$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: y2jUvY6tmvk82V9YF5qnGJbrEZ7c5lZ99JnYb0lFhkA= Subject key identifier: CA:08:7E:BA:08:9A:AC:CC:53:DE:E9:C0:30:99:D5:4E:0D:7E:34:86 Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 109C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 1094 Signing time: Mon 20 Oct 2025 17:48:33 +0000 Manifest this update: Mon 20 Oct 2025 17:48:32 +0000 Manifest next update: Mon 27 Oct 2025 17:48:32 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: TGb190qr0mtUi4+FZY0aj0gU7VAfVMNxic84O9oCfCA=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4252 (0x109c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Oct 20 17:48:32 2025 GMT Not After : Oct 27 17:48:32 2025 GMT Subject: CN=68f675f1-6967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:9a:56:79:53:98:a9:71:e2:19:80:75:6f: 03:bb:be:60:75:14:2a:1f:10:e1:2d:2d:46:61:70: b9:b6:aa:95:cf:81:f6:65:90:70:cd:3e:4d:17:ba: 21:9c:59:c5:08:b7:de:68:27:d2:ca:29:d3:4a:26: d4:cd:e4:5c:b4:3f:c5:40:e1:7c:98:70:58:f6:a4: 66:f8:4b:16:55:76:ad:9f:c0:e7:8a:d8:d1:82:55: 0a:eb:af:6a:6b:92:ed:9a:24:13:43:c5:75:ac:46: c7:8c:14:49:ba:4f:6d:e8:dc:62:02:e6:a3:e6:08: ff:02:f4:9b:47:d6:1b:50:ca:43:54:a9:9f:5c:fd: f4:54:bb:db:f4:34:ef:1b:1e:bd:3c:4a:8f:cf:1b: 42:a0:00:fc:87:6b:35:64:4c:01:94:63:23:70:be: c4:74:aa:40:84:d2:5a:e4:16:56:c6:e4:85:f1:40: a2:6d:ad:e6:94:0f:67:02:4f:a8:51:c4:00:7c:c8: a3:7b:70:1e:e9:d0:66:a4:3f:29:d4:30:e6:5d:86: 07:3f:be:37:b1:62:18:b6:41:54:ef:7b:9c:fc:df: 29:50:f5:67:1f:f5:d2:20:6a:60:50:a1:c1:eb:c0: 08:a0:ef:44:50:49:1f:8c:b0:7d:55:45:bc:da:d1: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:7E:BA:08:9A:AC:CC:53:DE:E9:C0:30:99:D5:4E:0D:7E:34:86 X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:16:1f:7d:6e:76:f0:bf:ed:1f:5b:47:88:64:b6:4d:63:c8: d6:c1:13:ac:c5:eb:b6:da:fa:8c:78:92:75:c3:c9:7a:b1:11: ee:32:de:1b:98:b4:ce:83:94:05:ec:47:4e:42:0f:fb:7b:e8: 8e:4a:f9:13:f7:b4:48:6e:92:da:25:c5:11:d4:35:24:f7:90: f2:c1:e8:c6:56:fb:66:aa:43:eb:b0:95:db:8c:a8:cc:59:c9: 92:7c:55:20:32:47:26:98:56:b5:ae:42:96:72:64:a8:96:d3: 48:4e:67:b6:bb:f2:f7:94:54:f8:4c:36:5e:a8:55:3b:09:68: e0:8a:f4:0f:f8:c1:c9:f5:85:2b:f5:47:9e:1b:6a:2b:56:93: 81:0f:7d:28:0f:91:8e:1d:a1:99:5b:d4:27:b8:59:97:1b:d3: a6:d2:63:b4:ba:48:d7:aa:48:95:a4:f6:dc:1d:28:f4:43:57: 7f:3a:25:57:e2:50:7c:98:35:df:79:83:46:06:1c:59:4c:46: 54:91:64:70:b6:15:4a:fa:b0:25:10:7a:fc:3f:2b:e6:52:99: f1:cc:c2:8b:ab:5e:74:d3:56:b4:ce:ed:21:11:fd:51:03:92: ac:42:e9:9e:f9:e8:e5:df:ff:fc:ec:f8:e0:62:3d:0b:4b:a0: 42:ef:78:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUxMDIwMTc0ODMyWhcNMjUxMDI3MTc0ODMyWjAYMRYwFAYD VQQDEw02OGY2NzVmMS02OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFqaVnlTmKlx4hmAdW8Du75gdRQqHxDhLS1GYXC5tqqVz4H2ZZBwzT5NF7oh nFnFCLfeaCfSyinTSibUzeRctD/FQOF8mHBY9qRm+EsWVXatn8DnitjRglUK669q a5LtmiQTQ8V1rEbHjBRJuk9t6NxiAuaj5gj/AvSbR9YbUMpDVKmfXP30VLvb9DTv Gx69PEqPzxtCoAD8h2s1ZEwBlGMjcL7EdKpAhNJa5BZWxuSF8UCiba3mlA9nAk+o UcQAfMije3Ae6dBmpD8p1DDmXYYHP743sWIYtkFU73uc/N8pUPVnH/XSIGpgUKHB 68AIoO9EUEkfjLB9VUW82tHKawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoIfroI mqzMU97pwDCZ1U4NfjSGMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Fh99bnbwv+0fW0eIZLZNY8jWwROsxeu22vqMeJJ1w8l6sRHuMt4b mLTOg5QF7EdOQg/7e+iOSvkT97RIbpLaJcUR1DUk95DywejGVvtmqkPrsJXbjKjM WcmSfFUgMkcmmFa1rkKWcmSoltNITme2u/L3lFT4TDZeqFU7CWjgivQP+MHJ9YUr 9UeeG2orVpOBD30oD5GOHaGZW9QnuFmXG9Om0mO0ukjXqkiVpPbcHSj0Q1d/OiVX 4lB8mDXfeYNGBhxZTEZUkWRwthVK+rAlEHr8PyvmUpnxzMKLq15001a0zu0hEf1R A5KsQume+ejl3//87PjgYj0LS6BC73jj -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:03 2025 by rpki-client