$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: //MnrRC4RsBHKb7/IGLQPveUHOfp9AfjPMmHZncss2Y= Subject key identifier: 74:E2:3E:8B:1A:39:D7:86:EF:2E:79:1E:AD:73:C5:40:C8:75:F8:66 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 71 Signing time: Thu 23 Oct 2025 09:10:56 +0000 Manifest this update: Thu 23 Oct 2025 09:10:56 +0000 Manifest next update: Thu 30 Oct 2025 09:10:56 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: N9OaQ4GCrfxyviWwX09x7UumArnTo1VjmNjUTQiijEI=) 2: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: cUCnwUzBgOkdgH52sYU+IHvJQMt7Wg+jJl+nGicq16I=) 3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: rkd9k1u1dkPxEMEh5w+r9Bswb8IlB1n+y2yWKJIM8Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Oct 23 09:10:56 2025 GMT Not After : Oct 30 09:10:56 2025 GMT Subject: CN=68f9f120-6a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:9f:6a:56:12:c0:1d:a2:26:5c:53:23:6b: cb:6c:13:e7:49:11:c5:66:2c:55:d2:78:67:ff:29: 49:a5:9b:7b:e2:79:90:7f:23:07:e0:d0:34:eb:b9: 7a:ad:4f:51:5b:b0:49:bc:e1:69:43:7b:4e:c6:05: 72:cb:52:64:0b:44:1d:11:c1:f0:8f:a8:61:c1:c3: 1b:f1:3e:d3:da:76:13:11:42:c8:87:eb:1c:b0:77: 4f:a3:47:75:4a:c4:77:87:50:86:e7:72:d7:83:e8: 62:26:bf:83:93:3b:b1:80:52:a9:90:08:74:7b:59: 97:8b:ce:5a:01:2f:82:7f:07:17:01:e3:35:94:c2: 3b:31:01:53:c4:66:f5:da:d3:21:d6:0a:f2:31:81: 53:8e:36:65:d1:f9:50:85:26:38:08:4a:ae:38:8a: 18:ef:f4:bf:64:00:fb:98:5f:ad:75:58:c9:95:19: f8:50:44:0e:3c:60:7b:bb:f9:80:32:5d:81:88:a6: df:f3:4c:21:de:d5:e7:ae:c9:cd:d1:55:f4:6b:04: 7f:e0:e8:d2:8b:3e:a9:a3:06:71:07:94:6d:b2:50: d5:3a:97:c7:39:8a:ef:3e:58:b2:5e:e2:b1:8c:a5: 52:03:06:49:e4:c5:01:f9:a5:e5:7c:6f:0c:85:66: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E2:3E:8B:1A:39:D7:86:EF:2E:79:1E:AD:73:C5:40:C8:75:F8:66 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6f:23:ff:3d:ea:1b:5a:00:7b:d9:56:b6:42:c8:f4:3c:9f: 98:fd:e8:3f:76:dd:7d:9d:98:fd:24:f0:14:12:ad:29:64:18: 18:4e:e9:31:9d:3d:21:7c:d3:0c:80:a7:70:bc:ee:98:28:8e: 90:31:d5:59:69:08:8d:ab:e0:62:c3:1d:b5:12:d9:97:65:78: b1:65:ca:87:9c:3a:87:1b:01:b1:45:66:30:ac:51:93:31:f8: 10:e1:cc:d0:aa:30:7e:75:78:ad:b0:d6:a9:50:2f:d7:cf:06: 2f:ca:bf:c8:ff:c7:25:8e:16:d6:9b:2f:bb:0b:29:38:b1:fa: 66:cc:d1:b0:94:d9:fd:1d:d2:c2:e2:71:eb:b7:ee:c9:f2:39: 26:a6:fa:a7:99:07:0b:ac:99:52:9b:02:55:e0:2f:35:25:ac: 65:e2:26:b3:4c:d8:8c:37:22:a1:b2:c9:51:23:ba:17:82:86: da:ea:4c:62:47:d9:3e:ad:24:f4:8b:25:aa:a1:1a:25:90:59: f7:b9:12:39:a8:33:8d:ae:50:54:21:f5:11:a3:6b:4a:a2:01: 21:e9:39:9b:43:df:67:63:c9:d0:ff:7b:1a:75:e2:77:e2:fe: 89:37:88:47:be:cf:08:7a:d2:05:b9:49:9b:82:9c:a0:bf:a8: d9:4a:41:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZGRjExMC8GA1UEBRMoREZDQThGREFBNUZFRjk0OEUwRUNGNkY5QzcwMzYzOUI1 NjUzOUQ5OTAeFw0yNTEwMjMwOTEwNTZaFw0yNTEwMzAwOTEwNTZaMBgxFjAUBgNV BAMTDTY4ZjlmMTIwLTZhM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGsp9qVhLAHaImXFMja8tsE+dJEcVmLFXSeGf/KUmlm3vieZB/Iwfg0DTruXqt T1FbsEm84WlDe07GBXLLUmQLRB0RwfCPqGHBwxvxPtPadhMRQsiH6xywd0+jR3VK xHeHUIbncteD6GImv4OTO7GAUqmQCHR7WZeLzloBL4J/BxcB4zWUwjsxAVPEZvXa 0yHWCvIxgVOONmXR+VCFJjgISq44ihjv9L9kAPuYX611WMmVGfhQRA48YHu7+YAy XYGIpt/zTCHe1eeuyc3RVfRrBH/g6NKLPqmjBnEHlG2yUNU6l8c5iu8+WLJe4rGM pVIDBknkxQH5peV8bwyFZjpfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdOI+ixo5 14bvLnkerXPFQMh1+GYwHwYDVR0jBBgwFoAU38qP2qX++Ujg7Pb5xwNjm1ZTnZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkZGLzJEQTU1OTEyMTQx NjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5a ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzhxUDJxWC0tVWpnN1BiNXh3TmptMVpUblprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkZGLzJEQTU1OTEyMTQxNjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVq ZzdQYjV4d05qbTFaVG5aay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNvI/896htaAHvZVrZCyPQ8n5j96D923X2dmP0k8BQSrSlkGBhO6TGd PSF80wyAp3C87pgojpAx1VlpCI2r4GLDHbUS2ZdleLFlyoecOocbAbFFZjCsUZMx +BDhzNCqMH51eK2w1qlQL9fPBi/Kv8j/xyWOFtabL7sLKTix+mbM0bCU2f0d0sLi ceu37snyOSam+qeZBwusmVKbAlXgLzUlrGXiJrNM2Iw3IqGyyVEjuheChtrqTGJH 2T6tJPSLJaqhGiWQWfe5EjmoM42uUFQh9RGja0qiASHpOZtD32djydD/exp14nfi /ok3iEe+zwh60gW5SZuCnKC/qNlKQTs= -----END CERTIFICATE-----Generated at Fri Oct 24 08:06:38 2025 by rpki-client