$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft File: 1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json) Hash identifier: qaCS0mDmiKERUaZX62P7UngPcr1IElBONMoUdlj5cVw= Subject key identifier: 6E:28:A8:BE:46:84:DE:2C:F7:FF:5E:44:1C:0C:92:61:4A:02:B8:5D Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 Certificate issuer: /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft Manifest number: 019A Signing time: Sun 19 Oct 2025 05:54:35 +0000 Manifest this update: Sun 19 Oct 2025 05:54:35 +0000 Manifest next update: Sun 26 Oct 2025 05:54:35 +0000 Files and hashes: 1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: eG9EbDbhgjL6KIsTG5Twt5ZPoDyj3pw3K0Bwqyhq27U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Validity Not Before: Oct 19 05:54:35 2025 GMT Not After : Oct 26 05:54:35 2025 GMT Subject: CN=68f47d1b-18bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:34:40:c4:1d:73:88:68:00:4a:5d:93:84: c3:55:87:60:75:13:cd:18:9b:f4:e4:f8:96:9a:b6: 11:7a:9e:46:0c:47:58:03:3d:56:f7:53:2c:fb:4f: 7c:28:f9:d4:f8:f2:9e:f7:17:78:4f:88:ac:8a:a1: 26:77:c4:87:37:56:d7:a3:81:92:e3:8c:8e:c9:1e: fe:a9:5f:a8:6c:af:cf:1c:f8:58:56:ca:79:c3:dd: 2c:a8:dd:17:10:3a:0e:ec:56:9f:4c:3c:f9:e2:83: 1c:2e:7f:67:5c:d3:11:95:c2:46:d9:ed:3f:ed:81: 39:77:f0:8b:36:be:02:3c:db:a1:79:77:48:57:77: 3f:48:8c:8e:1b:f6:27:ed:37:39:ec:7b:db:f8:51: b9:0f:94:bf:22:36:74:f7:b1:9e:1a:0f:6d:1c:eb: fe:f3:c6:a0:a4:cb:cc:6f:e4:c6:39:98:84:cc:fc: a6:05:0d:c9:06:83:37:37:57:16:9f:6a:df:6e:9b: 2d:e3:0c:e4:92:96:70:0b:8e:95:58:66:c7:b8:26: 62:10:0b:b9:e5:3b:fc:96:3e:69:17:40:a6:75:6e: 5a:a9:ea:ea:76:b8:e9:75:f1:7d:6a:1b:b8:6d:29: 32:67:15:b0:e9:9d:f3:98:68:dc:d9:5e:b3:fd:ae: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:28:A8:BE:46:84:DE:2C:F7:FF:5E:44:1C:0C:92:61:4A:02:B8:5D X509v3 Authority Key Identifier: keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c5:a5:cd:2a:4c:55:ff:8a:17:3e:66:76:e5:2c:31:e9:74: df:b8:bf:72:ff:4d:1f:3e:6f:79:1d:d9:a6:12:43:48:fa:c0: 8b:e7:35:05:35:b5:db:32:1f:1c:ba:ed:8a:18:70:9d:97:6c: 6f:97:62:d5:fd:24:42:a1:7e:cf:dc:04:dd:13:9f:63:f9:0c: 96:19:bf:5e:dd:8b:9b:86:bb:89:70:d8:70:81:ec:d4:1d:38: 5f:c3:a7:3d:ab:c6:a7:80:1e:f3:51:37:fc:57:14:7f:8d:0e: dc:f0:54:a1:a9:03:85:59:f1:aa:dc:92:3a:ea:f5:f2:21:33: 14:a0:72:cc:8b:09:cb:e5:55:3d:6b:d9:21:58:50:8c:ee:f6: 74:10:09:4a:a4:99:03:76:7b:1d:d0:a1:ff:fa:1a:a7:07:01: 32:b4:9c:51:d7:9d:e2:f3:52:4e:0c:72:b7:68:e5:31:3f:cc: 4b:9d:83:48:f9:39:c4:57:9d:6c:5d:02:4b:60:fb:ea:bf:12: b0:87:3b:17:6e:98:78:4d:6d:0e:8d:bf:7f:86:56:08:91:71: 4c:40:0e:59:00:03:a6:e0:9a:2d:83:82:85:11:13:bc:ee:52: 84:39:c1:f7:18:51:6f:e4:51:bf:96:2c:94:d6:03:cd:c5:7a: b3:1f:3e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBOTgxMTAvBgNVBAUTKEQ2MUQ3ODI0ODJFMjU0OEQyMjVEMUJDODg4ODM2Mzkz REVFMzk4MTIwHhcNMjUxMDE5MDU1NDM1WhcNMjUxMDI2MDU1NDM1WjAYMRYwFAYD VQQDEw02OGY0N2QxYi0xOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ80QMQdc4hoAEpdk4TDVYdgdRPNGJv05PiWmrYRep5GDEdYAz1W91Ms+098 KPnU+PKe9xd4T4isiqEmd8SHN1bXo4GS44yOyR7+qV+obK/PHPhYVsp5w90sqN0X EDoO7FafTDz54oMcLn9nXNMRlcJG2e0/7YE5d/CLNr4CPNuheXdIV3c/SIyOG/Yn 7Tc57Hvb+FG5D5S/IjZ097GeGg9tHOv+88agpMvMb+TGOZiEzPymBQ3JBoM3N1cW n2rfbpst4wzkkpZwC46VWGbHuCZiEAu55Tv8lj5pF0CmdW5aqerqdrjpdfF9ahu4 bSkyZxWw6Z3zmGjc2V6z/a4nfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4oqL5G hN4s9/9eRBwMkmFKArhdMB8GA1UdIwQYMBaAFNYdeCSC4lSNIl0byIiDY5Pe45gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEE5OC84RjQ4NjRFQTM1 RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJMGlYUnZJaUlOams5N2pt QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoMTRKSUxpVkkwaVhSdklpSU5qazk3am1CSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEE5OC84RjQ4NjRFQTM1RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJ MGlYUnZJaUlOams5N2ptQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJxaXNKkxV/4oXPmZ25Swx6XTfuL9y/00fPm95HdmmEkNI+sCL5zUF NbXbMh8cuu2KGHCdl2xvl2LV/SRCoX7P3ATdE59j+QyWGb9e3YubhruJcNhwgezU HThfw6c9q8angB7zUTf8VxR/jQ7c8FShqQOFWfGq3JI66vXyITMUoHLMiwnL5VU9 a9khWFCM7vZ0EAlKpJkDdnsd0KH/+hqnBwEytJxR153i81JODHK3aOUxP8xLnYNI +TnEV51sXQJLYPvqvxKwhzsXbph4TW0Ojb9/hlYIkXFMQA5ZAAOm4Jotg4KFERO8 7lKEOcH3GFFv5FG/liyU1gPNxXqzHz5F -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:45 2025 by rpki-client