$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: nQxeAzN6JiHeIxf0smbB/uHs5vhcwWa92vO0NKs4rcc= Subject key identifier: B3:4B:11:05:FD:40:D6:04:A1:A1:59:7E:83:9D:33:C0:9F:34:35:FF Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 0436 Signing time: Sun 19 Oct 2025 02:11:47 +0000 Manifest this update: Sun 19 Oct 2025 02:11:46 +0000 Manifest next update: Sun 26 Oct 2025 02:11:46 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: 1TGZkF8eIQx3lHlsxS394iN3zk3VGbZf92llZU6ZqVc=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Oct 19 02:11:46 2025 GMT Not After : Oct 26 02:11:46 2025 GMT Subject: CN=68f448e3-30ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:7f:a0:b2:7a:a5:e1:31:1d:f4:d5:73:35: 23:44:15:04:f8:a7:27:8c:58:18:58:cc:97:7c:f6: 45:c5:1c:9a:0b:0f:9f:3f:0a:cb:28:ee:28:78:a8: 43:66:54:59:70:52:ed:13:8c:33:e8:22:3e:0b:70: 01:54:6a:6d:83:c5:6f:a2:c3:df:a4:1d:51:30:d0: c5:09:ef:b7:eb:a1:82:69:83:8b:21:b9:c6:b9:d4: f9:4d:11:51:12:82:4e:36:07:11:6f:24:a6:a3:82: 68:3c:bb:a8:ea:a2:fc:31:d7:2b:64:c3:f5:b4:2d: da:2a:92:76:27:b1:01:5e:83:57:fe:b2:ab:c8:fa: a8:96:0c:ac:ad:c5:38:ed:b8:ce:98:be:0a:65:4b: 21:2c:f1:99:e6:d2:9b:87:93:c0:e2:47:29:a5:5f: 07:f1:2e:c5:6d:44:cd:b5:0e:d2:a9:1d:6b:9a:a7: 10:7d:ea:d0:29:16:22:44:38:fe:1a:5c:40:d9:a9: 3f:81:f1:00:1f:9a:37:fd:17:99:aa:31:5d:43:da: 4b:aa:44:97:5e:43:8b:08:bf:0f:74:fa:87:20:b2: 95:4f:ad:ea:8c:13:d2:36:0c:e4:8f:27:2e:47:69: 20:83:7f:73:99:53:91:5e:65:71:31:82:6e:dd:72: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:11:05:FD:40:D6:04:A1:A1:59:7E:83:9D:33:C0:9F:34:35:FF X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4a:65:a3:ee:1b:1f:87:bc:94:37:f7:38:c9:1c:ff:41:af: 05:08:75:9f:83:54:aa:f0:b9:26:32:ab:96:cf:75:f2:f8:9b: d9:8f:ef:13:d9:21:b8:72:30:85:39:b7:fe:f0:2e:6f:29:7c: 09:26:ef:fd:07:d7:b3:67:d7:ae:c7:86:a6:ac:d3:04:d2:49: 8a:1c:7e:f3:57:34:9a:1d:43:3a:b3:b3:34:6c:cf:d4:77:de: 89:b6:77:46:34:7c:77:2a:4e:ae:5a:8b:39:f5:28:3a:ba:8e: 87:97:63:c5:ed:b5:26:13:3d:a0:80:90:53:4a:a2:95:94:fb: 24:d1:d3:2e:8d:37:c2:64:9d:20:4d:a9:dc:8e:4a:23:58:ae: 1c:c8:10:90:6d:f2:12:c8:f4:69:65:b9:b2:de:fa:c2:f2:97: 6c:21:33:db:0f:b2:2c:51:39:d8:ea:f1:f0:b5:0c:07:bf:de: 50:b3:e5:c0:ee:1a:9a:f4:80:36:de:a5:9b:9f:c9:d9:64:d1: a2:19:ad:91:e6:42:b8:53:53:6c:6a:5b:a0:f1:5d:82:ac:1c: 8b:d9:25:f4:31:1a:2c:e6:a1:e6:0f:e1:a2:bc:b0:33:a6:17: 07:66:87:c3:fe:45:5a:21:82:77:6f:f4:52:4b:73:24:ff:c4: e7:3d:2f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUxMDE5MDIxMTQ2WhcNMjUxMDI2MDIxMTQ2WjAYMRYwFAYD VQQDEw02OGY0NDhlMy0zMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1R/oLJ6peExHfTVczUjRBUE+KcnjFgYWMyXfPZFxRyaCw+fPwrLKO4oeKhD ZlRZcFLtE4wz6CI+C3ABVGptg8VvosPfpB1RMNDFCe+366GCaYOLIbnGudT5TRFR EoJONgcRbySmo4JoPLuo6qL8MdcrZMP1tC3aKpJ2J7EBXoNX/rKryPqolgysrcU4 7bjOmL4KZUshLPGZ5tKbh5PA4kcppV8H8S7FbUTNtQ7SqR1rmqcQferQKRYiRDj+ GlxA2ak/gfEAH5o3/ReZqjFdQ9pLqkSXXkOLCL8PdPqHILKVT63qjBPSNgzkjycu R2kgg39zmVORXmVxMYJu3XIKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNLEQX9 QNYEoaFZfoOdM8CfNDX/MB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/SmWj7hsfh7yUN/c4yRz/Qa8FCHWfg1Sq8LkmMquWz3Xy+JvZj+8T 2SG4cjCFObf+8C5vKXwJJu/9B9ezZ9eux4amrNME0kmKHH7zVzSaHUM6s7M0bM/U d96JtndGNHx3Kk6uWos59Sg6uo6Hl2PF7bUmEz2ggJBTSqKVlPsk0dMujTfCZJ0g TancjkojWK4cyBCQbfISyPRpZbmy3vrC8pdsITPbD7IsUTnY6vHwtQwHv95Qs+XA 7hqa9IA23qWbn8nZZNGiGa2R5kK4U1Nsalug8V2CrByL2SX0MRos5qHmD+GivLAz phcHZofD/kVaIYJ3b/RSS3Mk/8TnPS+A -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:07 2025 by rpki-client