$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: ziN6C/+BQ1qUA7MThvtCWCI0MjbapUWiZRMvDUrdrLY= Subject key identifier: 97:46:FE:88:A3:5A:D8:1C:5E:52:2F:85:44:E0:4D:5E:68:60:93:C2 Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 07D3 Signing time: Sat 18 Oct 2025 22:26:53 +0000 Manifest this update: Sat 18 Oct 2025 22:26:53 +0000 Manifest next update: Sat 25 Oct 2025 22:26:52 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: oYyTSMjM1eeLl/DzY1WUd6daCqJUgonx9By5bRjy9hw=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: IYriA7iqlPrIGEwVZWLwnn3g/0OVL8pkTIBJVf9/TyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: Oct 18 22:26:53 2025 GMT Not After : Oct 25 22:26:52 2025 GMT Subject: CN=68f4142d-5dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:f9:1c:99:02:e1:cc:6b:91:56:7d:23:51: ba:57:35:95:4a:15:cc:6a:9d:4a:65:9e:24:96:15: eb:02:df:be:b5:f1:3e:37:ee:84:9a:35:67:cc:5d: 0e:d7:e4:be:3b:7f:c6:03:9c:5f:36:64:6b:39:2c: cb:a6:0b:dc:cf:03:ce:07:13:9d:d1:43:e5:e1:e1: 62:1b:9b:e4:09:35:9c:5d:8f:93:03:15:95:db:dc: ea:32:1d:3e:19:9c:29:64:23:6e:5f:04:0a:55:af: e6:4f:17:f3:2b:30:04:af:55:51:70:07:06:48:1f: ac:86:4e:92:36:61:67:89:34:b5:a1:ea:ef:ff:d3: 22:81:7b:24:70:74:8c:4e:bf:21:d0:14:21:72:40: 9c:fc:3a:95:38:d7:96:d2:e0:92:0f:57:03:ae:b1: 71:c3:d9:2e:7f:4f:5e:41:29:a6:d9:2a:bf:db:f6: 3a:73:0f:3d:70:aa:12:5a:71:3c:ff:3a:6c:7c:1d: 78:9a:8c:21:da:f5:f4:d5:43:9d:92:83:07:0e:80: df:56:9d:de:18:1f:a0:d9:50:52:cf:3c:d8:4a:4d: 49:f1:77:39:de:c3:a5:26:96:99:10:d5:9f:84:05: 5a:e0:52:f9:4f:5e:1d:85:7c:d3:8e:63:ef:15:7c: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:FE:88:A3:5A:D8:1C:5E:52:2F:85:44:E0:4D:5E:68:60:93:C2 X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:65:92:95:3b:4d:16:8a:09:e1:76:10:4f:7f:db:c1:ef:6c: a5:6a:79:0b:18:b1:74:bc:7d:d9:8c:ef:99:b6:02:42:58:6f: 6e:50:c0:31:58:cd:72:83:7c:6b:8d:7f:b7:62:81:42:3e:6a: 6a:34:9a:20:51:a2:ec:f7:e6:b7:69:cf:75:ea:da:49:d8:e6: f3:6d:20:6f:90:d3:27:2e:6f:9e:fc:50:95:2b:4c:95:61:98: 38:c1:ac:69:28:34:42:3e:34:8c:b5:e7:73:d2:2e:f2:33:71: 59:26:02:47:e6:52:c5:38:cb:ce:b4:01:28:25:4f:dc:7b:b3: a8:51:f5:81:8f:51:1a:22:57:a4:59:78:aa:9f:bf:a0:06:ae: ec:32:47:95:69:ec:88:ab:0c:f9:ca:b4:44:15:5d:84:1d:db: 7c:f1:48:d7:f3:ef:40:ee:a7:c1:4c:67:8a:dc:65:92:fa:84: 48:1c:4d:43:49:26:ec:05:38:f9:75:4f:b9:4a:21:92:31:4e: 7c:f4:10:e0:f4:44:90:e6:cf:9f:1d:de:ff:51:18:74:db:66: 88:70:86:d9:ab:fb:23:24:81:ae:2d:81:8a:4b:5c:94:48:33: 96:eb:63:3a:92:13:40:97:37:66:6c:4b:a3:31:f0:09:93:65: e8:8f:dd:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjUxMDE4MjIyNjUzWhcNMjUxMDI1MjIyNjUyWjAYMRYwFAYD VQQDEw02OGY0MTQyZC01ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzD5HJkC4cxrkVZ9I1G6VzWVShXMap1KZZ4klhXrAt++tfE+N+6EmjVnzF0O 1+S+O3/GA5xfNmRrOSzLpgvczwPOBxOd0UPl4eFiG5vkCTWcXY+TAxWV29zqMh0+ GZwpZCNuXwQKVa/mTxfzKzAEr1VRcAcGSB+shk6SNmFniTS1oerv/9MigXskcHSM Tr8h0BQhckCc/DqVONeW0uCSD1cDrrFxw9kuf09eQSmm2Sq/2/Y6cw89cKoSWnE8 /zpsfB14mowh2vX01UOdkoMHDoDfVp3eGB+g2VBSzzzYSk1J8Xc53sOlJpaZENWf hAVa4FL5T14dhXzTjmPvFXwu5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdG/oij WtgcXlIvhUTgTV5oYJPCMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLZZKVO00WignhdhBPf9vB72ylankLGLF0vH3ZjO+ZtgJCWG9uUMAx WM1yg3xrjX+3YoFCPmpqNJogUaLs9+a3ac916tpJ2ObzbSBvkNMnLm+e/FCVK0yV YZg4waxpKDRCPjSMtedz0i7yM3FZJgJH5lLFOMvOtAEoJU/ce7OoUfWBj1EaIlek WXiqn7+gBq7sMkeVaeyIqwz5yrREFV2EHdt88UjX8+9A7qfBTGeK3GWS+oRIHE1D SSbsBTj5dU+5SiGSMU589BDg9ESQ5s+fHd7/URh022aIcIbZq/sjJIGuLYGKS1yU SDOW62M6khNAlzdmbEujMfAJk2Xoj93q -----END CERTIFICATE-----Generated at Tue Oct 21 02:39:39 2025 by rpki-client