$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: +B1qM1bFHPBTrh8JHhrePbXLDrwhTLf3NhSzZLSbblU= Subject key identifier: 66:B0:0F:D9:D6:38:70:EC:DA:9E:29:44:9E:1D:81:64:54:50:00:37 Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 1615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 1607 Signing time: Mon 20 Oct 2025 17:07:29 +0000 Manifest this update: Mon 20 Oct 2025 17:07:28 +0000 Manifest next update: Mon 27 Oct 2025 17:07:28 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: knnDpvoXzLRkuDM48QM8aRD+vnrc+aIjrdlJA8WAA1g=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5653 (0x1615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Oct 20 17:07:28 2025 GMT Not After : Oct 27 17:07:28 2025 GMT Subject: CN=68f66c50-0045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:91:17:f2:fb:66:37:56:d0:b5:21:38:7e: 6a:a8:6d:8d:9e:b6:85:db:f5:43:ac:58:14:c2:25: 4d:ad:b5:92:79:bd:72:fe:43:2e:c1:ec:f6:4a:9e: 8d:aa:7f:25:61:75:78:40:16:9f:ce:37:ac:53:79: 35:c8:79:2b:ec:74:40:6e:2f:e5:2f:21:39:da:64: 82:97:83:cf:24:fb:9f:97:8d:85:64:d9:1e:f8:7a: e2:75:c1:17:07:5d:f1:40:1a:bf:6c:fb:2d:48:2c: aa:c3:9b:eb:2c:49:98:80:05:3f:95:87:57:8a:dc: b4:e3:7b:c4:20:0f:a1:88:e4:22:5f:2d:81:45:0f: bf:82:a0:ac:d9:24:ef:e9:1a:f7:c7:e3:57:0c:21: 8c:55:79:c2:de:76:8e:cf:47:d7:86:b2:c1:7c:d3: 01:5b:41:16:02:1a:57:ce:fb:07:16:39:52:59:bf: c3:90:b5:66:e2:85:54:d2:cf:ba:b6:6e:02:d8:7f: 7b:e9:d6:a8:91:6f:a6:79:29:8e:72:ce:6f:18:7b: de:ed:df:66:00:27:cb:62:b1:8d:5d:7b:61:92:0a: ed:34:c9:24:29:70:5a:95:eb:d8:35:11:66:e8:ad: 4b:94:a9:c0:a1:0b:4f:c5:4c:62:f1:ad:15:8f:66: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:0F:D9:D6:38:70:EC:DA:9E:29:44:9E:1D:81:64:54:50:00:37 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:90:79:94:22:5f:5f:09:28:22:5a:c4:41:7a:09:f8:01:39: c1:e3:d9:c9:fc:95:1e:e7:0f:b5:27:2f:39:13:12:40:9e:18: eb:cb:d8:d1:d8:96:de:e2:ce:65:c5:92:fb:89:70:5d:5a:5a: c6:d5:95:b6:bc:a8:33:88:30:71:0c:a8:b1:40:c2:31:7a:04: 4e:04:3d:56:f8:ba:ba:01:82:7e:c6:ba:94:a7:05:d8:d8:c7: cd:33:0c:f3:5f:96:41:27:b0:8c:21:1b:45:7f:d6:4b:29:6a: 3e:e4:26:ad:69:35:cc:36:ce:5c:6b:94:5f:98:6f:3a:f6:a8: 1e:ea:b5:5f:d8:c2:b9:50:8a:cb:91:b4:68:79:96:36:43:51: af:11:bd:b0:f6:f7:bc:71:30:01:bd:8b:1c:7d:61:80:ca:69: 9f:a0:13:84:4a:b5:39:4b:04:c1:99:9a:d0:ee:55:f0:fd:1e: 0d:5e:f8:c0:c6:1c:ab:24:d7:7b:24:bf:ff:2d:75:a9:b7:32: 5b:8b:c6:e5:8a:89:66:60:e3:1c:05:39:25:5f:3f:9c:2a:f2: 5c:08:05:29:7d:20:2f:ad:21:03:ae:47:cb:f3:0c:86:65:b9: e5:b2:f0:b4:25:32:a6:54:36:91:d1:d6:b0:8f:a7:31:2c:fc: 68:8e:26:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUxMDIwMTcwNzI4WhcNMjUxMDI3MTcwNzI4WjAYMRYwFAYD VQQDEw02OGY2NmM1MC0wMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj6RF/L7ZjdW0LUhOH5qqG2NnraF2/VDrFgUwiVNrbWSeb1y/kMuwez2Sp6N qn8lYXV4QBafzjesU3k1yHkr7HRAbi/lLyE52mSCl4PPJPufl42FZNke+HridcEX B13xQBq/bPstSCyqw5vrLEmYgAU/lYdXity043vEIA+hiOQiXy2BRQ+/gqCs2STv 6Rr3x+NXDCGMVXnC3naOz0fXhrLBfNMBW0EWAhpXzvsHFjlSWb/DkLVm4oVU0s+6 tm4C2H976daokW+meSmOcs5vGHve7d9mACfLYrGNXXthkgrtNMkkKXBalevYNRFm 6K1LlKnAoQtPxUxi8a0Vj2ao9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGawD9nW OHDs2p4pRJ4dgWRUUAA3MB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2kHmUIl9fCSgiWsRBegn4ATnB49nJ/JUe5w+1Jy85ExJAnhjry9jR 2Jbe4s5lxZL7iXBdWlrG1ZW2vKgziDBxDKixQMIxegROBD1W+Lq6AYJ+xrqUpwXY 2MfNMwzzX5ZBJ7CMIRtFf9ZLKWo+5CataTXMNs5ca5RfmG869qge6rVf2MK5UIrL kbRoeZY2Q1GvEb2w9ve8cTABvYscfWGAymmfoBOESrU5SwTBmZrQ7lXw/R4NXvjA xhyrJNd7JL//LXWptzJbi8bliolmYOMcBTklXz+cKvJcCAUpfSAvrSEDrkfL8wyG ZbnlsvC0JTKmVDaR0dawj6cxLPxojiYJ -----END CERTIFICATE-----Generated at Tue Oct 21 02:37:08 2025 by rpki-client