$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: AqZoE52IhkATPsJ2og78aNY4ag5V+a/8euucrdiNAGw= Subject key identifier: C6:C5:A9:FA:E4:B9:CA:7F:53:D3:55:71:41:96:08:71:E9:7A:51:8E Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0F93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0F8A Signing time: Sat 18 Oct 2025 18:08:23 +0000 Manifest this update: Sat 18 Oct 2025 18:08:22 +0000 Manifest next update: Sat 25 Oct 2025 18:08:22 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: iBC9/fyfnuaYurpKUiDrgcC2n27nL1PSqXuLp1LPO4I=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3987 (0xf93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Oct 18 18:08:22 2025 GMT Not After : Oct 25 18:08:22 2025 GMT Subject: CN=68f3d797-6b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:83:bf:66:46:0b:f3:fb:d1:7a:9b:ed:6e: 54:1a:13:0e:1d:32:95:37:4a:18:d6:1f:80:fb:92: 7e:a9:57:79:4b:d9:8d:0e:53:6f:14:86:e2:1c:6a: 05:67:e7:73:77:5c:d3:bb:b8:f6:bd:d2:9e:1a:fb: 51:9e:26:0e:b2:03:9e:56:45:a5:70:5d:c1:a5:6d: d2:92:bd:23:a7:af:c4:24:65:e0:4c:6e:fe:ba:c0: ff:25:3c:5a:7b:81:96:cf:1f:81:b9:dc:6c:2e:18: c2:93:ee:b4:4c:e3:ed:fa:04:63:66:a0:10:31:c4: 05:b5:8f:5a:df:2c:74:17:90:13:81:d6:7a:71:0c: 0f:c3:9c:f4:af:fe:25:02:6a:10:bb:81:12:bb:37: cf:01:0b:a3:58:63:b3:1d:0c:e6:47:7b:d4:34:6c: 77:6d:d7:96:52:6c:4c:a6:32:5e:ad:1d:a2:2b:ca: e9:f5:52:46:1e:1b:14:68:eb:5f:25:cd:dd:00:c3: 37:4e:fe:37:08:50:96:7e:a5:9b:c1:b8:d5:33:c0: 74:91:59:c4:f0:43:1b:35:d9:e6:5b:25:74:b1:ce: 8a:63:8f:4c:ac:b1:dc:37:b5:0f:b0:0c:fd:4b:42: 21:24:c1:ca:f6:bb:84:a3:19:49:3b:a2:e4:c8:73: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C5:A9:FA:E4:B9:CA:7F:53:D3:55:71:41:96:08:71:E9:7A:51:8E X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fe:e3:44:cb:c5:8b:ac:b1:7d:8e:4e:bd:41:96:97:cc:dd: 7a:5d:b0:8f:3a:d1:ae:aa:fa:48:43:4f:19:d1:7d:e9:b7:73: a8:4e:98:99:f3:dd:a8:6d:78:18:c8:bc:80:14:c0:f2:e7:aa: 57:04:cd:af:2d:43:14:9c:b2:31:0d:df:44:6b:1b:3a:83:88: 66:0f:4d:56:9a:aa:9c:35:7e:8c:64:8a:0e:01:05:51:ad:dc: 86:79:7c:8d:48:95:99:96:90:dc:0b:da:70:e1:8e:42:1d:0b: af:ea:7d:e1:c5:63:14:ef:b2:fc:28:60:8f:f6:f4:7e:da:1f: 9d:66:5b:47:0d:48:bf:66:6d:f3:b1:47:f6:d3:29:37:e8:03: d2:e6:5a:35:99:0c:f7:62:6b:43:d2:b6:be:5e:89:00:98:55: 08:fd:7c:54:d6:42:7c:49:e1:30:b0:3d:d0:1a:68:30:31:1b: 98:16:a3:29:b0:f8:da:c4:14:f8:5b:1a:3c:78:31:20:e2:d7: fc:29:70:fd:6e:8f:e4:45:8e:5e:bb:78:d2:bb:15:3e:79:3a: 01:0e:02:6a:2d:fb:9b:4a:c9:cf:77:35:9b:2a:58:68:b1:01: 0e:59:e2:2e:f1:8f:ec:61:a6:b9:fb:8a:13:0d:96:a2:9e:68: 1a:e5:f0:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUxMDE4MTgwODIyWhcNMjUxMDI1MTgwODIyWjAYMRYwFAYD VQQDEw02OGYzZDc5Ny02Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n+Dv2ZGC/P70Xqb7W5UGhMOHTKVN0oY1h+A+5J+qVd5S9mNDlNvFIbiHGoF Z+dzd1zTu7j2vdKeGvtRniYOsgOeVkWlcF3BpW3Skr0jp6/EJGXgTG7+usD/JTxa e4GWzx+BudxsLhjCk+60TOPt+gRjZqAQMcQFtY9a3yx0F5ATgdZ6cQwPw5z0r/4l AmoQu4ESuzfPAQujWGOzHQzmR3vUNGx3bdeWUmxMpjJerR2iK8rp9VJGHhsUaOtf Jc3dAMM3Tv43CFCWfqWbwbjVM8B0kVnE8EMbNdnmWyV0sc6KY49MrLHcN7UPsAz9 S0IhJMHK9ruEoxlJO6LkyHMOvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbFqfrk ucp/U9NVcUGWCHHpelGOMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ/uNEy8WLrLF9jk69QZaXzN16XbCPOtGuqvpIQ08Z0X3pt3OoTpiZ 892obXgYyLyAFMDy56pXBM2vLUMUnLIxDd9Eaxs6g4hmD01WmqqcNX6MZIoOAQVR rdyGeXyNSJWZlpDcC9pw4Y5CHQuv6n3hxWMU77L8KGCP9vR+2h+dZltHDUi/Zm3z sUf20yk36APS5lo1mQz3YmtD0ra+XokAmFUI/XxU1kJ8SeEwsD3QGmgwMRuYFqMp sPjaxBT4Wxo8eDEg4tf8KXD9bo/kRY5eu3jSuxU+eToBDgJqLfubSsnPdzWbKlho sQEOWeIu8Y/sYaa5+4oTDZainmga5fDV -----END CERTIFICATE-----Generated at Mon Oct 20 01:39:06 2025 by rpki-client