$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: 8Tm+3B4Ab5UARSg/WpraHb+wC+y2egoqxIkDmO0aPjo= Subject key identifier: 5C:89:7D:84:E9:D8:F5:46:87:DF:05:02:E7:59:B6:CD:5C:46:50:2C Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 0209 Signing time: Sun 19 Oct 2025 04:42:34 +0000 Manifest this update: Sun 19 Oct 2025 04:42:33 +0000 Manifest next update: Sun 26 Oct 2025 04:42:33 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: T6MoKdBbD2IpqNqb+RxCSVIQnpY35JUonHU5HQTOfOg=) 2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: V+A9+3TWv6PDJfONkiYGSLwYtuk75uf9VZIwDYRykJo=) 3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: 8XCBqH3UeeuDPYwwqRpO+AoZOfKPyRMZ7ican69IhKU=) 4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: GzbxM9C1MjlQY8/LbZ9rlFb8KN037sgMyJVoACbdjQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Oct 19 04:42:33 2025 GMT Not After : Oct 26 04:42:33 2025 GMT Subject: CN=68f46c39-7aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:d8:c1:62:02:89:2d:dd:eb:46:18:28:7d: 8e:33:d9:c2:c0:2b:f5:20:d1:64:cf:47:6e:81:74: 1e:36:1c:9c:5b:46:da:b7:f0:64:e7:77:ef:80:03: 45:88:bd:bf:cd:ab:76:22:ec:e8:05:e4:66:9b:60: 3c:56:54:cb:af:ea:ad:f7:c7:a6:dd:53:1f:a9:1a: ae:07:ed:cb:09:3e:88:ea:72:80:ac:0b:25:2c:a6: 4f:22:14:4f:4f:4b:82:b2:ab:95:22:a8:ed:eb:36: 65:a7:18:bb:e7:20:b9:ec:10:36:c9:1a:bb:df:98: 37:6c:76:f8:44:d9:a7:f6:e2:25:c9:52:cf:b5:e8: 04:45:21:ad:2b:1c:f8:25:74:24:0f:02:3d:8a:61: 88:a4:4e:19:7a:b7:5b:a6:74:1c:7c:de:5c:e3:6c: ad:97:f5:18:f4:17:04:7b:62:c3:44:04:a2:46:72: ed:e3:f8:a2:fc:6f:dd:3f:c5:d9:dd:78:ae:37:a4: fb:20:db:25:96:8f:2a:34:01:b2:da:62:b4:d8:42: b6:1a:ba:07:da:7f:ff:ac:3b:d1:8b:30:c6:c4:52: bd:08:66:b3:21:bd:0b:1d:bc:6c:80:df:a7:9a:7b: ea:49:c2:aa:a3:cb:cf:9c:53:f6:e3:ea:ca:08:ca: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:89:7D:84:E9:D8:F5:46:87:DF:05:02:E7:59:B6:CD:5C:46:50:2C X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e4:63:5c:77:5b:0c:18:53:09:a9:e4:6e:44:49:8c:4f:28: 32:d9:de:51:4a:70:81:44:6c:07:cf:2d:1f:4a:2d:24:3b:f1: dd:a2:7c:a9:39:00:01:7a:76:75:ae:7f:f4:52:e1:8f:f0:e9: f4:5f:ca:3e:c7:d6:89:a2:43:9d:1f:49:82:b7:bd:e8:c8:4c: 2c:a5:c8:31:01:fd:4d:8c:ed:54:ca:0b:b6:0a:32:d4:18:a7: d1:ad:29:aa:2a:b6:40:aa:01:07:7a:a3:f2:ed:a9:67:e8:ad: 02:e3:07:f6:0a:32:56:9d:4f:1b:1b:d8:42:19:e5:a0:83:23: 3b:7e:3e:a0:2c:d3:d3:d6:8e:b2:ac:92:80:3a:a5:d9:25:34: 8a:8c:a0:37:e3:6d:c5:81:33:96:c6:43:3a:65:af:c0:8e:2e: fa:cf:3e:93:b1:88:c3:f1:2f:28:e6:86:05:eb:af:22:cf:32: dc:66:ed:1e:7f:01:d4:5e:0c:2c:1d:70:7a:c0:a2:e0:3c:0a: 22:90:82:39:3f:5c:5b:b9:35:5b:64:43:39:dd:22:00:42:ae: 25:c9:55:13:1d:58:96:52:83:a3:a0:9f:cb:17:35:47:7a:a9: be:c5:b8:d8:e5:b8:1a:2c:ae:da:4c:f9:d9:50:70:07:51:1d: ef:c4:22:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjUxMDE5MDQ0MjMzWhcNMjUxMDI2MDQ0MjMzWjAYMRYwFAYD VQQDEw02OGY0NmMzOS03YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oTYwWICiS3d60YYKH2OM9nCwCv1INFkz0dugXQeNhycW0bat/Bk53fvgANF iL2/zat2IuzoBeRmm2A8VlTLr+qt98em3VMfqRquB+3LCT6I6nKArAslLKZPIhRP T0uCsquVIqjt6zZlpxi75yC57BA2yRq735g3bHb4RNmn9uIlyVLPtegERSGtKxz4 JXQkDwI9imGIpE4ZerdbpnQcfN5c42ytl/UY9BcEe2LDRASiRnLt4/ii/G/dP8XZ 3XiuN6T7INsllo8qNAGy2mK02EK2GroH2n//rDvRizDGxFK9CGazIb0LHbxsgN+n mnvqScKqo8vPnFP24+rKCMrgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyJfYTp 2PVGh98FAudZts1cRlAsMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq5GNcd1sMGFMJqeRuREmMTygy2d5RSnCBRGwHzy0fSi0kO/Hdonyp OQABenZ1rn/0UuGP8On0X8o+x9aJokOdH0mCt73oyEwspcgxAf1NjO1Uygu2CjLU GKfRrSmqKrZAqgEHeqPy7aln6K0C4wf2CjJWnU8bG9hCGeWggyM7fj6gLNPT1o6y rJKAOqXZJTSKjKA3423FgTOWxkM6Za/Aji76zz6TsYjD8S8o5oYF668izzLcZu0e fwHUXgwsHXB6wKLgPAoikII5P1xbuTVbZEM53SIAQq4lyVUTHViWUoOjoJ/LFzVH eqm+xbjY5bgaLK7aTPnZUHAHUR3vxCLU -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:01 2025 by rpki-client