$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: hxBQO+qjCAZapAZIAPsdaxZCBR+z5tJsNj2TPGSI+2M= Subject key identifier: D5:17:4E:3B:84:42:66:40:BB:E0:55:80:59:48:24:0D:64:66:7B:CF Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 27D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 277B Signing time: Sat 18 Oct 2025 15:52:17 +0000 Manifest this update: Sat 18 Oct 2025 15:52:16 +0000 Manifest next update: Sat 25 Oct 2025 15:52:16 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: vlSjnKXyIkDIIi8luFbtTsEPFT5ld9krZTtPP5UICNQ=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: tAGi/sSZ9el7Z/s+1sNJT90gzy4cpKpqrErB6Bm68K0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10192 (0x27d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Oct 18 15:52:16 2025 GMT Not After : Oct 25 15:52:16 2025 GMT Subject: CN=68f3b7b1-594d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:79:b0:78:d6:7c:ee:5f:f9:a4:d3:3d:80: 6a:4a:d1:9b:d6:ca:e2:29:34:d7:58:1d:77:28:e6: 7a:01:15:e9:11:45:56:75:ff:89:44:d8:19:c3:6f: ed:73:c8:ed:44:00:8e:86:b7:01:d0:a1:b0:ab:c7: f8:81:ff:0c:64:ee:c0:02:a5:39:01:fd:a8:42:1f: 86:6f:12:5b:5d:33:b6:19:6d:53:dc:f9:cd:e8:ac: 18:ae:27:94:23:88:81:37:7e:f9:2c:88:f3:da:35: 5c:7b:2c:1a:e6:17:c1:f7:81:6a:cc:95:ac:65:46: 68:45:c8:3e:26:7c:f3:db:38:8c:bf:e9:b8:32:cc: 8b:19:69:67:3d:c2:cc:68:f9:dd:33:6b:0d:73:4c: ab:3c:54:98:c3:22:aa:cb:b5:48:f8:c1:74:b0:90: fa:69:7d:5a:81:32:5d:e9:9e:65:26:e6:e2:8e:6c: 46:96:57:aa:59:03:02:1b:a0:9f:ee:4d:1b:98:79: 53:95:a1:47:7a:12:95:ba:40:c8:96:49:d0:e8:c4: 7f:6e:ca:6b:72:30:23:a7:86:fb:10:87:79:36:5e: d8:34:e3:88:67:37:c1:d2:4b:a1:8e:d6:19:5b:ee: 42:66:02:9e:6a:97:fa:8b:90:e1:b8:85:c9:0f:ee: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:17:4E:3B:84:42:66:40:BB:E0:55:80:59:48:24:0D:64:66:7B:CF X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c8:69:8b:d8:43:33:cb:75:8b:b9:31:0d:f1:a1:de:1d:b7: 55:44:bd:fb:77:b4:c7:f4:fe:79:61:07:39:1d:db:d9:f5:82: 0d:9b:b4:15:0c:81:9b:91:56:39:59:75:ca:fb:1f:41:13:7e: b2:1d:92:3e:a7:90:8c:a4:03:75:ec:66:5c:09:87:ef:b8:37: d5:1b:1c:aa:67:a4:25:75:e5:57:e2:98:26:fc:df:02:42:c0: 04:cb:ef:65:11:90:03:d1:c1:54:99:ef:b4:1f:df:b0:40:02: 32:8a:46:3f:60:6c:46:7c:16:70:0d:94:36:0f:22:8d:98:2b: 08:98:50:67:7d:5f:33:bd:50:70:e7:55:04:3f:38:d1:66:0f: 74:7e:ac:3c:60:1f:cf:e6:7d:0a:78:b0:3a:6f:e6:14:cd:0a: 93:fc:cd:34:03:f6:06:40:e6:cd:f3:d2:18:eb:9b:3f:f8:92: 1a:1c:f2:82:03:a0:65:9e:3a:45:28:ae:3c:ce:25:3c:9c:7d: b4:e8:d9:be:b2:6a:6c:e2:d8:68:51:3c:6e:6d:bd:aa:df:da: e3:58:23:fa:ef:e2:46:ad:71:5f:b3:6d:ba:c7:a1:76:5d:99: be:b5:8d:23:2e:36:5b:50:42:2f:a9:9f:13:49:d9:4d:eb:10: cf:dd:c5:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUxMDE4MTU1MjE2WhcNMjUxMDI1MTU1MjE2WjAYMRYwFAYD VQQDEw02OGYzYjdiMS01OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0St5sHjWfO5f+aTTPYBqStGb1sriKTTXWB13KOZ6ARXpEUVWdf+JRNgZw2/t c8jtRACOhrcB0KGwq8f4gf8MZO7AAqU5Af2oQh+GbxJbXTO2GW1T3PnN6KwYrieU I4iBN375LIjz2jVceywa5hfB94FqzJWsZUZoRcg+Jnzz2ziMv+m4MsyLGWlnPcLM aPndM2sNc0yrPFSYwyKqy7VI+MF0sJD6aX1agTJd6Z5lJubijmxGlleqWQMCG6Cf 7k0bmHlTlaFHehKVukDIlknQ6MR/bsprcjAjp4b7EId5Nl7YNOOIZzfB0kuhjtYZ W+5CZgKeapf6i5DhuIXJD+4amwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUXTjuE QmZAu+BVgFlIJA1kZnvPMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxyGmL2EMzy3WLuTEN8aHeHbdVRL37d7TH9P55YQc5HdvZ9YINm7QV DIGbkVY5WXXK+x9BE36yHZI+p5CMpAN17GZcCYfvuDfVGxyqZ6QldeVX4pgm/N8C QsAEy+9lEZAD0cFUme+0H9+wQAIyikY/YGxGfBZwDZQ2DyKNmCsImFBnfV8zvVBw 51UEPzjRZg90fqw8YB/P5n0KeLA6b+YUzQqT/M00A/YGQObN89IY65s/+JIaHPKC A6BlnjpFKK48ziU8nH206Nm+smps4thoUTxubb2q39rjWCP67+JGrXFfs226x6F2 XZm+tY0jLjZbUEIvqZ8TSdlN6xDP3cU4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:55 2025 by rpki-client