$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: F0tjOolLD58OYqVWXzm+udRID7C8/O4kdQ+RNvFmkS0= Subject key identifier: B3:1C:C0:63:AF:2F:91:4C:F9:2E:61:AD:B2:84:66:16:C1:E5:F2:D6 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 1937 Signing time: Mon 20 Oct 2025 16:45:34 +0000 Manifest this update: Mon 20 Oct 2025 16:45:33 +0000 Manifest next update: Mon 27 Oct 2025 16:45:33 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: motqVBMD2hv3r36H3Zb/reYQnUCHcg0Fhux0VFrYS2o=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6467 (0x1943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Oct 20 16:45:33 2025 GMT Not After : Oct 27 16:45:33 2025 GMT Subject: CN=68f6672d-06a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1a:1b:0b:d2:ba:55:68:f7:33:68:89:36:f5: 67:3a:07:2c:38:5a:c9:cd:58:c0:17:6c:b7:c0:b2: e3:c3:e7:e8:5d:ec:b5:61:96:b1:19:c8:ad:d0:ac: a9:2f:a2:e9:bd:8b:a6:a4:33:8a:68:1b:3a:95:3f: 4c:0a:67:a5:2d:2f:70:8e:4a:7e:42:84:18:19:54: ed:26:a7:7f:eb:0f:c0:fe:2f:73:15:55:11:65:2f: 25:b0:93:96:c0:a9:ba:02:ac:a8:50:4e:f9:23:8a: 88:47:f4:b5:ed:bf:74:9e:b8:ad:a5:af:a4:78:04: c3:a9:40:7c:ca:81:af:bb:52:9f:75:fc:85:fd:28: eb:2a:e5:28:c5:a7:7d:0b:06:05:51:f7:8c:3e:fc: 80:ea:c0:ae:14:3d:ae:ea:a6:77:fe:b6:be:8a:ab: 64:67:7d:01:d4:86:b4:8d:b5:3c:ac:16:45:94:5c: fa:39:2d:2a:66:d1:de:24:b7:f8:c4:be:21:99:c8: ef:5c:00:31:77:09:9a:c3:7c:6f:66:ec:92:f7:d8: 34:0f:d5:2a:50:5f:07:bd:14:a8:c9:2d:17:e4:d4: 33:e4:63:05:e1:d5:f9:ef:83:06:93:42:dc:8a:ab: d0:32:a3:a4:8d:6b:0d:67:e2:7a:8a:d2:57:be:97: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:C0:63:AF:2F:91:4C:F9:2E:61:AD:B2:84:66:16:C1:E5:F2:D6 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:4c:51:19:c0:b7:1c:ac:3f:3c:85:f0:9b:b0:71:38:a0:db: 8b:fa:00:97:84:c3:47:82:3b:67:6a:42:27:a1:6b:2c:c6:20: 6b:1c:63:b9:21:12:1e:3d:b0:c6:59:44:60:20:03:e2:ea:4c: 74:19:ce:c9:1f:18:44:ca:c4:21:99:37:e0:da:8d:05:d3:37: 64:1e:37:22:03:d1:0b:d1:d4:84:1c:66:d4:d1:0e:81:cf:16: 89:bd:65:84:46:c0:c3:9e:d5:92:93:c3:fb:18:48:d3:21:00: f9:6c:66:ec:e7:ab:53:77:40:eb:61:b7:69:b9:67:e7:4b:29: c2:fa:24:19:8a:c0:24:1d:d9:4c:98:b6:30:59:3f:79:f8:ee: 72:91:a4:1f:13:04:18:9a:b4:89:b6:01:15:96:0a:9d:e6:03: 82:c8:87:13:db:e6:37:dc:be:ec:41:20:26:9f:91:b7:96:95: 9b:9c:d1:aa:ad:0b:7d:3b:30:bc:ca:e5:f1:fc:68:af:84:67: 69:1c:1c:30:4a:df:c9:19:e6:ff:13:24:22:d3:63:92:5c:8e: 33:d1:f3:7e:cb:d5:37:20:cc:2a:98:d3:74:40:a7:01:d9:ec: bc:bf:86:64:b3:d7:ad:a4:8b:f6:03:b1:ad:e4:52:0d:c0:ab: 55:8f:01:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUxMDIwMTY0NTMzWhcNMjUxMDI3MTY0NTMzWjAYMRYwFAYD VQQDEw02OGY2NjcyZC0wNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7RobC9K6VWj3M2iJNvVnOgcsOFrJzVjAF2y3wLLjw+foXey1YZaxGcit0Kyp L6LpvYumpDOKaBs6lT9MCmelLS9wjkp+QoQYGVTtJqd/6w/A/i9zFVURZS8lsJOW wKm6AqyoUE75I4qIR/S17b90nritpa+keATDqUB8yoGvu1KfdfyF/SjrKuUoxad9 CwYFUfeMPvyA6sCuFD2u6qZ3/ra+iqtkZ30B1Ia0jbU8rBZFlFz6OS0qZtHeJLf4 xL4hmcjvXAAxdwmaw3xvZuyS99g0D9UqUF8HvRSoyS0X5NQz5GMF4dX574MGk0Lc iqvQMqOkjWsNZ+J6itJXvpdjZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMcwGOv L5FM+S5hrbKEZhbB5fLWMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASTFEZwLccrD88hfCbsHE4oNuL+gCXhMNHgjtnakInoWssxiBrHGO5 IRIePbDGWURgIAPi6kx0Gc7JHxhEysQhmTfg2o0F0zdkHjciA9EL0dSEHGbU0Q6B zxaJvWWERsDDntWSk8P7GEjTIQD5bGbs56tTd0DrYbdpuWfnSynC+iQZisAkHdlM mLYwWT95+O5ykaQfEwQYmrSJtgEVlgqd5gOCyIcT2+Y33L7sQSAmn5G3lpWbnNGq rQt9OzC8yuXx/GivhGdpHBwwSt/JGeb/EyQi02OSXI4z0fN+y9U3IMwqmNN0QKcB 2ey8v4Zks9etpIv2A7Gt5FINwKtVjwGn -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:20 2025 by rpki-client