$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json) Hash identifier: aOl7lAex5OV23jW9ngRaM8puqBizz86PZvGWj7SPPZU= Subject key identifier: E7:5F:21:41:4D:CB:AD:1F:55:1A:C1:BD:35:46:8D:91:7C:15:C4:8D Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft Manifest number: 81 Signing time: Sun 19 Oct 2025 09:58:35 +0000 Manifest this update: Sun 19 Oct 2025 09:58:35 +0000 Manifest next update: Sun 26 Oct 2025 09:58:35 +0000 Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: 01Aq7ZvIGeeDNHZ+z0QR8vToGP5ypBgpITCJs6HUz6Q=) 2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: NgHWuWasRdq7/Tb6jtbOAPkZk5G59CnEADx3vts0M7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Validity Not Before: Oct 19 09:58:35 2025 GMT Not After : Oct 26 09:58:35 2025 GMT Subject: CN=68f4b64b-c733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:f9:c2:fb:28:1a:de:b3:2f:e7:91:50:5c: c6:4e:76:98:3a:77:64:ce:e0:46:64:d2:0a:fe:a0: 5d:d4:3b:f7:d8:82:61:52:36:f1:16:7e:84:50:4a: 23:b0:ef:20:19:92:34:a8:09:06:1a:b7:c1:cc:70: 67:ea:2c:6c:88:ee:f3:de:cb:5c:dd:1f:6b:d6:45: 61:2f:12:62:5c:3b:69:71:b2:5b:5c:84:ac:61:4c: 62:3c:00:61:d1:d4:c4:31:00:12:04:ff:09:67:13: b9:83:15:c9:45:fd:22:ee:25:92:4f:44:3b:82:ef: 61:bf:30:7b:1d:69:26:86:a6:14:08:9b:81:4b:5b: 91:9d:21:11:5d:06:77:3a:ab:20:f5:2f:f1:40:b2: 71:d4:51:db:dc:1e:d4:4c:5f:db:df:82:a4:51:f2: 4e:87:4c:8b:03:c4:fd:b6:c2:d5:a7:0e:f9:9c:2d: 11:23:e7:db:3d:96:df:1c:9d:10:cd:ef:26:95:44: 59:3f:12:2f:e9:17:fc:fc:40:8f:28:d3:1b:c0:72: 69:ee:32:6d:06:20:80:d2:06:1d:53:b5:6c:f2:21: 14:34:b6:71:8e:f3:cc:15:5f:7b:6f:d3:45:cd:06: ba:e5:eb:a6:13:08:b4:51:75:e4:f7:cf:8a:9e:80: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5F:21:41:4D:CB:AD:1F:55:1A:C1:BD:35:46:8D:91:7C:15:C4:8D X509v3 Authority Key Identifier: keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:5b:4f:31:30:6c:a2:1a:39:84:8a:0b:21:64:ca:1a:38: 1c:15:8d:61:0e:cd:4d:11:25:7d:1d:e6:5e:43:f9:89:40:33: 92:fc:59:d7:f3:92:16:52:e7:1e:7c:0c:be:e4:2d:8b:97:d4: 77:d7:b4:76:b2:1f:67:84:3b:90:87:93:6e:f0:9e:5c:08:80: 77:9d:16:67:44:64:0b:43:d0:70:90:93:99:f3:e2:49:8c:7a: 8e:bb:a7:d8:81:fb:6d:f7:38:77:04:bd:aa:43:ae:4e:d7:e8: 62:61:ea:b9:9f:c2:01:62:12:b2:38:44:26:78:14:56:5d:0e: 0c:b6:47:4c:17:d2:95:56:06:56:45:24:21:f8:2e:9d:2f:42: d2:eb:bb:39:33:23:65:13:13:88:a7:f9:a7:41:05:75:1b:05: 2e:14:3e:89:c9:02:3c:23:f9:35:a2:71:7f:01:e0:b0:02:59: 43:3d:d0:bd:5d:84:3c:7f:28:b8:f2:fe:89:2f:eb:2b:ba:9a: 9c:c7:ca:9a:d3:b0:60:6b:81:59:f0:79:28:93:50:72:30:7a: 1a:05:b6:ec:26:7c:6b:33:a1:72:1a:64:ad:dd:86:ce:fa:c1: 5d:09:54:9b:5a:40:bb:39:49:99:7c:79:36:f7:e6:fe:7e:26: 12:ce:d1:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGM0IxMTAvBgNVBAUTKEEzOEQ0ODdCRDVEOUE4QTg5NDgwMjc0RkU2RjdDMDYx QzYyNEJDQzAwHhcNMjUxMDE5MDk1ODM1WhcNMjUxMDI2MDk1ODM1WjAYMRYwFAYD VQQDEw02OGY0YjY0Yi1jNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+v5wvsoGt6zL+eRUFzGTnaYOndkzuBGZNIK/qBd1Dv32IJhUjbxFn6EUEoj sO8gGZI0qAkGGrfBzHBn6ixsiO7z3stc3R9r1kVhLxJiXDtpcbJbXISsYUxiPABh 0dTEMQASBP8JZxO5gxXJRf0i7iWST0Q7gu9hvzB7HWkmhqYUCJuBS1uRnSERXQZ3 Oqsg9S/xQLJx1FHb3B7UTF/b34KkUfJOh0yLA8T9tsLVpw75nC0RI+fbPZbfHJ0Q ze8mlURZPxIv6Rf8/ECPKNMbwHJp7jJtBiCA0gYdU7Vs8iEUNLZxjvPMFV97b9NF zQa65eumEwi0UXXk98+KnoDCLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdfIUFN y60fVRrBvTVGjZF8FcSNMB8GA1UdIwQYMBaAFKONSHvV2aiolIAnT+b3wGHGJLzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUYzQi9BQzc2MjIwMEU5 QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFLaVVnQ2RQNXZmQVljWWt2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUYzQi9BQzc2MjIwMEU5QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFL aVVnQ2RQNXZmQVljWWt2TUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF21tPMTBsoho5hIoLIWTKGjgcFY1hDs1NESV9HeZeQ/mJQDOS/FnX 85IWUucefAy+5C2Ll9R317R2sh9nhDuQh5Nu8J5cCIB3nRZnRGQLQ9BwkJOZ8+JJ jHqOu6fYgftt9zh3BL2qQ65O1+hiYeq5n8IBYhKyOEQmeBRWXQ4MtkdMF9KVVgZW RSQh+C6dL0LS67s5MyNlExOIp/mnQQV1GwUuFD6JyQI8I/k1onF/AeCwAllDPdC9 XYQ8fyi48v6JL+srupqcx8qa07Bga4FZ8Hkok1ByMHoaBbbsJnxrM6FyGmSt3YbO +sFdCVSbWkC7OUmZfHk29+b+fiYSztHW -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:44 2025 by rpki-client