$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: x6Rt0X6yg5ADJ+vi7fs1dfQPBrayA0R3ERTc2q4rIwE= Subject key identifier: D8:7D:64:29:3C:4D:D9:8A:F3:E0:91:7A:EE:11:94:EB:77:AB:26:62 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0242 Signing time: Sun 19 Oct 2025 04:05:34 +0000 Manifest this update: Sun 19 Oct 2025 04:05:33 +0000 Manifest next update: Sun 26 Oct 2025 04:05:33 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: Z2W5nzbeKeOybfzb5dRUO0wx045r4RJii5589HDL2SI=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MZHDnQTf/dFDpmRBSaKkw2lQHaXIZOFR/RasHh1wgfk=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Oct 19 04:05:33 2025 GMT Not After : Oct 26 04:05:33 2025 GMT Subject: CN=68f4638e-34c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:80:c5:4d:90:8b:a0:cc:e9:54:e9:b9:2e: 84:41:d1:1e:f3:e3:19:b5:e7:85:3d:da:66:a5:28: f9:68:1b:a3:23:b8:9e:7d:a3:3a:1b:19:a9:d7:a0: 83:61:63:88:a1:3d:3d:92:1b:cf:54:2d:7d:4f:02: 15:f4:c9:cb:9e:fd:f8:cf:3b:05:79:fa:e4:be:22: f0:e5:f2:84:63:a0:cb:ff:e3:f7:86:6a:f6:8b:f0: 1c:89:a7:a1:f7:51:67:d9:8d:cb:c6:42:a3:b9:dd: 41:6f:8f:b2:e5:08:fe:3c:c7:7b:d2:96:e2:83:1a: 10:be:66:b8:bf:b0:78:f4:f0:5c:4c:eb:e5:d8:00: 23:26:08:c2:cc:85:54:42:44:db:3f:9a:6b:85:f8: c4:d6:b8:5e:33:d6:b0:25:4f:ec:07:bb:e0:32:af: 9e:01:60:2a:47:16:da:af:31:67:2c:2f:30:f6:a8: 14:43:16:cd:49:77:84:96:7b:f0:1a:4a:e9:8e:dc: eb:5b:aa:2f:b4:7a:22:c7:ba:6c:5d:ea:4e:fc:7a: bd:b0:3b:31:5f:7f:f6:2c:88:0b:e7:fd:d6:8d:6c: b4:15:f8:7b:13:dd:c2:87:d7:39:e1:26:72:bd:3e: e7:94:99:e1:3b:07:b8:e1:c4:a0:4d:b2:86:b9:7d: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7D:64:29:3C:4D:D9:8A:F3:E0:91:7A:EE:11:94:EB:77:AB:26:62 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7f:a3:53:41:24:56:3a:46:8b:7a:97:a8:06:95:57:3c:a0: 3f:11:f5:1c:e5:3d:31:27:e5:a5:a2:f9:d9:b2:9e:b2:0e:e7: 2d:74:f7:1b:50:44:62:73:7e:e7:d0:1a:b1:dc:30:d4:b3:f6: eb:fd:b3:8a:10:42:2a:41:11:3d:80:75:d6:77:76:f2:94:d6: 2c:30:df:3e:40:ea:f3:fd:1c:b1:a7:56:7b:03:41:8a:35:8e: f6:9a:88:ab:52:de:0e:d1:11:e3:4c:4e:49:4a:d7:33:54:90: 4d:50:ab:46:93:50:15:26:cc:7e:a6:70:15:eb:3e:a3:a4:bf: c3:b5:26:fc:7c:84:54:d5:2e:39:25:0d:8e:5b:7f:d1:b5:4b: f8:2f:80:d0:45:9d:e6:d9:16:ae:1e:11:b7:14:da:1c:1c:cc: 47:81:61:4a:4c:57:19:27:6d:5d:08:8e:8e:27:64:9c:d4:d1: a2:61:c0:9f:41:89:d4:fc:27:39:95:d4:ca:b3:3a:8b:db:7b: 12:f1:57:10:35:a5:66:67:62:df:1b:dc:70:99:8c:67:0b:8f: 8d:61:30:66:20:a1:0c:47:39:36:f8:d1:05:a2:ae:9b:86:d9: 37:b1:a8:96:76:55:c5:41:9f:dd:c6:39:04:d4:82:72:fd:2e: 1c:51:73:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUxMDE5MDQwNTMzWhcNMjUxMDI2MDQwNTMzWjAYMRYwFAYD VQQDEw02OGY0NjM4ZS0zNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4qAxU2Qi6DM6VTpuS6EQdEe8+MZteeFPdpmpSj5aBujI7iefaM6Gxmp16CD YWOIoT09khvPVC19TwIV9MnLnv34zzsFefrkviLw5fKEY6DL/+P3hmr2i/Aciaeh 91Fn2Y3LxkKjud1Bb4+y5Qj+PMd70pbigxoQvma4v7B49PBcTOvl2AAjJgjCzIVU QkTbP5prhfjE1rheM9awJU/sB7vgMq+eAWAqRxbarzFnLC8w9qgUQxbNSXeElnvw GkrpjtzrW6ovtHoix7psXepO/Hq9sDsxX3/2LIgL5/3WjWy0Ffh7E93Ch9c54SZy vT7nlJnhOwe44cSgTbKGuX11WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh9ZCk8 TdmK8+CReu4RlOt3qyZiMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARf6NTQSRWOkaLepeoBpVXPKA/EfUc5T0xJ+WlovnZsp6yDuctdPcb UERic37n0Bqx3DDUs/br/bOKEEIqQRE9gHXWd3bylNYsMN8+QOrz/Ryxp1Z7A0GK NY72moirUt4O0RHjTE5JStczVJBNUKtGk1AVJsx+pnAV6z6jpL/DtSb8fIRU1S45 JQ2OW3/RtUv4L4DQRZ3m2RauHhG3FNocHMxHgWFKTFcZJ21dCI6OJ2Sc1NGiYcCf QYnU/Cc5ldTKszqL23sS8VcQNaVmZ2LfG9xwmYxnC4+NYTBmIKEMRzk2+NEFoq6b htk3saiWdlXFQZ/dxjkE1IJy/S4cUXPe -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:23 2025 by rpki-client