$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json) Hash identifier: 2TeQ5gjDVdufl9eLGrupVivK5FQ+6lEGuQWwuVbedI0= Subject key identifier: DF:B1:40:47:8B:1C:C3:BD:8A:FC:CF:A6:2F:95:8D:DE:44:1D:7F:60 Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft Manifest number: 0287 Signing time: Sun 19 Oct 2025 03:49:50 +0000 Manifest this update: Sun 19 Oct 2025 03:49:49 +0000 Manifest next update: Sun 26 Oct 2025 03:49:49 +0000 Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: Tb/kKm1rTCD8r9H2+zF9tUUj3kyHOn2xfWtvPWlyO0Y=) 2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: KwT8765tV1xGz2sf7ujcAdTQLGt8VA1bqI5xYKuBmVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Validity Not Before: Oct 19 03:49:49 2025 GMT Not After : Oct 26 03:49:49 2025 GMT Subject: CN=68f45fdd-923f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:50:73:f1:af:4a:99:78:0d:ff:68:d5:be: b5:f6:ad:88:f1:a0:44:d6:77:26:fd:65:9c:c7:59: 6a:f7:f2:87:c2:f0:f3:4e:0b:1d:9f:6c:f9:ec:74: 29:4f:df:21:d5:9a:00:74:4a:61:84:09:fa:29:3f: 3e:f7:15:df:0f:04:13:cb:ee:5e:42:51:4d:75:cd: 76:83:c2:c0:30:db:4c:ae:f4:d4:b9:66:25:15:68: f5:a2:1e:a6:88:43:4e:2a:b1:1d:6b:f1:03:0f:cd: cd:1f:f1:d5:b5:eb:5f:49:d8:60:d4:9c:9c:c8:6f: de:6e:da:2c:19:0e:18:81:39:f2:e0:5d:b4:48:7f: 05:fd:ec:a5:f5:85:55:35:1a:c0:a9:e8:25:12:87: 82:2d:4a:9f:7d:d2:8f:c1:49:4d:a7:39:28:e4:17: 53:08:8f:55:a5:a2:6e:fd:10:3c:ba:6f:e0:77:79: 7c:50:70:bd:65:8e:82:98:2f:f7:56:2e:31:77:27: a1:21:dd:c5:39:cf:65:ad:1f:d5:c4:f4:04:60:88: c4:a6:10:36:26:5d:0c:5f:e3:3f:12:3e:83:7c:3c: 86:51:c2:4a:19:76:7d:b6:3e:03:19:58:8f:bf:4e: 31:22:1c:70:74:7f:1c:e3:15:dd:1b:4a:a9:27:59: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B1:40:47:8B:1C:C3:BD:8A:FC:CF:A6:2F:95:8D:DE:44:1D:7F:60 X509v3 Authority Key Identifier: keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:be:20:35:b6:cd:71:fa:d3:b5:7c:27:54:fd:0b:79:40:8a: 28:79:30:44:6a:b8:3e:3a:b5:fc:75:2b:f1:53:69:a3:7d:ef: 64:7b:6f:25:e9:2c:50:65:d3:ca:d4:f1:0b:b9:aa:38:75:19: 82:80:d9:3b:88:f0:d5:ad:cf:eb:27:ba:5d:f7:e3:ce:d3:36: 8f:bf:87:5a:4e:eb:ec:52:58:ec:3d:21:b7:00:1c:ec:ac:7b: 3f:8f:55:a9:f1:88:44:dd:2a:10:79:3b:94:be:0d:af:4f:05: 98:e7:64:8f:66:ff:61:49:c2:8f:5e:9e:8c:e7:80:43:3e:ee: 46:e2:ce:39:a1:c8:37:c6:e2:b8:98:57:f3:0b:4a:20:9b:29: aa:8f:3f:28:05:a5:38:19:ba:98:f9:3f:24:05:6c:ce:1e:5e: b4:79:ab:ef:7a:2d:38:64:36:86:a4:6a:4c:b6:26:6a:34:19: df:c2:80:d1:01:12:29:67:ea:fa:3f:fc:85:19:f5:da:c0:f2: 35:22:ac:94:16:b8:06:c7:be:c9:f7:fe:34:6c:6b:fd:82:a1: 9e:92:92:ef:b4:0d:e0:0e:8d:a5:bd:38:24:9e:d0:f8:41:2b: 6a:95:0f:3a:fd:25:a4:9d:2d:5e:d1:0a:f5:38:6f:34:dd:7d: 26:a7:3b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCODkxMTAvBgNVBAUTKEJEMTZCNTY0MzJBRTVGNDMwMjVDNERBMTEzNDUzN0Y3 MDRFQjQwOTYwHhcNMjUxMDE5MDM0OTQ5WhcNMjUxMDI2MDM0OTQ5WjAYMRYwFAYD VQQDEw02OGY0NWZkZC05MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5tQc/GvSpl4Df9o1b619q2I8aBE1ncm/WWcx1lq9/KHwvDzTgsdn2z57HQp T98h1ZoAdEphhAn6KT8+9xXfDwQTy+5eQlFNdc12g8LAMNtMrvTUuWYlFWj1oh6m iENOKrEda/EDD83NH/HVtetfSdhg1JycyG/ebtosGQ4YgTny4F20SH8F/eyl9YVV NRrAqeglEoeCLUqffdKPwUlNpzko5BdTCI9VpaJu/RA8um/gd3l8UHC9ZY6CmC/3 Vi4xdyehId3FOc9lrR/VxPQEYIjEphA2Jl0MX+M/Ej6DfDyGUcJKGXZ9tj4DGViP v04xIhxwdH8c4xXdG0qpJ1kATQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+xQEeL HMO9ivzPpi+Vjd5EHX9gMB8GA1UdIwQYMBaAFL0WtWQyrl9DAlxNoRNFN/cE60CW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUI4OS85NkQzQkE1QzI0 RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgwTUNYRTJoRTBVMzl3VHJR SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSYTFaREt1WDBNQ1hFMmhFMFUzOXdUclFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUI4OS85NkQzQkE1QzI0RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgw TUNYRTJoRTBVMzl3VHJRSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTviA1ts1x+tO1fCdU/Qt5QIooeTBEarg+OrX8dSvxU2mjfe9ke28l 6SxQZdPK1PELuao4dRmCgNk7iPDVrc/rJ7pd9+PO0zaPv4daTuvsUljsPSG3ABzs rHs/j1Wp8YhE3SoQeTuUvg2vTwWY52SPZv9hScKPXp6M54BDPu5G4s45ocg3xuK4 mFfzC0ogmymqjz8oBaU4GbqY+T8kBWzOHl60eavvei04ZDaGpGpMtiZqNBnfwoDR ARIpZ+r6P/yFGfXawPI1IqyUFrgGx77J9/40bGv9gqGekpLvtA3gDo2lvTgkntD4 QStqlQ86/SWknS1e0Qr1OG803X0mpzuu -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:04 2025 by rpki-client