$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: wYFndi3P39/9P72XCZQobDxEp9lYY1rqsE3b6r2/Gmk= Subject key identifier: 39:B1:9A:5F:85:0B:1B:81:01:1F:44:6C:88:D7:83:AB:D2:EE:34:89 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 116E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0D1B Signing time: Sat 18 Oct 2025 21:36:24 +0000 Manifest this update: Sat 18 Oct 2025 21:36:24 +0000 Manifest next update: Sat 25 Oct 2025 21:36:24 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: aws7SQKrPJy1qnydLwJqo8NJ5KWTsg/uKQFLnmYKTzc=) 2: 3A371ADC6EBE11F085F17D3AC4F9AE02.roa (hash: WKjxnU3HboN4s0wNsVG9eqpz+Pf4YPA5xsu6TOJejbs=) 3: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: NAdbZTtzlwtewbjTfuMORoVz4S6lpr350iCxdpAhbLc=) 4: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: LcfL6WlPDAVnfVe8FVQ0PTDxHLr1cQFF1C/EotpyU7g=) 5: A173B894112711F0845DF16FC4F9AE02.roa (hash: 3CENOgG8lzvvc7h19xhkGA0RtKWssC6nuSD3IRmHv+U=) 6: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4nldf+8SF0UXyvc5ZFdPynmdfFfU94WXlTR6JoprTg=) 7: 396F61FE6EBE11F085F17D3AC4F9AE02.roa (hash: CE23sNAGQ72kvCJUhMKCCjdRdULm9pFJDWl36wscsUk=) 8: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: F+kwWb5yikRsOK2zoJFU1MWIPMWRYvJswNdoIKQaUNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4462 (0x116e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Oct 18 21:36:24 2025 GMT Not After : Oct 25 21:36:24 2025 GMT Subject: CN=68f40858-fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:b6:45:2e:96:d5:8d:ec:a0:d9:84:67:64: bd:fd:ea:80:e2:65:c8:90:27:2e:1e:e0:40:57:2b: a1:87:4c:1f:d8:ba:1e:30:27:48:8c:4b:9b:9b:c0: 8b:37:30:d8:70:8e:16:5b:45:b9:ff:74:4f:6f:b2: e6:f4:26:84:50:cf:c2:a0:63:ab:f7:dd:47:3c:40: 32:72:d7:fe:7c:af:7b:1d:b1:da:9d:5a:3e:ff:fc: fc:2a:f7:2b:41:96:14:06:7b:b2:97:88:8f:b4:91: 3c:b1:dd:d7:31:40:5e:e5:af:0d:44:f0:97:f5:cb: a6:d4:de:e9:b3:bb:ec:28:de:6e:0a:ab:82:98:7e: 3c:16:b5:eb:41:47:15:ca:e7:d8:1f:4e:dd:d6:59: b6:51:d6:3a:f0:3a:7a:72:9c:4c:bb:39:01:1b:85: 38:f7:6a:2b:bb:e9:38:53:ba:9f:2f:75:ac:d4:82: bd:12:3c:77:56:ae:02:96:ea:dc:4b:33:d6:8e:1f: c5:c7:d7:3f:c2:cb:6c:bc:0c:4d:e2:d2:9b:73:a0: e4:51:13:43:ab:a7:54:f1:40:cb:03:39:79:44:bf: 1d:c4:c5:77:b8:c1:19:a8:a0:0d:77:5e:6b:a6:70: 83:dd:d2:f0:2e:e7:41:14:f3:f6:23:a9:42:47:73: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:9A:5F:85:0B:1B:81:01:1F:44:6C:88:D7:83:AB:D2:EE:34:89 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ea:7e:b8:88:6e:c3:76:a5:1d:ee:31:d5:70:e5:f7:99:ea: 4a:d2:3f:ca:e8:e0:a2:00:96:02:5f:74:48:9d:4b:b3:4d:b7: 49:b1:af:02:9d:43:38:33:12:62:5c:bc:bb:86:7e:f5:7d:52: 8c:81:46:b4:18:20:c0:f9:9b:b6:3c:11:84:ab:45:24:d6:59: 6f:08:40:c0:a1:59:38:c9:e7:43:99:a3:c8:3a:39:9c:7d:44: a5:a0:6b:61:9b:8f:ec:6c:03:e4:fe:46:2e:59:e4:1a:91:eb: c5:f6:11:f2:3b:ab:72:46:61:72:01:c6:b6:90:e9:f6:77:77: 2c:6d:56:37:ae:ff:ee:ee:66:9e:2d:69:f1:a2:d8:11:dc:e8: 07:4c:00:09:8c:67:f0:f2:4b:dd:ba:03:52:e1:bd:3b:4b:f9: ce:56:9a:31:7f:27:46:62:3b:b2:ef:6c:e9:17:ac:8c:4b:98: 98:30:f8:d1:1a:ef:ad:8d:ab:f5:c3:04:87:b2:ae:8d:36:92: 5a:0b:31:b6:e7:85:3b:b0:6c:02:3d:bc:ee:0b:d2:21:95:5b: 19:6b:e8:c2:9a:26:de:45:1e:06:69:69:85:53:27:44:ba:c0: 54:d6:de:be:2e:93:b7:62:c8:0d:c4:a9:a7:63:5b:db:9d:8e: ae:d6:45:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUxMDE4MjEzNjI0WhcNMjUxMDI1MjEzNjI0WjAYMRYwFAYD VQQDEw02OGY0MDg1OC1mYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8u2RS6W1Y3soNmEZ2S9/eqA4mXIkCcuHuBAVyuhh0wf2LoeMCdIjEubm8CL NzDYcI4WW0W5/3RPb7Lm9CaEUM/CoGOr991HPEAyctf+fK97HbHanVo+//z8Kvcr QZYUBnuyl4iPtJE8sd3XMUBe5a8NRPCX9cum1N7ps7vsKN5uCquCmH48FrXrQUcV yufYH07d1lm2UdY68Dp6cpxMuzkBG4U492oru+k4U7qfL3Ws1IK9Ejx3Vq4Clurc SzPWjh/Fx9c/wstsvAxN4tKbc6DkURNDq6dU8UDLAzl5RL8dxMV3uMEZqKANd15r pnCD3dLwLudBFPP2I6lCR3MPjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmxml+F CxuBAR9EbIjXg6vS7jSJMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA06n64iG7DdqUd7jHVcOX3mepK0j/K6OCiAJYCX3RInUuzTbdJsa8C nUM4MxJiXLy7hn71fVKMgUa0GCDA+Zu2PBGEq0Uk1llvCEDAoVk4yedDmaPIOjmc fUSloGthm4/sbAPk/kYuWeQakevF9hHyO6tyRmFyAca2kOn2d3csbVY3rv/u7mae LWnxotgR3OgHTAAJjGfw8kvdugNS4b07S/nOVpoxfydGYjuy72zpF6yMS5iYMPjR Gu+tjav1wwSHsq6NNpJaCzG254U7sGwCPbzuC9IhlVsZa+jCmibeRR4GaWmFUydE usBU1t6+LpO3YsgNxKmnY1vbnY6u1kWp -----END CERTIFICATE-----Generated at Mon Oct 20 00:30:18 2025 by rpki-client