b:95:6e:8b:bc:3e:92:a7:11:0a:38:a3:18:30:1e:28:c0: fa:73:3b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjUxMDE5MDczNTM4WhcNMjUxMDI2MDczNTM4WjAYMRYwFAYD VQQDEw02OGY0OTRjYS0yMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNYFBk9V1ublHw3PTQ084I8tsD1ySDSzs0gCpqYyMDFzhwCJLsfbjwEVoYlM LMyWOTJY5PHmQKCKZsBNEGffTh+wVvXQUTC8jPNIBCzvKLbV0YG1HcJkpzNVaQJG tKXqaZbjafGdJLVyAg29cB58dS5Vc++4ZPHYAEAEN1clyPde8z0bsor38xrtb2EP 2ChwaCFnDRRAoAL6qor+KqV0qSC1zGb2QXgO0eVL22HVEzPvPpmCjOMk7y/pq7Y0 ugxOzkXxKG5+Bqy/lQ88P3CL7nMPtpurYbIHZnM20+VQw0YAJJkCag+/X95+cbUz SSGgaZwpTo36B9gp0l9wwa/mzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHP6SeJM O11DDWvgazXYf7k6ZIS6MB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7UWPRmAs8+DcKERtXoh276vuH3+BqzIdG2cWZW+fkReyFRKdjIuXN x/2Y1VpgyG++jb2yTl1nl6BHmQGrVrXRXhtBc2vMQG06xQ0QEyqNWe6RTS92sFFF Pbtc2hpsd+/c+BOQYEsXgSByefvx5nAbbETDBTKQX4oG/OElnihTjcTY2n+YhzkH +olV8oKcP7QXqCjs0u1zOm67jA+R27l8eXwWAWJfaEX9RPWMufYuRo+oC0T/FGSw Ny6HWnZrFAe4nuqmBs4JsMB4N7iQ02AKaVo10uvR6zNsp8XkbnfsCqzBtSSXvSB9 nnV2i5Vui7w+kqcRCjijGDAeKMD6czvC -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:51 2025 by rpki-client