$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json) Hash identifier: Vrs+bdMSrpIDkt5Om1goBKWz8TDOZ4ssWxK8CpHAkx4= Subject key identifier: A3:D9:E8:E6:75:1D:86:3B:E4:4A:9E:BC:0B:39:1D:54:3A:99:43:E8 Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft Manifest number: 0505 Signing time: Sun 19 Oct 2025 01:23:46 +0000 Manifest this update: Sun 19 Oct 2025 01:23:45 +0000 Manifest next update: Sun 26 Oct 2025 01:23:45 +0000 Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: mmDXujaOhOaXynN0cVcno0U3Y2LmXtLwQQe+MByZDOo=) 2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: 0jqnSn+Cm10EtK5JT/NKDy8k+JGjQ6fCGa+uxrmRYyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Validity Not Before: Oct 19 01:23:45 2025 GMT Not After : Oct 26 01:23:45 2025 GMT Subject: CN=68f43da1-e900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:c6:e5:e8:44:cb:3c:e3:b3:b4:ed:7c:2d: a9:d2:3f:41:62:10:c9:59:f7:55:95:7b:1f:57:8b: 30:73:80:e4:d3:05:0a:18:68:6b:de:63:e0:e3:83: 6f:ad:53:59:26:d9:2b:90:3f:1d:65:dd:0f:a4:02: 75:08:c7:24:74:04:99:47:54:f2:78:ff:9a:11:39: 2b:c1:db:37:67:2c:60:e7:f9:ba:f9:01:b0:87:1e: 75:8f:90:ba:13:53:d3:33:c2:d1:c5:ea:9d:c3:98: d9:03:35:08:29:f4:06:85:7c:c0:4b:31:a8:2b:b8: 1c:aa:c5:3d:30:96:81:9d:e5:d1:35:8c:2a:03:82: 6d:63:ba:c4:58:9e:d8:f1:b4:f2:e8:f9:84:33:8a: 0a:92:0a:79:9b:54:32:c1:b0:52:94:4b:63:e7:2f: 95:25:15:81:87:4d:20:2f:41:2f:10:43:a8:f1:83: 9b:42:55:b9:d6:c7:8e:00:7d:bf:1d:4e:9a:f1:2f: 53:bb:e4:c2:27:70:8a:8e:d7:d2:e0:3e:23:93:25: ab:bd:63:d7:ae:b0:7f:6f:87:0b:85:f1:0b:06:01: 44:fe:5a:45:cc:6d:da:c1:33:90:3a:d1:8f:a4:9e: d9:60:55:ef:cb:81:c3:52:b1:f3:0e:78:3b:8f:5a: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:E8:E6:75:1D:86:3B:E4:4A:9E:BC:0B:39:1D:54:3A:99:43:E8 X509v3 Authority Key Identifier: keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:5e:bf:8a:f2:b1:ed:02:56:32:2f:fd:a0:b1:c6:db:95:c6: df:b9:73:65:19:8f:e1:d6:07:ef:6e:08:6f:b8:e0:8a:1b:b0: eb:ac:dc:6b:fd:3c:f0:df:d8:d6:f2:12:06:1f:01:d7:ee:22: 47:10:73:64:35:94:d2:f7:57:1c:d0:6b:00:ec:0c:8e:4e:97: b6:6d:63:0e:96:93:55:35:1f:2f:e0:1d:5e:55:41:38:c1:98: fa:08:ab:53:e4:23:25:a6:33:c1:c6:a2:ff:9e:ef:69:e9:ce: 52:46:27:43:f6:2f:db:41:7f:fd:16:05:e0:29:65:08:72:99: b4:f1:f3:90:a8:84:82:ff:c1:a3:80:59:40:db:dd:68:cc:49: 92:26:93:73:c3:9e:71:c5:9b:0e:7d:ad:c7:28:4d:7c:18:e4: f1:65:38:e8:5d:5c:b5:99:0e:5d:37:0f:ce:b1:7d:f5:89:c1: f3:53:9f:c1:1a:f6:fb:99:2a:4a:1e:b1:73:36:a5:1e:53:c5: a3:44:54:8f:fa:2c:dc:9b:ec:83:5f:d9:3c:04:dd:f9:50:e4: 08:2a:06:d0:05:32:65:b5:5b:ba:14:3e:c8:3a:65:55:11:77: 3d:f5:23:53:49:3d:68:be:84:46:99:a9:63:99:47:79:7c:f6: e2:89:e0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE NzdGQjkyN0YwHhcNMjUxMDE5MDEyMzQ1WhcNMjUxMDI2MDEyMzQ1WjAYMRYwFAYD VQQDEw02OGY0M2RhMS1lOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1zG5ehEyzzjs7TtfC2p0j9BYhDJWfdVlXsfV4swc4Dk0wUKGGhr3mPg44Nv rVNZJtkrkD8dZd0PpAJ1CMckdASZR1TyeP+aETkrwds3Zyxg5/m6+QGwhx51j5C6 E1PTM8LRxeqdw5jZAzUIKfQGhXzASzGoK7gcqsU9MJaBneXRNYwqA4JtY7rEWJ7Y 8bTy6PmEM4oKkgp5m1QywbBSlEtj5y+VJRWBh00gL0EvEEOo8YObQlW51seOAH2/ HU6a8S9Tu+TCJ3CKjtfS4D4jkyWrvWPXrrB/b4cLhfELBgFE/lpFzG3awTOQOtGP pJ7ZYFXvy4HDUrHzDng7j1qKKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPZ6OZ1 HYY75EqevAs5HVQ6mUPoMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjXr+K8rHtAlYyL/2gscbblcbfuXNlGY/h1gfvbghvuOCKG7DrrNxr /Tzw39jW8hIGHwHX7iJHEHNkNZTS91cc0GsA7AyOTpe2bWMOlpNVNR8v4B1eVUE4 wZj6CKtT5CMlpjPBxqL/nu9p6c5SRidD9i/bQX/9FgXgKWUIcpm08fOQqISC/8Gj gFlA291ozEmSJpNzw55xxZsOfa3HKE18GOTxZTjoXVy1mQ5dNw/OsX31icHzU5/B Gvb7mSpKHrFzNqUeU8WjRFSP+izcm+yDX9k8BN35UOQIKgbQBTJltVu6FD7IOmVV EXc99SNTST1ovoRGmaljmUd5fPbiieAD -----END CERTIFICATE-----Generated at Mon Oct 20 21:55:13 2025 by rpki-client