$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json) Hash identifier: KPdPsIkCj+Ka3SJHIOO0OnyAeVz8hNGkNOK64ZFjOu0= Subject key identifier: 1A:16:21:23:75:01:19:A3:4B:C4:FE:A1:A2:4A:EE:F3:04:3B:BB:DF Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft Manifest number: 068F Signing time: Sat 18 Oct 2025 23:50:57 +0000 Manifest this update: Sat 18 Oct 2025 23:50:56 +0000 Manifest next update: Sat 25 Oct 2025 23:50:56 +0000 Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: b5Xxt5Dz3DTrdN685d5SycEDfIp/YyJzAwZg/S457cc=) 2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Validity Not Before: Oct 18 23:50:56 2025 GMT Not After : Oct 25 23:50:56 2025 GMT Subject: CN=68f427e1-d9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:52:d4:d0:36:75:bc:0c:bb:ce:ad:82:93: 45:24:ff:9a:61:7a:54:f7:0b:c5:98:fb:d8:7c:b0: cf:14:4b:10:1b:1e:02:bb:05:52:e7:c2:ed:a3:e7: d8:d5:77:04:62:c8:ec:17:b3:cf:bd:24:51:34:31: 01:31:b1:ea:fe:4f:74:52:1d:a4:e8:e4:8e:87:e0: a4:b4:84:fa:69:75:c8:18:8f:1f:ac:01:6f:1a:26: 81:9d:76:e3:11:cd:d2:2f:46:1e:2c:30:a9:4b:26: ab:19:8d:72:40:8e:77:e5:3b:ec:49:7f:08:04:13: 64:1f:fb:55:14:dc:7f:a7:31:04:54:4f:3e:1f:a4: 9c:67:ee:5c:52:2f:63:b0:f4:02:f4:43:91:d7:5e: 42:98:07:1e:20:d4:fe:31:4f:ee:cb:17:f7:cf:36: 63:71:9d:b0:c5:6b:43:b1:64:b5:54:6c:98:6b:d4: d3:ba:25:df:ea:01:92:b2:2c:0c:45:11:bd:30:01: 65:cc:7d:73:c7:06:e3:17:25:39:b4:77:37:9d:72: 72:35:87:3e:b7:48:e3:3c:c9:bc:38:1c:29:8b:ae: 9b:26:d7:0e:23:dd:e0:5f:b6:e1:07:36:af:e9:1a: 54:a5:66:f5:47:74:01:94:22:6a:c7:7e:4c:8f:8d: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:16:21:23:75:01:19:A3:4B:C4:FE:A1:A2:4A:EE:F3:04:3B:BB:DF X509v3 Authority Key Identifier: keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4c:f4:f4:28:dd:48:6e:f3:48:25:72:02:97:ea:29:2e:07: fb:a9:bc:1f:88:ea:80:83:79:de:4a:bb:93:44:44:12:dd:56: 2c:14:2a:bd:cb:26:4d:8a:f9:16:92:f6:4d:9d:92:14:64:85: 9c:69:eb:9a:4d:1d:7e:71:a9:2c:15:07:b5:da:60:1c:86:58: f5:df:29:fb:3d:a5:fe:74:b6:a3:63:4a:f1:0e:8c:9d:64:ae: e1:7f:0d:1d:17:53:06:2b:8e:ea:10:b4:42:7a:e8:bc:35:7d: c5:58:af:fc:79:51:8c:56:7e:24:77:86:ea:fd:e0:55:12:23: 1a:10:d6:1b:a5:02:0f:b9:e5:50:71:79:1c:dc:02:fe:fe:8a: 09:3e:d9:30:de:1b:6d:33:14:af:94:08:5c:65:e4:62:91:ad: 85:ae:89:4e:73:d7:11:19:be:32:21:db:93:d3:19:4d:6f:de: 8d:61:30:66:53:9c:7d:52:cf:6e:c5:cf:25:b0:d6:cb:0c:70: c1:57:d3:3d:03:3a:4b:d9:a7:53:a3:cd:eb:40:95:bd:d2:0b: d5:c9:d9:03:cd:6c:5e:db:63:43:de:3f:b8:ad:15:10:50:b2: f5:4b:0b:2d:02:5f:e6:02:0a:2e:2c:6b:4a:bb:5b:22:a0:a6: 4f:4b:0d:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz QkY1QzVEMTQwHhcNMjUxMDE4MjM1MDU2WhcNMjUxMDI1MjM1MDU2WjAYMRYwFAYD VQQDEw02OGY0MjdlMS1kOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl9S1NA2dbwMu86tgpNFJP+aYXpU9wvFmPvYfLDPFEsQGx4CuwVS58Lto+fY 1XcEYsjsF7PPvSRRNDEBMbHq/k90Uh2k6OSOh+CktIT6aXXIGI8frAFvGiaBnXbj Ec3SL0YeLDCpSyarGY1yQI535TvsSX8IBBNkH/tVFNx/pzEEVE8+H6ScZ+5cUi9j sPQC9EOR115CmAceINT+MU/uyxf3zzZjcZ2wxWtDsWS1VGyYa9TTuiXf6gGSsiwM RRG9MAFlzH1zxwbjFyU5tHc3nXJyNYc+t0jjPMm8OBwpi66bJtcOI93gX7bhBzav 6RpUpWb1R3QBlCJqx35Mj41I6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoWISN1 ARmjS8T+oaJK7vMEO7vfMB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKTPT0KN1IbvNIJXICl+opLgf7qbwfiOqAg3neSruTREQS3VYsFCq9 yyZNivkWkvZNnZIUZIWcaeuaTR1+caksFQe12mAchlj13yn7PaX+dLajY0rxDoyd ZK7hfw0dF1MGK47qELRCeui8NX3FWK/8eVGMVn4kd4bq/eBVEiMaENYbpQIPueVQ cXkc3AL+/ooJPtkw3httMxSvlAhcZeRika2FrolOc9cRGb4yIduT0xlNb96NYTBm U5x9Us9uxc8lsNbLDHDBV9M9AzpL2adTo83rQJW90gvVydkDzWxe22ND3j+4rRUQ ULL1SwstAl/mAgouLGtKu1sioKZPSw3i -----END CERTIFICATE-----Generated at Mon Oct 20 05:28:46 2025 by rpki-client