$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json) Hash identifier: bAbTQ596gJN4jSb5y7Z2S7uXrR2ZVF4esfbA55syZ2o= Subject key identifier: 62:B1:E6:F6:89:06:97:96:CB:EB:71:9E:98:0F:3B:64:F8:5E:D7:1C Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft Manifest number: 7A Signing time: Sun 19 Oct 2025 10:06:09 +0000 Manifest this update: Sun 19 Oct 2025 10:06:08 +0000 Manifest next update: Sun 26 Oct 2025 10:06:08 +0000 Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: mJp8KUJmrZvvUAbf4ly0Zw8crxf4yfax8zoRsZTPB6g=) 2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: ghtYYnHvBHOXjjafNw/o3b7nWMJznKoJtYacsPdc8uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Validity Not Before: Oct 19 10:06:08 2025 GMT Not After : Oct 26 10:06:08 2025 GMT Subject: CN=68f4b810-6e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:4f:a7:c8:2c:37:ae:1e:55:15:7e:8a:7b: 32:4a:cc:9c:72:7d:fd:f2:d0:fd:92:c6:25:00:2d: ba:18:c7:fa:d1:3c:79:a7:f7:6f:8e:6e:85:3d:cc: 82:41:7b:42:57:86:08:73:d4:05:d3:0e:4e:90:e1: 40:7c:e1:63:70:82:74:ef:26:e5:db:73:e9:d6:38: 94:75:0b:c5:32:e5:ba:07:9f:ad:cb:3d:84:50:8e: 63:e5:56:0c:92:0f:9c:43:86:55:e5:a4:98:3d:40: c5:9b:28:3f:8d:89:8c:b4:2d:c3:72:0e:e6:a1:a0: 1f:0c:e0:34:2e:16:3c:4d:47:ab:6d:1a:82:6a:aa: 8f:c7:b0:4f:26:c1:92:eb:19:71:fa:e9:09:8f:28: 19:07:0f:d6:ac:f5:7a:38:2c:77:88:bd:f4:52:06: a4:e9:8a:3c:9e:c6:db:84:20:6a:40:a3:d6:ba:7e: 5f:37:96:5e:84:96:db:15:a9:bb:7a:76:11:93:79: 7b:e1:8e:57:c8:61:83:63:b4:38:06:97:64:27:03: f3:67:67:a6:da:c7:a6:cf:4d:75:b0:28:e1:a6:dd: ed:18:c6:82:5b:35:00:58:3b:20:b3:68:4d:3b:49: b0:e6:f2:bb:34:bc:41:b9:60:b9:06:87:8d:00:eb: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B1:E6:F6:89:06:97:96:CB:EB:71:9E:98:0F:3B:64:F8:5E:D7:1C X509v3 Authority Key Identifier: keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:25:c6:9f:3e:95:ec:71:e8:12:53:f1:63:65:cc:79:6e:eb: ab:59:e4:8b:9c:6e:6b:2b:65:67:b8:0f:78:a9:23:2b:f1:b9: e7:59:8d:34:9a:a7:87:8c:da:7c:f4:be:38:c1:66:7e:82:b7: f4:5b:b4:95:39:e2:b8:bf:e8:f5:6e:10:56:2d:ba:cb:85:d3: 15:11:56:d7:7e:7e:cf:dc:1c:1f:c3:4f:65:89:01:59:59:9c: 97:24:07:d2:fb:4f:e7:81:4f:ed:b9:25:86:ed:79:b5:84:53: 62:22:f7:74:77:2c:97:b3:5e:9c:17:93:f7:7c:01:8c:ec:c4: 33:43:e4:20:4b:b5:e1:8f:4d:ca:ed:41:9a:6a:63:c1:80:d9: c5:f3:c4:09:26:24:55:e0:d5:12:f1:16:f4:e8:e3:51:de:b5: 26:ef:7c:d0:db:b9:d8:e7:91:0f:4e:b8:1e:83:d7:04:a2:68: 21:5d:7a:aa:32:00:31:cb:08:bb:22:f2:2b:98:0c:3b:8c:e4: bb:33:41:6c:88:17:9d:00:a5:6e:64:32:55:60:f1:56:c8:7d: fc:8c:96:3a:cb:cb:35:41:16:68:f5:5c:88:0f:83:c1:01:09: b6:6d:4e:35:5f:a0:70:4d:16:c0:7e:82:37:2f:84:b2:58:d3: c3:27:86:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Qzk4NTExMC8GA1UEBRMoMjlBREIzOUI2MjBFQUUzQ0I4QUZDQTJDQTE4NUY1QzQ4 NzZGRDA0MzAeFw0yNTEwMTkxMDA2MDhaFw0yNTEwMjYxMDA2MDhaMBgxFjAUBgNV BAMTDTY4ZjRiODEwLTZlMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNDk+nyCw3rh5VFX6KezJKzJxyff3y0P2SxiUALboYx/rRPHmn92+OboU9zIJB e0JXhghz1AXTDk6Q4UB84WNwgnTvJuXbc+nWOJR1C8Uy5boHn63LPYRQjmPlVgyS D5xDhlXlpJg9QMWbKD+NiYy0LcNyDuahoB8M4DQuFjxNR6ttGoJqqo/HsE8mwZLr GXH66QmPKBkHD9as9Xo4LHeIvfRSBqTpijyextuEIGpAo9a6fl83ll6EltsVqbt6 dhGTeXvhjlfIYYNjtDgGl2QnA/NnZ6bax6bPTXWwKOGm3e0YxoJbNQBYOyCzaE07 SbDm8rs0vEG5YLkGh40A662RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYrHm9okG l5bL63GemA87ZPhe1xwwHwYDVR0jBBgwFoAUKa2zm2IOrjy4r8osoYX1xIdv0EMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDOTg1LzY3M0FBMkY0RjVC NzExRUY4QzFGRjYxMUM0RjlBRTAyL0thMnptMklPcmp5NHI4b3NvWVgxeElkdjBF TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2Eyem0ySU9yank0cjhvc29ZWDF4SWR2MEVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD OTg1LzY3M0FBMkY0RjVCNzExRUY4QzFGRjYxMUM0RjlBRTAyL0thMnptMklPcmp5 NHI4b3NvWVgxeElkdjBFTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYlxp8+lexx6BJT8WNlzHlu66tZ5IucbmsrZWe4D3ipIyvxuedZjTSa p4eM2nz0vjjBZn6Ct/RbtJU54ri/6PVuEFYtusuF0xURVtd+fs/cHB/DT2WJAVlZ nJckB9L7T+eBT+25JYbtebWEU2Ii93R3LJezXpwXk/d8AYzsxDND5CBLteGPTcrt QZpqY8GA2cXzxAkmJFXg1RLxFvTo41HetSbvfNDbudjnkQ9OuB6D1wSiaCFdeqoy ADHLCLsi8iuYDDuM5LszQWyIF50ApW5kMlVg8VbIffyMljrLyzVBFmj1XIgPg8EB CbZtTjVfoHBNFsB+gjcvhLJY08MnhkQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:41:47 2025 by rpki-client