$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: xzaKcWlc1z8OC773nEAxfSiCVDzOggVJZJrHHKPgi9U= Subject key identifier: 34:51:E9:D9:C4:92:38:79:9F:72:C4:29:37:A9:C7:A6:7C:D6:AA:18 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 01BC Signing time: Sun 19 Oct 2025 05:30:41 +0000 Manifest this update: Sun 19 Oct 2025 05:30:40 +0000 Manifest next update: Sun 26 Oct 2025 05:30:40 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: zU7kOzWilwcYlR8GBwqeFj1Tj6digPACwU+RvNhfbtE=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: r5pIAbK8kOI15XkP+OMpWTYz9FMauuzr/FnyF6gxDgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Oct 19 05:30:40 2025 GMT Not After : Oct 26 05:30:40 2025 GMT Subject: CN=68f47780-4481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:9a:7a:f3:1b:ee:8b:2b:27:54:c1:1c:77: 91:18:32:6e:93:0e:e9:ad:27:f6:cf:dd:0f:e2:3f: 3e:3d:18:e0:b2:f6:0f:50:8c:5a:35:96:a0:a4:78: be:10:11:48:bc:c2:84:6a:b7:73:85:f4:9c:f8:86: c5:d1:c7:16:f6:2d:ff:2c:5f:c3:08:6f:4b:3a:e7: f4:b6:41:50:e8:86:3f:9a:e4:4a:ba:99:35:90:f0: 55:49:39:b1:a8:86:f3:b1:2a:f1:3e:8a:04:35:cb: 50:c7:6b:1d:0d:14:90:92:4d:ac:b3:e4:e9:af:6a: f4:65:94:4b:5d:11:12:1f:8b:2e:82:75:c9:9a:2c: 45:6a:61:c6:db:7a:19:08:e6:55:28:eb:38:02:5d: 6c:af:94:24:81:be:2b:bd:fb:90:e0:1f:d0:a7:56: c2:9d:bd:75:1d:d2:6d:96:d2:04:e7:9c:26:e9:23: 75:76:e4:f5:96:ca:37:8a:68:88:e1:b8:b9:a4:52: fa:50:86:e3:7a:62:ff:8d:27:ff:42:29:0f:78:38: c8:d7:7e:9f:2b:c8:93:6c:2e:da:3b:c4:f1:3a:58: 26:87:58:c2:f1:79:5f:1b:e5:6f:1e:a2:2c:34:68: ab:be:47:c1:9f:54:32:b5:73:0c:98:a1:3e:50:b0: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:51:E9:D9:C4:92:38:79:9F:72:C4:29:37:A9:C7:A6:7C:D6:AA:18 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8a:b4:18:29:ef:39:4a:0d:90:ac:87:c6:e7:e9:6f:f4:f3: 96:e5:58:aa:be:8d:fa:1c:02:0b:72:1f:6d:b7:9e:79:4e:5f: 45:5b:00:16:c4:2c:ae:42:98:7d:c8:24:16:71:43:b9:05:8f: 10:90:b5:88:8b:b9:e5:b9:08:3d:00:d1:8b:a4:75:ff:1c:db: 89:5f:b5:bd:20:36:77:6e:15:da:9b:4c:cb:84:44:f6:e7:98: d9:b5:ff:7a:25:a4:d9:5a:26:83:57:4c:10:b4:42:20:f8:6f: 49:05:53:cc:98:15:88:62:87:3d:f4:c2:7c:a4:78:10:1c:54: d1:d7:02:01:8b:ee:31:ad:dc:23:27:66:03:e2:c2:27:d0:60: 51:13:66:d4:9f:12:8b:a7:82:c9:42:58:24:4a:a5:5f:f7:61: 90:7e:85:f2:fb:54:81:08:00:13:5f:fe:74:4b:ef:01:49:ec: b4:43:bb:b8:ae:f9:59:f7:40:27:a6:79:f7:b4:3b:74:47:f5: 55:a9:6b:27:e2:68:d9:68:f6:77:2f:66:8f:29:8d:db:80:1c: a6:e1:17:48:a1:69:96:11:67:5d:d1:ca:39:9f:ae:dd:76:77: de:4c:fd:4c:dc:bd:fb:d3:04:c9:e1:4f:cb:fc:b8:af:71:00: 81:e9:06:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjUxMDE5MDUzMDQwWhcNMjUxMDI2MDUzMDQwWjAYMRYwFAYD VQQDEw02OGY0Nzc4MC00NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbuaevMb7osrJ1TBHHeRGDJukw7prSf2z90P4j8+PRjgsvYPUIxaNZagpHi+ EBFIvMKEardzhfSc+IbF0ccW9i3/LF/DCG9LOuf0tkFQ6IY/muRKupk1kPBVSTmx qIbzsSrxPooENctQx2sdDRSQkk2ss+Tpr2r0ZZRLXRESH4sugnXJmixFamHG23oZ COZVKOs4Al1sr5Qkgb4rvfuQ4B/Qp1bCnb11HdJtltIE55wm6SN1duT1lso3imiI 4bi5pFL6UIbjemL/jSf/QikPeDjI136fK8iTbC7aO8TxOlgmh1jC8XlfG+VvHqIs NGirvkfBn1QytXMMmKE+ULBn/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRR6dnE kjh5n3LEKTepx6Z81qoYMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcirQYKe85Sg2QrIfG5+lv9POW5Viqvo36HAILch9tt555Tl9FWwAW xCyuQph9yCQWcUO5BY8QkLWIi7nluQg9ANGLpHX/HNuJX7W9IDZ3bhXam0zLhET2 55jZtf96JaTZWiaDV0wQtEIg+G9JBVPMmBWIYoc99MJ8pHgQHFTR1wIBi+4xrdwj J2YD4sIn0GBRE2bUnxKLp4LJQlgkSqVf92GQfoXy+1SBCAATX/50S+8BSey0Q7u4 rvlZ90Anpnn3tDt0R/VVqWsn4mjZaPZ3L2aPKY3bgBym4RdIoWmWEWdd0co5n67d dnfeTP1M3L370wTJ4U/L/LivcQCB6QZV -----END CERTIFICATE-----Generated at Tue Oct 21 02:15:28 2025 by rpki-client