$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json) Hash identifier: 7i3JSgGPRp7woa8NKBDDZlM23VIx7FX5HO8wAl6sStc= Subject key identifier: AB:0F:46:A4:AC:E5:F8:45:E4:96:1A:5A:F0:BF:C9:6F:33:90:89:98 Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft Manifest number: 3D Signing time: Sun 19 Oct 2025 10:59:31 +0000 Manifest this update: Sun 19 Oct 2025 10:59:30 +0000 Manifest next update: Sun 26 Oct 2025 10:59:30 +0000 Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: y1aE+CviM6cCFJsE0wiLmbu058FuwfZQyx0Hj55rNHY=) 2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: kbwAloXsrTWCITEmD+odpUzfYSBQf6qqCRC37VKW0HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Validity Not Before: Oct 19 10:59:30 2025 GMT Not After : Oct 26 10:59:30 2025 GMT Subject: CN=68f4c492-94ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:9d:01:12:f5:84:9d:31:ca:17:f3:c6:7a: c5:1f:6c:75:60:7d:80:01:4f:d4:7d:2d:eb:43:4f: c9:47:94:44:48:b1:d1:86:ec:2c:17:35:7b:2b:a3: 8a:57:b6:64:38:3a:5d:ca:52:28:6c:75:c0:4b:2a: 70:b5:de:ff:26:99:f2:8d:f6:c6:de:c2:94:3b:c2: 6c:85:14:12:d3:f1:d0:4e:2b:2d:6a:68:52:97:05: b0:39:6b:35:82:1c:69:41:71:d3:14:12:0b:ac:18: de:33:bb:ae:64:20:99:f3:c7:52:b7:e8:4a:e8:75: e8:8e:24:0a:b9:9f:cd:76:34:cb:7b:cb:62:3b:7f: a0:55:f6:80:68:58:8c:63:6a:91:b4:de:8b:54:97: c7:ee:4e:57:cf:a5:85:ac:c5:3e:a3:02:29:ee:91: 66:d8:a0:4e:1f:28:92:60:50:5b:6a:12:f2:b5:d6: 1a:d4:58:59:e6:65:0a:a5:d7:82:f7:fb:b5:ba:b2: 55:18:7f:c3:2a:00:80:a3:75:8c:89:9a:d6:1a:37: d2:db:c3:51:f4:e6:af:86:ac:93:8c:ef:04:fa:59: 2a:17:ff:f1:53:26:5c:0b:06:36:66:a1:7a:44:2a: 85:d4:bc:e6:77:80:c9:d6:3d:c6:61:56:d5:e0:10: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0F:46:A4:AC:E5:F8:45:E4:96:1A:5A:F0:BF:C9:6F:33:90:89:98 X509v3 Authority Key Identifier: keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d0:cf:a0:a3:32:57:3c:d3:47:e6:f4:89:54:64:d3:b2:6d: d5:51:89:9b:65:08:00:63:e0:d6:51:77:e4:5e:c6:aa:72:22: d6:ff:d1:27:1c:57:f3:18:07:1a:b0:52:96:dd:88:d4:2c:78: 19:d8:e6:c2:4b:a5:2e:de:94:cd:7f:01:c9:6c:e5:b1:d5:cf: db:cf:6b:95:b4:8e:0e:b6:e8:8e:19:e0:1a:05:d7:44:b0:02: ca:eb:fe:04:3f:47:10:be:0e:40:4a:36:74:95:f0:03:58:48: 1a:0a:34:36:25:b3:a4:81:2d:41:41:00:90:2e:65:1d:46:a7: 25:e5:bc:dc:7c:b1:26:db:e8:54:74:33:f2:58:4c:8f:ba:ad: 73:79:3d:47:c5:88:cb:b0:62:c2:50:8d:8d:73:60:61:df:80: 40:a2:a9:69:5b:ae:0d:6e:11:ef:6a:90:37:9a:c0:06:39:b6: 2a:19:70:bc:e4:ff:bc:dc:ca:50:12:42:3c:08:a7:0e:f8:a7: a5:79:48:df:aa:10:18:39:fe:af:d0:53:55:9f:2d:a0:64:82: 7b:d2:a5:c5:47:24:ec:34:bc:6e:aa:dc:a6:df:fe:e7:b7:4c: 9c:ec:5d:7c:0e:0d:5b:c6:39:88:b6:b8:98:1c:7e:e6:59:84: 32:9c:cb:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjZFRjExMC8GA1UEBRMoOUEwMjNCODBBQkNGNEU2Nzk3RDM4OEMwREU4MTYwQTE2 RUIxNURGRTAeFw0yNTEwMTkxMDU5MzBaFw0yNTEwMjYxMDU5MzBaMBgxFjAUBgNV BAMTDTY4ZjRjNDkyLTk0Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDGZ0BEvWEnTHKF/PGesUfbHVgfYABT9R9LetDT8lHlERIsdGG7CwXNXsro4pX tmQ4Ol3KUihsdcBLKnC13v8mmfKN9sbewpQ7wmyFFBLT8dBOKy1qaFKXBbA5azWC HGlBcdMUEgusGN4zu65kIJnzx1K36ErodeiOJAq5n812NMt7y2I7f6BV9oBoWIxj apG03otUl8fuTlfPpYWsxT6jAinukWbYoE4fKJJgUFtqEvK11hrUWFnmZQql14L3 +7W6slUYf8MqAICjdYyJmtYaN9Lbw1H05q+GrJOM7wT6WSoX//FTJlwLBjZmoXpE KoXUvOZ3gMnWPcZhVtXgEOTXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqw9GpKzl +EXklhpa8L/JbzOQiZgwHwYDVR0jBBgwFoAUmgI7gKvPTmeX04jA3oFgoW6xXf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNkVGL0FDQkY2RjJBNTc0 MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1lWDA0akEzb0Znb1c2eFhm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWdJN2dLdlBUbWVYMDRqQTNvRmdvVzZ4WGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NkVGL0FDQkY2RjJBNTc0MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1l WDA0akEzb0Znb1c2eFhmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/Qz6CjMlc800fm9IlUZNOybdVRiZtlCABj4NZRd+RexqpyItb/0Scc V/MYBxqwUpbdiNQseBnY5sJLpS7elM1/Acls5bHVz9vPa5W0jg626I4Z4BoF10Sw Asrr/gQ/RxC+DkBKNnSV8ANYSBoKNDYls6SBLUFBAJAuZR1GpyXlvNx8sSbb6FR0 M/JYTI+6rXN5PUfFiMuwYsJQjY1zYGHfgECiqWlbrg1uEe9qkDeawAY5tioZcLzk /7zcylASQjwIpw74p6V5SN+qEBg5/q/QU1WfLaBkgnvSpcVHJOw0vG6q3Kbf/ue3 TJzsXXwODVvGOYi2uJgcfuZZhDKcy4w= -----END CERTIFICATE-----Generated at Tue Oct 21 02:39:39 2025 by rpki-client