$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: 3HQ6b72bTsXdNDKe+I+1rzvGMYiVivQS2GIWaBfsbMY= Subject key identifier: 35:2D:33:80:5C:FD:01:8D:E2:6B:4C:A8:15:5C:41:B1:E2:A9:23:A6 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0DA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0D9F Signing time: Sat 18 Oct 2025 18:35:28 +0000 Manifest this update: Sat 18 Oct 2025 18:35:27 +0000 Manifest next update: Sat 25 Oct 2025 18:35:27 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: Lrz2XqreZtXTzGYcYHqHeWbZryTq+SGgktw1a8NdFow=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Oct 18 18:35:27 2025 GMT Not After : Oct 25 18:35:27 2025 GMT Subject: CN=68f3ddef-2e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:06:5d:3c:3a:d8:a3:fc:2c:f1:2c:30:ca: 44:73:6d:23:8b:90:73:2f:92:be:e4:58:9b:8a:47: f9:fd:aa:5a:f5:a1:0b:9a:df:89:63:13:90:b4:60: 1b:e8:ce:9c:5d:ef:5c:8b:03:8e:9b:ce:d6:66:2a: d1:58:99:e1:af:2c:9f:6e:86:2f:63:82:e7:be:3e: 60:00:81:9b:ba:fe:e7:6d:a6:b2:74:41:fc:56:b2: b7:df:61:59:ef:78:3f:6e:8c:5d:39:3f:71:c4:71: 5f:b0:26:ad:b9:43:5b:93:07:37:78:b7:39:d8:b8: 08:8d:e9:c3:6f:b1:32:e5:6d:fd:3a:69:19:5a:a6: d1:2f:a7:70:f5:73:19:14:d0:37:16:51:60:43:59: 90:f6:b3:95:86:ae:ec:d5:b5:22:48:64:62:e9:56: e6:66:23:28:26:4d:d6:c6:24:df:2c:4c:21:60:11: a0:c4:9b:42:6e:d3:d3:ec:c8:17:39:6c:0e:78:d7: 79:a3:fe:16:63:0f:04:05:37:38:e4:05:28:f3:82: 99:aa:1c:21:31:f7:07:e6:58:46:0b:88:0a:c0:c5: 3d:5b:05:cf:3f:d5:09:8b:73:06:39:44:14:5c:9e: f8:42:e4:85:44:57:5d:fb:84:41:39:b9:33:47:8a: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2D:33:80:5C:FD:01:8D:E2:6B:4C:A8:15:5C:41:B1:E2:A9:23:A6 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d4:83:07:01:da:34:96:fd:0a:1a:fd:22:54:4a:7a:2d:fc: 1a:65:08:12:c6:3f:75:64:e4:e5:a9:b2:76:0a:31:1b:f4:99: 16:c8:1e:8d:20:58:19:3a:c6:89:e4:b5:40:06:3e:ab:15:00: b4:68:af:8b:13:13:64:ae:c2:64:54:90:02:d7:a5:c5:65:9c: 9c:5d:8d:bd:db:2b:7e:24:2c:44:26:72:2c:0c:7d:8a:29:b6: 56:f2:9b:30:5b:7c:74:43:cf:19:16:1a:8a:04:83:12:a3:37: 3d:6a:98:3a:4a:f7:e8:d1:b1:df:70:4e:e6:dd:29:56:af:e4: 86:bf:91:6b:2f:e6:79:e4:97:4c:0f:e4:6f:5a:5f:fb:5f:55: ca:3f:4c:11:09:19:30:40:ce:92:95:a8:ba:ea:ac:b0:e6:e0: 19:be:b4:3e:8b:f3:6c:ce:33:9f:10:7e:01:60:ad:a9:5a:d4: 32:bd:81:c5:ee:ce:5e:ac:f8:fd:eb:de:1d:a7:b2:e5:a7:d5: ce:f8:4d:b4:01:d7:43:0f:af:5c:05:ab:05:69:68:c4:f2:39: bc:52:3a:23:5e:c4:f4:5d:41:76:0e:3e:f1:cd:eb:65:73:8b: ab:5a:1c:f8:43:a5:7f:38:05:bd:34:a4:86:7b:c7:c3:84:45: 09:11:a5:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUxMDE4MTgzNTI3WhcNMjUxMDI1MTgzNTI3WjAYMRYwFAYD VQQDEw02OGYzZGRlZi0yZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2sGXTw62KP8LPEsMMpEc20ji5BzL5K+5Fibikf5/apa9aELmt+JYxOQtGAb 6M6cXe9ciwOOm87WZirRWJnhryyfboYvY4Lnvj5gAIGbuv7nbaaydEH8VrK332FZ 73g/boxdOT9xxHFfsCatuUNbkwc3eLc52LgIjenDb7Ey5W39OmkZWqbRL6dw9XMZ FNA3FlFgQ1mQ9rOVhq7s1bUiSGRi6VbmZiMoJk3WxiTfLEwhYBGgxJtCbtPT7MgX OWwOeNd5o/4WYw8EBTc45AUo84KZqhwhMfcH5lhGC4gKwMU9WwXPP9UJi3MGOUQU XJ74QuSFRFdd+4RBObkzR4qT0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUtM4Bc /QGN4mtMqBVcQbHiqSOmMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC61IMHAdo0lv0KGv0iVEp6LfwaZQgSxj91ZOTlqbJ2CjEb9JkWyB6N IFgZOsaJ5LVABj6rFQC0aK+LExNkrsJkVJAC16XFZZycXY292yt+JCxEJnIsDH2K KbZW8pswW3x0Q88ZFhqKBIMSozc9apg6Svfo0bHfcE7m3SlWr+SGv5FrL+Z55JdM D+RvWl/7X1XKP0wRCRkwQM6Slai66qyw5uAZvrQ+i/NszjOfEH4BYK2pWtQyvYHF 7s5erPj9694dp7Llp9XO+E20AddDD69cBasFaWjE8jm8UjojXsT0XUF2Dj7xzetl c4urWhz4Q6V/OAW9NKSGe8fDhEUJEaUF -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:08 2025 by rpki-client