$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft File: mG5BZ9azgH9J98JgDWD5wmCacJY.mft (raw, json) Hash identifier: MmW85s5+AT4IYEhyARSfYjHJr1Z+zm8IeNAkt0YAirc= Subject key identifier: 83:1A:CE:22:AE:2B:71:47:FC:A9:C4:A5:13:69:06:9C:25:9E:22:5A Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft Manifest number: 0C67 Signing time: Sat 18 Oct 2025 19:16:52 +0000 Manifest this update: Sat 18 Oct 2025 19:16:51 +0000 Manifest next update: Sat 25 Oct 2025 19:16:51 +0000 Files and hashes: 1: mG5BZ9azgH9J98JgDWD5wmCacJY.crl (hash: JBsQnDy+Lkn24oMJDK58ebFId1ZeuPyWuyNtL8Hj00o=) 2: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (hash: JrgXyhe/ZBiLMiqpguwMxQYnYLTsK7NzW7LJdocKtjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Validity Not Before: Oct 18 19:16:51 2025 GMT Not After : Oct 25 19:16:51 2025 GMT Subject: CN=68f3e7a3-899c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:3e:61:75:59:c5:0a:a4:76:17:44:e3:a3: f4:26:5d:9a:ed:af:96:9c:d2:ef:7b:26:dd:ea:7c: 0b:1c:56:b1:36:12:7e:c3:00:04:19:3e:54:38:dd: 46:16:06:dd:20:b0:2d:5b:15:04:92:bb:8d:e4:0f: a8:bc:3c:52:d4:96:88:23:b5:97:13:69:c1:5b:be: 4a:53:f7:8a:55:1b:54:bd:45:9e:75:6c:fb:54:1d: dc:ad:43:82:30:16:ca:90:eb:7b:da:d5:7c:3b:d0: 57:a9:e2:0f:30:87:74:dd:dc:b1:74:71:53:57:67: e8:ca:a7:31:c5:62:46:21:33:3f:06:89:11:5f:a3: a8:35:29:22:b5:63:02:62:6b:85:4e:6e:f0:75:ce: 64:cb:3e:d4:31:fe:64:df:d9:54:9f:dc:83:a1:0f: 90:f3:a6:5a:6f:f1:60:b6:92:6b:cb:2e:4b:32:46: 6a:00:da:2d:d0:5c:6a:7a:64:fe:03:7c:62:a8:19: 31:e0:30:ec:92:3f:e2:cf:ed:44:03:ca:f9:5b:9d: 3e:2f:2d:38:fc:e3:3a:75:9f:9e:3f:e4:9d:53:12: c9:ac:2e:9f:2b:90:99:0e:25:c2:90:2d:ce:ec:93: 84:59:2f:91:c2:8e:1a:96:d2:33:60:bf:75:eb:8a: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:CE:22:AE:2B:71:47:FC:A9:C4:A5:13:69:06:9C:25:9E:22:5A X509v3 Authority Key Identifier: keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:69:0f:a2:ef:d9:01:97:fb:75:ec:70:dd:18:76:4f:be:1d: 94:8f:d6:d7:fb:c4:a4:d0:d5:0f:bf:b0:b0:7a:8b:fe:97:35: b3:15:f9:15:fc:ca:81:cb:72:22:f2:bb:32:84:e0:d8:ff:56: c1:84:33:48:c6:2f:f3:2c:95:84:d7:16:8c:d0:7b:45:dd:ea: 44:9b:e8:69:28:33:88:57:79:0d:cf:7b:56:10:69:71:a0:0b: d1:07:8a:11:11:47:89:e4:7f:c6:31:45:29:3f:15:75:9b:72: 93:d9:7c:cb:04:7f:28:60:60:ca:c0:ab:9b:b6:1b:45:96:1c: b1:18:5c:c7:11:d3:d5:e0:3e:b6:f7:3b:3d:e6:c8:cb:c5:b0: 37:6c:c0:6e:03:e5:58:77:99:a4:39:30:92:3a:19:2f:c5:e7: 29:2a:e6:e1:19:d2:22:84:ae:23:ab:7e:c2:d1:a1:c7:3e:8a: 93:fa:c5:cb:19:ff:e8:26:07:55:c6:31:20:7a:6d:f0:69:84: 59:b2:5f:da:d6:8a:c9:cb:cc:e8:b4:a5:8a:b0:c6:f5:d5:28: 8c:5a:2d:41:c2:7f:37:c2:cd:7b:88:3b:96:31:8f:7b:1e:9a: a7:27:ee:59:7a:29:25:e9:b2:bf:0a:20:ac:6a:82:40:3f:3d: fc:3c:35:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDYxMTAvBgNVBAUTKDk4NkU0MTY3RDZCMzgwN0Y0OUY3QzI2MDBENjBGOUMy NjA5QTcwOTYwHhcNMjUxMDE4MTkxNjUxWhcNMjUxMDI1MTkxNjUxWjAYMRYwFAYD VQQDEw02OGYzZTdhMy04OTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRs+YXVZxQqkdhdE46P0Jl2a7a+WnNLveybd6nwLHFaxNhJ+wwAEGT5UON1G FgbdILAtWxUEkruN5A+ovDxS1JaII7WXE2nBW75KU/eKVRtUvUWedWz7VB3crUOC MBbKkOt72tV8O9BXqeIPMId03dyxdHFTV2foyqcxxWJGITM/BokRX6OoNSkitWMC YmuFTm7wdc5kyz7UMf5k39lUn9yDoQ+Q86Zab/FgtpJryy5LMkZqANot0FxqemT+ A3xiqBkx4DDskj/iz+1EA8r5W50+Ly04/OM6dZ+eP+SdUxLJrC6fK5CZDiXCkC3O 7JOEWS+Rwo4altIzYL9164pqOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMaziKu K3FH/KnEpRNpBpwlniJaMB8GA1UdIwQYMBaAFJhuQWfWs4B/SffCYA1g+cJgmnCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNi9CNDcyRkUyQTBC N0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdIOUo5OEpnRFdENXdtQ2Fj SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21HNUJaOWF6Z0g5Sjk4SmdEV0Q1d21DYWNKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNi9CNDcyRkUyQTBCN0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdI OUo5OEpnRFdENXdtQ2FjSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwaQ+i79kBl/t17HDdGHZPvh2Uj9bX+8Sk0NUPv7Cweov+lzWzFfkV /MqBy3Ii8rsyhODY/1bBhDNIxi/zLJWE1xaM0HtF3epEm+hpKDOIV3kNz3tWEGlx oAvRB4oREUeJ5H/GMUUpPxV1m3KT2XzLBH8oYGDKwKubthtFlhyxGFzHEdPV4D62 9zs95sjLxbA3bMBuA+VYd5mkOTCSOhkvxecpKubhGdIihK4jq37C0aHHPoqT+sXL Gf/oJgdVxjEgem3waYRZsl/a1orJy8zotKWKsMb11SiMWi1Bwn83ws17iDuWMY97 HpqnJ+5Zeikl6bK/CiCsaoJAPz38PDXe -----END CERTIFICATE-----Generated at Mon Oct 20 05:48:56 2025 by rpki-client