$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: xdde/oEBoIxJC/bOPM3wmkRFlgBVnBHZUbld4DuYwxM= Subject key identifier: C6:E9:BA:16:FE:DB:1F:E7:96:B8:55:1E:FB:C2:85:C5:9E:70:4A:C5 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 42 Signing time: Sun 19 Oct 2025 10:59:39 +0000 Manifest this update: Sun 19 Oct 2025 10:59:38 +0000 Manifest next update: Sun 26 Oct 2025 10:59:38 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: bsmuEtws0n/VITfRLdQBxSWzooiz5Ji1lPtt5gy+hzM=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Oct 19 10:59:38 2025 GMT Not After : Oct 26 10:59:38 2025 GMT Subject: CN=68f4c49b-98ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:bb:db:b4:c1:45:d3:0d:ee:32:e5:3d:7c: 02:bb:c8:36:c8:44:d5:c8:74:04:13:64:dc:7c:68: 9c:52:a7:0b:94:cf:4b:2f:41:ff:ab:a2:ed:6d:82: 73:b6:73:61:38:78:58:5a:b8:0c:ce:76:ed:0a:3f: 98:99:67:cc:5b:2a:0c:6a:2e:ce:82:f4:56:68:a4: 93:9f:f7:0a:fe:b1:94:89:42:e3:7e:cb:8f:e8:8e: a4:47:e8:f7:d8:04:1e:64:48:ec:90:78:3a:4b:63: 71:46:ec:fd:bc:5d:47:49:0e:8b:2d:87:87:77:6f: 9d:48:4c:c3:1e:a5:44:3e:d2:55:f2:09:2b:50:3c: 3a:b6:85:90:b9:74:5f:40:36:cb:b0:10:08:ae:40: 1d:0d:92:05:5c:cf:b6:2b:c3:19:50:3c:5b:30:d8: 29:9b:e3:b7:83:42:4a:67:61:4a:35:32:cb:0d:db: 4d:42:02:45:0b:18:cd:3c:97:bc:21:a6:2e:c1:3c: 7e:56:c8:d5:46:1f:60:d5:57:d8:45:57:fa:60:6f: 30:a3:d0:93:e5:d7:9f:94:33:07:6d:f2:0c:96:97: c6:ec:fe:2c:c9:30:a2:9b:e9:d0:16:40:06:9a:f2: 65:25:1f:cb:47:b2:82:ee:ec:7f:0c:19:a4:2b:17: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E9:BA:16:FE:DB:1F:E7:96:B8:55:1E:FB:C2:85:C5:9E:70:4A:C5 X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:65:3f:8e:19:f7:49:d4:ca:e2:8f:a0:30:9d:90:da:66:d4: 22:ae:8d:54:a4:f4:94:61:49:f4:2a:96:e1:83:19:fa:e3:71: ec:54:fc:c2:8e:99:a6:eb:1a:56:d6:85:bd:2d:f2:56:ce:80: c1:f4:fe:c6:a7:d8:1e:c3:a0:d2:a2:88:03:bc:50:bb:90:bb: d0:f6:c0:82:74:f8:24:b2:02:6f:be:b4:08:bb:96:50:92:e8: 1c:23:e1:00:11:ba:9d:db:70:07:9a:2e:a2:38:fe:04:a9:ed: ce:f0:9f:42:bc:64:e4:0a:5b:46:10:57:67:9d:48:cf:68:39: 8f:ea:76:e3:57:86:0c:89:6a:98:1c:82:b5:c7:f3:13:b5:12: 77:3a:d7:b1:ed:c9:17:a1:41:3f:f8:b8:03:77:ed:b8:c5:2a: a6:49:a6:20:7d:3a:98:51:ad:d6:9b:3e:22:fa:22:96:0a:19: 0c:a2:2b:07:3d:5e:d3:1d:c1:1f:b2:13:73:28:21:b6:22:99: e3:46:45:62:6f:9c:7d:c7:d2:2d:f3:4f:45:a9:3e:e0:33:d3: e0:08:af:2b:e3:72:c1:84:54:ff:58:bf:3f:94:8b:fc:ec:29: 04:71:37:1e:2d:10:27:71:53:16:04:8d:8b:2d:98:d8:cd:db: d6:39:eb:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTEwMTkxMDU5MzhaFw0yNTEwMjYxMDU5MzhaMBgxFjAUBgNV BAMTDTY4ZjRjNDliLTk4YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy0LvbtMFF0w3uMuU9fAK7yDbIRNXIdAQTZNx8aJxSpwuUz0svQf+rou1tgnO2 c2E4eFhauAzOdu0KP5iZZ8xbKgxqLs6C9FZopJOf9wr+sZSJQuN+y4/ojqRH6PfY BB5kSOyQeDpLY3FG7P28XUdJDosth4d3b51ITMMepUQ+0lXyCStQPDq2hZC5dF9A NsuwEAiuQB0NkgVcz7YrwxlQPFsw2Cmb47eDQkpnYUo1MssN201CAkULGM08l7wh pi7BPH5WyNVGH2DVV9hFV/pgbzCj0JPl15+UMwdt8gyWl8bs/izJMKKb6dAWQAaa 8mUlH8tHsoLu7H8MGaQrF7obAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxum6Fv7b H+eWuFUe+8KFxZ5wSsUwHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1lP44Z90nUyuKPoDCdkNpm1CKujVSk9JRhSfQqluGDGfrjcexU/MKO mabrGlbWhb0t8lbOgMH0/san2B7DoNKiiAO8ULuQu9D2wIJ0+CSyAm++tAi7llCS 6Bwj4QARup3bcAeaLqI4/gSp7c7wn0K8ZOQKW0YQV2edSM9oOY/qduNXhgyJapgc grXH8xO1Enc617HtyRehQT/4uAN37bjFKqZJpiB9OphRrdabPiL6IpYKGQyiKwc9 XtMdwR+yE3MoIbYimeNGRWJvnH3H0i3zT0WpPuAz0+AIryvjcsGEVP9Yvz+Ui/zs KQRxNx4tECdxUxYEjYstmNjN29Y56+I= -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:59 2025 by rpki-client