$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: 6wXMNxMEaLN2p2NmYNJaZsMXhRWrPXOkOrkCXB8GOvs= Subject key identifier: 7D:16:89:F6:68:EF:08:C6:AC:B2:08:BB:6B:04:36:58:2F:93:AB:CF Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 0565 Signing time: Sun 19 Oct 2025 01:05:52 +0000 Manifest this update: Sun 19 Oct 2025 01:05:51 +0000 Manifest next update: Sun 26 Oct 2025 01:05:51 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: OUQhy5CRkUND8V9TO/tECydenHPZMXqpuZhsXX0Vgis=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: lavhkAfv8hYziRuA8AuHoJeOdZGCo7Jbpk55GeOTHz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Oct 19 01:05:51 2025 GMT Not After : Oct 26 01:05:51 2025 GMT Subject: CN=68f4396f-358e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:2f:d1:3a:24:38:24:2b:ff:64:6d:a2:dc: 5b:7b:6c:e2:7f:21:08:a8:83:c8:f9:fc:1d:5d:76: ed:18:90:ed:e9:08:67:e9:3b:d2:2c:43:f0:31:fe: 46:11:59:c4:a3:48:d7:ec:3f:60:8a:8d:0d:54:43: ca:b7:3f:19:63:06:1a:96:be:dc:3c:0a:54:8d:5d: 57:4d:f2:d0:fb:f0:b6:96:a2:1f:5f:92:8b:40:e7: 25:f2:9e:f3:35:fa:2b:3d:20:76:a2:1f:2b:ed:b7: 87:b0:e9:ab:08:12:4a:08:18:19:af:5a:33:75:44: d4:00:03:09:2c:64:f8:b8:22:72:96:5b:9a:e8:0f: 57:6b:8e:06:76:c8:02:1d:a7:e3:fc:57:66:b9:a0: b8:16:f0:76:f6:99:c2:d1:9d:ba:db:f3:97:9b:00: 99:e6:18:6d:9c:3b:17:2d:c6:ca:b0:b8:f9:f0:84: 6d:12:0f:c1:fb:15:67:a2:b6:78:cf:ec:54:0b:de: 9d:6e:b7:98:a2:55:2c:28:67:49:c1:a5:ed:a3:50: 3e:da:b0:4b:75:a3:64:a2:7f:13:b3:e5:af:a0:a9: ca:6f:d7:ae:69:63:f1:11:c1:76:1e:33:a9:6f:63: 6d:d2:42:f7:d5:8c:0a:ee:03:5a:36:3c:c2:41:27: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:16:89:F6:68:EF:08:C6:AC:B2:08:BB:6B:04:36:58:2F:93:AB:CF X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a5:92:92:0a:d4:ec:b2:6d:02:a9:01:56:c6:26:49:c0:43: fe:0c:d7:32:74:1d:b6:9a:8d:d3:cb:d5:96:1e:8c:18:5d:3d: 38:be:ba:96:2f:39:7b:ec:4f:ce:e2:27:50:fb:46:04:92:7e: 2e:37:69:94:63:55:55:12:df:a9:40:82:64:98:b2:0b:6f:8a: 28:4a:3e:1e:de:3b:77:e6:ca:51:ef:4e:45:38:55:7b:8a:e0: 41:51:5a:60:2e:6a:d8:c9:36:8b:9a:53:d9:c5:a7:c9:10:92: 53:33:d7:3b:76:6f:90:a3:89:4b:23:f0:82:bd:ac:28:fc:80: 5b:b2:88:50:6e:cf:4d:4e:cf:4c:3d:98:19:aa:03:4a:5e:eb: e0:b8:d1:af:00:c5:67:24:f8:3d:54:17:c4:33:9d:2f:fa:1f: 7f:9d:c6:0e:94:9a:91:4b:ac:8b:77:b7:e6:80:cf:e6:34:8d: 26:75:f0:ed:84:20:12:68:89:17:12:8d:65:3c:68:6c:7f:0a: 75:a9:46:89:5e:0b:bb:9d:d2:d2:49:87:9b:b6:41:2d:c1:f2: 20:ef:83:f6:8b:23:9a:2e:b5:62:d8:e2:db:9a:05:08:b3:54: 23:b9:22:87:a6:e4:c7:a3:fc:10:39:30:40:38:66:b2:f2:e0: 87:c3:e2:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUxMDE5MDEwNTUxWhcNMjUxMDI2MDEwNTUxWjAYMRYwFAYD VQQDEw02OGY0Mzk2Zi0zNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriov0TokOCQr/2Rtotxbe2zifyEIqIPI+fwdXXbtGJDt6Qhn6TvSLEPwMf5G EVnEo0jX7D9gio0NVEPKtz8ZYwYalr7cPApUjV1XTfLQ+/C2lqIfX5KLQOcl8p7z NforPSB2oh8r7beHsOmrCBJKCBgZr1ozdUTUAAMJLGT4uCJyllua6A9Xa44GdsgC Hafj/FdmuaC4FvB29pnC0Z262/OXmwCZ5hhtnDsXLcbKsLj58IRtEg/B+xVnorZ4 z+xUC96dbreYolUsKGdJwaXto1A+2rBLdaNkon8Ts+WvoKnKb9euaWPxEcF2HjOp b2Nt0kL31YwK7gNaNjzCQSfokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0WifZo 7wjGrLIIu2sENlgvk6vPMB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBopZKSCtTssm0CqQFWxiZJwEP+DNcydB22mo3Ty9WWHowYXT04vrqW Lzl77E/O4idQ+0YEkn4uN2mUY1VVEt+pQIJkmLILb4ooSj4e3jt35spR705FOFV7 iuBBUVpgLmrYyTaLmlPZxafJEJJTM9c7dm+Qo4lLI/CCvawo/IBbsohQbs9NTs9M PZgZqgNKXuvguNGvAMVnJPg9VBfEM50v+h9/ncYOlJqRS6yLd7fmgM/mNI0mdfDt hCASaIkXEo1lPGhsfwp1qUaJXgu7ndLSSYebtkEtwfIg74P2iyOaLrVi2OLbmgUI s1QjuSKHpuTHo/wQOTBAOGay8uCHw+Kg -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:16 2025 by rpki-client