$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: 55+LVNBVu2pEc9O4N6jHRa4OhLPl3jjahLOQmQDx4Cw= Subject key identifier: 2F:ED:CE:B5:49:2E:2D:B8:4B:E1:DF:B3:B5:67:53:54:53:86:28:90 Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 22F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 22E4 Signing time: Mon 20 Oct 2025 16:04:01 +0000 Manifest this update: Mon 20 Oct 2025 16:03:59 +0000 Manifest next update: Mon 27 Oct 2025 16:03:59 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: f7gWsYXAnPohZ/DxwGjDdmJbAPz33o40KxSyP4EYkNA=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: +yqS5ARpGMGBWr2MyFGiajoFZUJV/KOEs+STzodgJKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8947 (0x22f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Validity Not Before: Oct 20 16:03:59 2025 GMT Not After : Oct 27 16:03:59 2025 GMT Subject: CN=68f65d6f-4171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:b6:e6:64:fc:31:40:18:95:06:18:84:39: 46:dd:c9:e2:c3:33:31:4f:e5:f1:3d:f1:17:88:a9: 13:f5:43:64:37:df:ed:96:1b:a5:8f:a9:ea:fa:67: 18:a2:c7:f4:59:4e:81:85:8b:ac:ec:d7:df:08:19: b1:08:1d:4f:e2:75:08:65:e5:b2:f4:5d:b2:6c:a8: 7e:4d:32:65:ef:e9:a4:f7:16:1a:60:6a:7f:1f:3a: ee:4d:fa:09:65:64:d6:31:b6:f6:91:82:b6:55:47: b2:8b:24:7b:6a:5b:7c:2c:4d:c2:52:64:e3:c4:4a: 99:09:21:3b:48:c8:e7:f7:af:d5:1d:e2:15:2e:87: 70:f4:1d:33:08:1f:39:68:6f:79:c8:7a:2c:f2:e0: 79:6c:a5:bf:b1:22:e3:4f:8f:35:49:5e:c1:33:c4: 54:9e:8d:7a:9d:3d:c1:ac:aa:05:4c:7d:cb:29:13: 2d:05:6d:33:30:2d:a4:f3:93:15:a5:c2:d1:d6:72: 8b:fa:32:c0:70:48:0e:09:e3:e4:a2:ce:31:4f:34: 9e:e0:e4:29:27:e9:d7:9a:cb:3e:f3:27:b5:43:d7: c0:65:2d:06:bb:44:6e:12:44:35:da:67:5d:c6:00: c1:94:1f:67:15:cb:9f:b7:d4:8d:46:aa:a8:5f:02: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:ED:CE:B5:49:2E:2D:B8:4B:E1:DF:B3:B5:67:53:54:53:86:28:90 X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:81:2b:a8:0b:8f:91:79:0a:87:19:33:64:1d:11:7a:48:32: ae:5f:6d:1d:0d:14:c4:62:37:29:55:87:f5:ef:df:1a:ff:57: d1:59:71:67:c8:34:9d:b1:8e:40:3c:66:bf:d8:5c:5e:48:69: 61:bc:fb:9d:36:bb:24:d4:28:9c:e7:2b:a3:5f:3e:fd:ed:d8: 8b:b3:44:e7:8e:68:dc:f0:e8:82:6f:13:3d:ee:02:e1:4c:e2: 2b:c0:fb:41:1d:41:8f:88:7c:b5:ac:88:bb:34:a8:12:bf:17: 4e:63:a7:e5:bc:12:3e:65:ff:a8:8a:94:70:78:85:9f:68:ca: 83:97:09:3a:51:12:39:52:08:c6:58:94:9a:a7:f7:8b:26:b3: df:40:2a:c7:3b:0b:2c:cc:1c:b9:e0:e9:2c:bd:58:0d:b6:d9: 87:f6:89:75:40:78:cf:1c:8e:bf:31:96:31:a4:54:a8:fa:15: 1a:5d:ce:11:dd:6c:8c:33:1d:a3:36:f7:ae:ae:2b:26:b9:b5: 91:b1:4c:f0:be:6e:c9:09:ca:6e:17:f4:58:71:5f:ca:b3:c8: b0:e4:18:3c:20:71:1f:11:d1:f4:b8:d5:37:e0:18:92:d1:84: 39:da:15:8c:b1:74:bc:29:ab:a3:77:60:0e:b0:36:07:4b:10: 35:b2:94:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjUxMDIwMTYwMzU5WhcNMjUxMDI3MTYwMzU5WjAYMRYwFAYD VQQDEw02OGY2NWQ2Zi00MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hK25mT8MUAYlQYYhDlG3cniwzMxT+XxPfEXiKkT9UNkN9/tlhulj6nq+mcY osf0WU6BhYus7NffCBmxCB1P4nUIZeWy9F2ybKh+TTJl7+mk9xYaYGp/HzruTfoJ ZWTWMbb2kYK2VUeyiyR7alt8LE3CUmTjxEqZCSE7SMjn96/VHeIVLodw9B0zCB85 aG95yHos8uB5bKW/sSLjT481SV7BM8RUno16nT3BrKoFTH3LKRMtBW0zMC2k85MV pcLR1nKL+jLAcEgOCePkos4xTzSe4OQpJ+nXmss+8ye1Q9fAZS0Gu0RuEkQ12mdd xgDBlB9nFcuft9SNRqqoXwLhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/tzrVJ Li24S+Hfs7VnU1RThiiQMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChgSuoC4+ReQqHGTNkHRF6SDKuX20dDRTEYjcpVYf1798a/1fRWXFn yDSdsY5APGa/2FxeSGlhvPudNrsk1Cic5yujXz797diLs0Tnjmjc8OiCbxM97gLh TOIrwPtBHUGPiHy1rIi7NKgSvxdOY6flvBI+Zf+oipRweIWfaMqDlwk6URI5UgjG WJSap/eLJrPfQCrHOwsszBy54OksvVgNttmH9ol1QHjPHI6/MZYxpFSo+hUaXc4R 3WyMMx2jNveurismubWRsUzwvm7JCcpuF/RYcV/Ks8iw5Bg8IHEfEdH0uNU34BiS 0YQ52hWMsXS8Kaujd2AOsDYHSxA1spRD -----END CERTIFICATE-----Generated at Mon Oct 20 19:57:42 2025 by rpki-client