$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: Oq2fMuk4+9TCcui8SWyFUgwRrl7pJMvN9e1J107PplI= Subject key identifier: 32:BC:43:25:CE:77:01:98:B3:F2:CD:CD:35:37:E6:31:7A:6F:D6:8D Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 037A Signing time: Mon 27 Oct 2025 02:17:23 +0000 Manifest this update: Mon 27 Oct 2025 02:17:22 +0000 Manifest next update: Mon 03 Nov 2025 02:17:22 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: zqPTcERW6Zut6D2diuN1LP7R8klWj5bUklXl5rZJPts=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Oct 27 02:17:22 2025 GMT Not After : Nov 3 02:17:22 2025 GMT Subject: CN=68fed632-e325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:06:73:44:bc:23:d1:47:c1:ed:17:95:57:f2: a3:c0:28:e2:b8:25:94:4c:e4:71:47:dc:cc:7c:62: 97:45:30:d4:c0:1d:b1:0e:5d:99:fd:c4:71:72:74: c3:cd:cb:92:bc:e6:6f:bd:e2:4c:2d:93:27:1f:eb: 83:bc:fa:22:d9:88:d9:35:22:df:a0:6b:72:82:71: f5:05:b3:a8:ee:b8:3a:9a:40:cc:b3:31:ae:11:8b: 70:1d:d5:10:a9:75:3c:57:ae:36:5c:b9:4b:02:f8: b9:63:6e:49:d4:22:57:59:9a:bf:14:e2:73:85:95: bf:c2:b7:5f:d6:09:a9:a5:ec:b2:bc:4e:9c:60:47: 05:f2:05:9f:8b:be:1b:b5:d7:76:c5:c4:0c:e8:2e: 5c:ba:34:c9:71:4d:5b:93:5f:62:01:7b:53:22:43: a2:2a:a4:04:94:5e:62:c7:8f:4f:1d:b4:b6:42:a6: 9f:76:e9:c1:f9:d2:ae:bb:5e:9c:8b:b7:f8:cc:cd: 4f:48:fb:8e:58:36:7f:56:6f:86:b7:ff:4a:22:cf: e4:99:89:7a:63:da:9c:c3:95:38:aa:dc:7f:ad:37: 7b:07:d9:94:41:08:42:11:1a:1e:6e:44:7d:31:fc: b3:ab:df:1e:3a:c8:a5:7b:71:4b:9f:bf:5c:be:34: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BC:43:25:CE:77:01:98:B3:F2:CD:CD:35:37:E6:31:7A:6F:D6:8D X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0e:bb:d8:c7:c0:a5:41:54:ca:c1:80:16:7a:ad:be:0a:80: de:68:ac:b2:db:99:27:83:34:ce:12:b7:34:bb:89:00:f9:d1: 7d:e8:b2:f7:89:7a:4f:c6:48:9d:ed:e2:a8:0a:74:40:9f:72: 0c:46:c5:fb:7e:0d:6d:60:e4:e2:0d:32:02:49:3a:54:c0:0f: 49:74:f5:29:70:78:fe:49:fb:ed:18:3a:72:ac:fc:50:13:2d: 44:9a:87:e0:52:18:79:8e:14:e2:ce:84:00:67:3b:e4:9f:6e: 34:fc:ba:7c:26:7c:d6:cb:fd:f3:bb:92:a3:1d:55:33:f5:32: 8c:41:bb:52:42:80:3c:dc:47:e4:c8:ed:3d:91:f5:83:3a:c4: 89:e9:df:41:ef:a8:a5:a7:04:b9:03:83:db:be:e4:64:8c:e9: c2:f4:0d:4d:ae:7a:36:18:36:57:4d:f5:40:a3:f0:fe:5d:6f: 51:84:91:5c:fd:f2:6d:26:d6:67:69:5d:5f:e8:e4:79:06:e0: 01:c6:9e:f0:b6:8f:6a:f0:9a:ff:8a:cc:6e:b8:8c:d0:1d:e4: d8:35:5c:cb:76:77:a6:b5:d8:08:aa:20:93:bb:d2:13:65:4e: ec:78:67:5b:ae:03:3a:9e:84:8a:0b:29:e2:2e:34:44:bd:0f: ab:ac:4a:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUxMDI3MDIxNzIyWhcNMjUxMTAzMDIxNzIyWjAYMRYwFAYD VQQDEw02OGZlZDYzMi1lMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gZzRLwj0UfB7ReVV/KjwCjiuCWUTORxR9zMfGKXRTDUwB2xDl2Z/cRxcnTD zcuSvOZvveJMLZMnH+uDvPoi2YjZNSLfoGtygnH1BbOo7rg6mkDMszGuEYtwHdUQ qXU8V642XLlLAvi5Y25J1CJXWZq/FOJzhZW/wrdf1gmppeyyvE6cYEcF8gWfi74b tdd2xcQM6C5cujTJcU1bk19iAXtTIkOiKqQElF5ix49PHbS2QqafdunB+dKuu16c i7f4zM1PSPuOWDZ/Vm+Gt/9KIs/kmYl6Y9qcw5U4qtx/rTd7B9mUQQhCERoebkR9 Mfyzq98eOsile3FLn79cvjQ9CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK8QyXO dwGYs/LNzTU35jF6b9aNMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnDrvYx8ClQVTKwYAWeq2+CoDeaKyy25kngzTOErc0u4kA+dF96LL3 iXpPxkid7eKoCnRAn3IMRsX7fg1tYOTiDTICSTpUwA9JdPUpcHj+SfvtGDpyrPxQ Ey1EmofgUhh5jhTizoQAZzvkn240/Lp8JnzWy/3zu5KjHVUz9TKMQbtSQoA83Efk yO09kfWDOsSJ6d9B76ilpwS5A4PbvuRkjOnC9A1Nrno2GDZXTfVAo/D+XW9RhJFc /fJtJtZnaV1f6OR5BuABxp7wto9q8Jr/isxuuIzQHeTYNVzLdnemtdgIqiCTu9IT ZU7seGdbrgM6noSKCyniLjREvQ+rrEqD -----END CERTIFICATE-----Generated at Mon Oct 27 17:36:59 2025 by rpki-client