$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: yRJ8RYE+hF8LifiMkuUoG5bsXLM2cma0nQxXgz5t4f4= Subject key identifier: B2:09:48:91:CB:5E:C6:F1:31:1D:5E:2A:5D:E2:1B:4B:8E:CF:FA:61 Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 04D1 Signing time: Fri 24 Oct 2025 21:30:44 +0000 Manifest this update: Fri 24 Oct 2025 21:30:43 +0000 Manifest next update: Fri 31 Oct 2025 21:30:43 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: zZl0y6c+MNMrUd1j3Q0dztVWepg+utKPhiq6yQLawuA=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: trLJfSwyymOYXghPy0PGh0ipgzAzEgwWMLJxE/C/bWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 21:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Oct 24 21:30:43 2025 GMT Not After : Oct 31 21:30:43 2025 GMT Subject: CN=68fbf004-0ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:86:65:b6:48:7f:23:36:9a:00:d0:0d:9b: 47:a0:09:5a:06:06:45:68:be:0b:37:7d:ee:fe:4a: bc:c0:c1:a2:a6:c2:83:cc:eb:37:b5:ac:ad:0e:96: bb:94:26:68:0e:ca:9e:3e:17:6d:21:a2:59:85:cd: 7d:26:c6:a6:3b:93:30:fb:57:55:e8:1a:01:b9:86: 36:d4:2a:35:3e:fe:9d:d7:a4:51:f6:9e:91:a2:17: 2c:53:09:e3:80:57:fe:b4:79:da:c1:1d:46:37:48: ca:20:08:07:b2:e5:ef:50:1d:b5:31:76:a1:34:54: bc:c4:aa:ef:3b:34:b0:87:4b:22:61:9d:d2:eb:c1: cb:b1:f2:08:c5:75:ae:35:eb:ac:d0:a0:44:29:97: 8b:24:27:87:a7:75:52:10:f6:52:a1:7b:b8:54:78: a9:c8:84:4b:29:99:33:b9:a0:5d:8e:6e:c2:75:b3: 7e:41:55:cc:8a:21:8c:4e:4a:be:bf:49:36:0d:ef: 90:eb:e6:37:bd:80:be:7a:a9:6d:8a:a2:29:1b:01: 81:0e:24:f2:c2:53:c9:5c:7e:b3:f5:bc:43:01:d1: 29:b3:3a:10:1e:84:61:91:e6:bb:cc:82:2d:0e:84: 0d:53:87:44:e5:92:07:36:cd:e7:1e:53:8c:52:85: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:48:91:CB:5E:C6:F1:31:1D:5E:2A:5D:E2:1B:4B:8E:CF:FA:61 X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:4d:42:d4:8e:8f:40:ff:2f:de:d2:fe:b7:ed:d1:17:97:40: f1:1c:6c:d7:9b:01:5e:02:d5:8a:2b:20:5f:80:64:19:0c:16: 6e:10:01:7a:f2:aa:a5:f3:b3:93:c1:42:91:f7:e1:a0:66:78: e5:1e:41:d8:a2:b1:80:56:66:07:66:f9:54:61:6d:6b:b9:59: 4d:37:b4:e1:d0:ff:5e:f0:d6:e8:4f:78:ef:a4:ad:0c:04:f0: cc:ac:53:c2:52:78:94:23:d5:b0:c8:42:3f:41:4a:eb:9b:68: 14:57:22:64:00:bb:45:91:2d:0d:29:d0:96:f9:c1:f7:b8:57: 46:22:fc:f6:0d:29:69:5d:30:27:1e:e3:2b:4b:49:11:db:bb: 62:3a:c8:9d:2e:62:e1:d2:ff:26:9d:e1:ce:77:52:bd:6a:9d: 2b:89:64:5d:75:79:dd:94:07:63:b0:fc:66:e6:36:af:4c:e8: f6:87:82:dc:60:3d:0d:1b:34:d7:a7:7e:fb:ba:ad:b6:cd:8f: 64:f9:75:35:e4:56:7d:f6:2a:48:2d:0b:ee:72:43:6a:4b:f2: b4:52:98:01:af:88:5e:20:bb:83:5a:ee:77:57:fd:65:40:76: c1:50:fc:d0:c7:18:f8:4e:94:f0:3e:c7:16:9e:64:95:99:38: fb:9f:37:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjUxMDI0MjEzMDQzWhcNMjUxMDMxMjEzMDQzWjAYMRYwFAYD VQQDEw02OGZiZjAwNC0wZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzKGZbZIfyM2mgDQDZtHoAlaBgZFaL4LN33u/kq8wMGipsKDzOs3taytDpa7 lCZoDsqePhdtIaJZhc19JsamO5Mw+1dV6BoBuYY21Co1Pv6d16RR9p6RohcsUwnj gFf+tHnawR1GN0jKIAgHsuXvUB21MXahNFS8xKrvOzSwh0siYZ3S68HLsfIIxXWu Neus0KBEKZeLJCeHp3VSEPZSoXu4VHipyIRLKZkzuaBdjm7CdbN+QVXMiiGMTkq+ v0k2De+Q6+Y3vYC+eqltiqIpGwGBDiTywlPJXH6z9bxDAdEpszoQHoRhkea7zIIt DoQNU4dE5ZIHNs3nHlOMUoVynQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIJSJHL XsbxMR1eKl3iG0uOz/phMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDETULUjo9A/y/e0v637dEXl0DxHGzXmwFeAtWKKyBfgGQZDBZuEAF6 8qql87OTwUKR9+GgZnjlHkHYorGAVmYHZvlUYW1ruVlNN7Th0P9e8NboT3jvpK0M BPDMrFPCUniUI9WwyEI/QUrrm2gUVyJkALtFkS0NKdCW+cH3uFdGIvz2DSlpXTAn HuMrS0kR27tiOsidLmLh0v8mneHOd1K9ap0riWRddXndlAdjsPxm5javTOj2h4Lc YD0NGzTXp377uq22zY9k+XU15FZ99ipILQvuckNqS/K0UpgBr4heILuDWu53V/1l QHbBUPzQxxj4TpTwPscWnmSVmTj7nzds -----END CERTIFICATE-----Generated at Sat Oct 25 13:10:11 2025 by rpki-client