$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: Ur5UJ3GcxJb0wVjiJN1uekQkn6c+HPPSzvzzsIhkKg0= Subject key identifier: 38:CE:83:46:E7:F3:66:61:2E:70:3C:FB:BE:15:F9:4D:D1:F5:9F:50 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 04FC Signing time: Sun 19 Oct 2025 01:30:34 +0000 Manifest this update: Sun 19 Oct 2025 01:30:33 +0000 Manifest next update: Sun 26 Oct 2025 01:30:33 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: AlCmKeuLPUIYvSpHV3pwUolUn7I7pv4KjZavDwMyezM=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: Oct 19 01:30:33 2025 GMT Not After : Oct 26 01:30:33 2025 GMT Subject: CN=68f43f3a-0f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:ff:c4:39:a6:84:6c:f2:67:f2:55:e8:bb: 83:42:64:ee:f5:63:c8:f2:85:c5:3b:a1:5c:d4:5c: 19:a5:25:1c:eb:42:ec:89:4d:8a:b6:48:ad:b4:43: ff:28:b6:32:80:bc:ee:b3:0e:a6:71:62:a6:b5:5f: fc:12:79:72:08:6d:72:ec:b2:e8:e9:b0:9b:a8:eb: 3f:a8:5f:f9:c3:7c:41:35:d8:ce:68:85:2b:4f:61: 52:fc:2d:88:86:7f:4b:48:5b:92:fc:33:fc:43:fb: b8:4b:18:bd:fb:84:a3:24:2f:0e:80:58:7d:66:b3: 61:5b:e3:e2:d7:28:2e:af:9e:1b:be:5a:71:ba:a6: bd:a0:27:b0:ea:4b:6b:d1:6f:bd:53:8e:6f:1f:25: 3a:f6:5a:0f:70:c6:d8:de:da:95:42:09:e4:5b:a7: cf:82:f7:47:96:a6:31:88:85:1b:ea:78:54:9f:05: 19:97:ea:13:a7:bf:fc:ad:b9:9b:b3:ac:87:95:99: 8d:57:03:42:c3:a7:5f:11:09:38:8f:ad:a0:14:8f: e3:68:e7:13:b8:33:43:60:c3:e2:bb:2b:5f:d0:77: 7b:8d:8f:76:0b:ca:6c:2b:a9:cf:59:21:4e:9e:08: 29:0c:33:23:c1:7a:eb:9f:ee:05:9b:1c:35:61:ad: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CE:83:46:E7:F3:66:61:2E:70:3C:FB:BE:15:F9:4D:D1:F5:9F:50 X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:31:25:61:5c:c4:51:3a:7a:cf:d7:e5:4b:79:24:55:04:27: 2e:57:10:59:d5:9b:20:4b:50:1a:28:e6:86:0e:72:ae:f4:a4: ce:b0:e5:55:d7:44:51:1a:b9:4a:a2:30:eb:8f:71:2e:8d:c3: 41:ec:9f:32:8a:c4:39:69:e5:b8:27:a9:5a:73:54:70:f0:86: bd:59:9b:d1:04:ef:72:93:f7:aa:11:67:c5:81:f0:6c:81:cc: 68:7a:89:51:cd:f0:70:28:74:70:04:79:4f:79:71:c3:a7:05: 2d:62:da:4d:d2:0b:9a:bc:20:74:22:e6:a4:b5:2b:db:49:1e: 64:3b:f7:d7:08:16:8e:72:92:04:83:83:a8:47:a4:7e:01:39: c0:58:32:4c:7f:5e:ef:6d:92:54:f4:ed:d5:82:c3:31:10:f9: 81:97:81:73:26:62:fa:bb:96:84:05:6e:90:72:03:fb:f5:db: fe:89:24:5b:a0:31:45:c7:04:27:76:d4:d1:a9:48:84:dd:25: 34:bd:44:d6:73:f0:5b:66:13:94:14:ba:9e:41:c9:5f:01:3c: 84:1a:51:d6:2b:09:e4:53:5f:0f:60:00:31:fd:28:92:88:ca: f8:13:37:43:70:14:c3:c8:6c:7e:6f:c2:61:49:07:93:85:22: 13:f2:ed:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUxMDE5MDEzMDMzWhcNMjUxMDI2MDEzMDMzWjAYMRYwFAYD VQQDEw02OGY0M2YzYS0wZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRn/xDmmhGzyZ/JV6LuDQmTu9WPI8oXFO6Fc1FwZpSUc60LsiU2KtkittEP/ KLYygLzusw6mcWKmtV/8EnlyCG1y7LLo6bCbqOs/qF/5w3xBNdjOaIUrT2FS/C2I hn9LSFuS/DP8Q/u4Sxi9+4SjJC8OgFh9ZrNhW+Pi1ygur54bvlpxuqa9oCew6ktr 0W+9U45vHyU69loPcMbY3tqVQgnkW6fPgvdHlqYxiIUb6nhUnwUZl+oTp7/8rbmb s6yHlZmNVwNCw6dfEQk4j62gFI/jaOcTuDNDYMPiuytf0Hd7jY92C8psK6nPWSFO nggpDDMjwXrrn+4Fmxw1Ya3ktQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjOg0bn 82ZhLnA8+74V+U3R9Z9QMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHMSVhXMRROnrP1+VLeSRVBCcuVxBZ1ZsgS1AaKOaGDnKu9KTOsOVV 10RRGrlKojDrj3EujcNB7J8yisQ5aeW4J6lac1Rw8Ia9WZvRBO9yk/eqEWfFgfBs gcxoeolRzfBwKHRwBHlPeXHDpwUtYtpN0guavCB0IuaktSvbSR5kO/fXCBaOcpIE g4OoR6R+ATnAWDJMf17vbZJU9O3VgsMxEPmBl4FzJmL6u5aEBW6QcgP79dv+iSRb oDFFxwQndtTRqUiE3SU0vUTWc/BbZhOUFLqeQclfATyEGlHWKwnkU18PYAAx/SiS iMr4EzdDcBTDyGx+b8JhSQeThSIT8u04 -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:56 2025 by rpki-client