$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: sYLm34Pt4jhaWby2F9qXr6clVsSnbubh07WJuo7Z1Nc= Subject key identifier: 3C:6F:CB:80:7D:4F:9F:57:D5:BC:FF:04:08:0C:8E:56:A9:FC:2D:8B Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: CE Signing time: Sun 19 Oct 2025 08:48:13 +0000 Manifest this update: Sun 19 Oct 2025 08:48:13 +0000 Manifest next update: Sun 26 Oct 2025 08:48:13 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: AyE0st+tbU6yZC5PovKBXTY851oUTCoUXk+iP99S4Ns=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Oct 19 08:48:13 2025 GMT Not After : Oct 26 08:48:13 2025 GMT Subject: CN=68f4a5cd-b4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:f8:fc:b4:7a:80:c4:11:55:14:b8:13:b1: b0:ca:65:00:1e:21:ea:03:43:1a:e7:c3:fd:4a:55: 60:e5:8a:d8:65:d1:c2:d7:d6:39:ca:09:b3:de:a1: f1:ea:dc:32:dd:1e:1d:8c:74:ca:05:89:a8:bb:af: 7b:e3:37:84:3d:6c:f6:2c:ca:38:05:06:e8:6b:1e: 7e:b0:9f:64:0b:b2:4b:a9:a1:ba:cd:05:7a:cc:d6: f7:e1:e4:60:9c:c7:4d:38:16:8e:27:8f:cd:7d:8e: d8:7e:69:d1:29:8d:c5:c2:e3:ef:d8:7a:40:c8:a8: 7c:f0:ac:3c:49:55:63:42:ca:74:4a:53:09:cd:bb: c9:28:89:72:c4:1e:a9:d2:d9:e3:2b:9a:88:6f:05: a4:69:65:e0:e7:43:1b:79:ea:8d:c5:ea:af:da:41: 98:2a:91:46:68:d2:53:a6:3b:98:07:f1:75:8b:b4: 0f:90:fa:c9:90:49:6b:e2:9f:69:23:87:cd:7f:60: bc:55:88:40:c9:1d:a2:1f:46:34:c0:09:86:84:96: a5:b9:5e:ff:5c:f8:c6:85:38:5a:b6:11:e2:89:c5: 55:ce:0a:a5:84:1a:fb:00:c9:9f:96:88:5d:97:83: 03:57:d6:b5:bb:8f:7c:4d:53:da:3b:83:12:61:47: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6F:CB:80:7D:4F:9F:57:D5:BC:FF:04:08:0C:8E:56:A9:FC:2D:8B X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:79:3d:ba:fd:ff:13:6f:9f:43:ff:52:10:28:b1:c7:f8:81: 4f:d4:35:59:1a:52:6a:28:c5:33:c1:bc:db:e7:0e:d6:92:c6: 29:dc:56:74:3f:71:11:d9:63:ed:20:96:66:93:99:5b:ad:8f: 7b:cd:e5:a3:05:9f:33:cd:62:59:1f:07:f5:9f:30:0d:3c:24: 49:02:bd:1b:c7:e1:88:9a:08:d7:db:5b:1b:f8:6d:b5:f6:4b: c5:da:93:67:91:26:ef:9d:26:51:d4:9c:31:0b:a1:ad:9c:94: 0a:ba:19:c7:f2:c9:b8:e1:2d:bb:3f:7c:25:13:0f:b5:77:ab: af:99:12:de:00:c4:57:2c:71:45:a8:c1:05:88:53:3f:b7:02: 6f:9c:6a:de:db:ab:64:7a:fd:1f:5b:86:73:3a:51:56:b2:74: 7a:15:bf:36:b9:06:9b:a3:6c:18:d0:12:d4:dc:c9:94:ec:b0: d9:47:ff:e5:ad:10:7a:27:10:d9:7e:3f:76:a3:4f:01:be:46: 1f:e5:dc:5f:b8:97:3c:8e:35:c0:19:a6:5f:92:35:d8:a7:84: 72:9f:83:68:b6:9f:58:9f:e9:1a:74:36:7b:8e:88:8e:02:f3: 24:9f:01:1d:04:ae:65:27:e3:17:73:8f:4a:aa:29:f2:d3:dc: fc:4f:77:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE QzNFNzBDOUUwHhcNMjUxMDE5MDg0ODEzWhcNMjUxMDI2MDg0ODEzWjAYMRYwFAYD VQQDEw02OGY0YTVjZC1iNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8T4/LR6gMQRVRS4E7GwymUAHiHqA0Ma58P9SlVg5YrYZdHC19Y5ygmz3qHx 6twy3R4djHTKBYmou6974zeEPWz2LMo4BQboax5+sJ9kC7JLqaG6zQV6zNb34eRg nMdNOBaOJ4/NfY7YfmnRKY3FwuPv2HpAyKh88Kw8SVVjQsp0SlMJzbvJKIlyxB6p 0tnjK5qIbwWkaWXg50MbeeqNxeqv2kGYKpFGaNJTpjuYB/F1i7QPkPrJkElr4p9p I4fNf2C8VYhAyR2iH0Y0wAmGhJaluV7/XPjGhThathHiicVVzgqlhBr7AMmflohd l4MDV9a1u498TVPaO4MSYUdLVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxvy4B9 T59X1bz/BAgMjlap/C2LMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOeT26/f8Tb59D/1IQKLHH+IFP1DVZGlJqKMUzwbzb5w7WksYp3FZ0 P3ER2WPtIJZmk5lbrY97zeWjBZ8zzWJZHwf1nzANPCRJAr0bx+GImgjX21sb+G21 9kvF2pNnkSbvnSZR1JwxC6GtnJQKuhnH8sm44S27P3wlEw+1d6uvmRLeAMRXLHFF qMEFiFM/twJvnGre26tkev0fW4ZzOlFWsnR6Fb82uQabo2wY0BLU3MmU7LDZR//l rRB6JxDZfj92o08BvkYf5dxfuJc8jjXAGaZfkjXYp4Ryn4Notp9Yn+kadDZ7joiO AvMknwEdBK5lJ+MXc49Kqiny09z8T3cK -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:45 2025 by rpki-client