$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: Xj1CY7lyQg/0gGulgUyGGZkmFG+4b9bAP/RzKGah9sM= Subject key identifier: 4A:3A:71:16:C9:5C:A2:23:13:48:2F:E8:33:AA:C7:9B:4C:41:6B:93 Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 8D Signing time: Thu 23 Oct 2025 08:38:07 +0000 Manifest this update: Thu 23 Oct 2025 08:38:07 +0000 Manifest next update: Thu 30 Oct 2025 08:38:07 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: QieW+NQL1pXGaInWTJUzqSP0FKH3rWspmtYtgP5XdxU=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 08:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Oct 23 08:38:07 2025 GMT Not After : Oct 30 08:38:07 2025 GMT Subject: CN=68f9e96f-05e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:12:e1:4f:72:8e:d3:dc:f9:dd:f7:5f:be: aa:69:6e:85:fb:0b:53:1e:2c:ce:29:af:49:b8:e8: a2:9f:18:46:41:eb:c2:8d:05:2d:32:28:04:21:97: 4d:d3:ee:01:9d:c5:1f:92:a3:d2:46:df:ac:d7:c5: 98:69:97:f7:10:dd:5c:48:69:0d:3f:bd:7a:71:52: 8f:47:f0:da:d2:f0:05:bb:da:06:9f:0e:5c:0b:13: e1:c3:45:7e:80:fd:46:ad:46:01:b4:0a:f1:24:64: 2a:b2:1a:09:db:c3:79:31:a7:f8:41:21:dc:d5:9a: 81:eb:41:98:ef:db:bc:cc:29:d6:cb:2c:f7:62:04: 7d:5e:6c:fc:12:99:10:d9:82:f8:b0:f4:34:68:aa: f6:8c:ab:d2:fb:52:44:6c:5f:0c:dc:84:a1:bb:48: 7a:ad:84:30:23:54:3c:72:e9:b5:95:96:87:1a:b9: e1:94:46:b1:68:17:a8:a7:00:ef:29:02:b2:97:23: 08:b6:a2:b1:58:62:a3:7d:7f:c7:0a:59:9f:7a:0f: 54:a4:9f:7f:17:85:2a:49:50:88:35:90:8c:67:16: e7:47:1c:4b:08:4a:d8:18:6e:37:14:f4:01:44:e1: c4:b2:f6:de:26:0f:85:ad:8f:10:d9:dd:57:50:a9: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:71:16:C9:5C:A2:23:13:48:2F:E8:33:AA:C7:9B:4C:41:6B:93 X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e2:15:5e:f2:5c:2c:35:a2:e6:47:b6:38:2a:e8:a2:90:2f: 73:15:31:f9:70:49:e6:42:9e:ad:3b:ff:d3:9b:4b:f0:78:4b: b9:ad:a0:84:ec:76:79:3c:89:d9:3a:00:dd:72:c7:93:89:44: 95:6f:fb:0e:f4:ab:55:ca:ff:29:01:65:6b:36:bc:ed:35:b2: e9:8c:19:20:90:0a:ac:a0:57:ee:db:4e:5a:b5:f0:3b:ab:f2: 47:0f:02:91:3d:cd:7e:14:cc:15:ad:13:82:b5:6d:3c:84:44: 7c:da:2a:9c:09:cd:65:83:da:b8:46:49:74:c8:4c:ee:c0:23: 8c:56:05:1f:a3:d8:5a:88:f0:91:96:b7:d6:8d:a3:c2:0d:35: 64:e8:be:a4:96:80:8a:3f:06:37:5f:40:5d:16:83:aa:1d:af: f2:85:43:b3:49:05:b3:da:54:9c:54:4e:59:ba:a9:98:3a:7a: d1:67:72:5e:5b:5a:1c:bb:f5:85:06:76:c3:07:2b:b0:3a:cf: c1:98:c7:30:95:07:99:76:47:db:52:58:cf:0d:f0:90:ab:04: b5:cf:aa:54:32:a4:6e:8d:ff:96:19:00:48:0f:b9:78:7b:7a: 3d:ae:06:08:36:6f:c6:0b:8a:c2:01:bd:f5:c5:89:73:0e:4e: 0a:9b:fa:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMxRjUxMTAvBgNVBAUTKDQ5MTM2Njc1RTdFMjM0RTdEMkY4ODQ1OTk4RTJDNjJE QjQ4ODgyQ0EwHhcNMjUxMDIzMDgzODA3WhcNMjUxMDMwMDgzODA3WjAYMRYwFAYD VQQDEw02OGY5ZTk2Zi0wNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBES4U9yjtPc+d33X76qaW6F+wtTHizOKa9JuOiinxhGQevCjQUtMigEIZdN 0+4BncUfkqPSRt+s18WYaZf3EN1cSGkNP716cVKPR/Da0vAFu9oGnw5cCxPhw0V+ gP1GrUYBtArxJGQqshoJ28N5Maf4QSHc1ZqB60GY79u8zCnWyyz3YgR9Xmz8EpkQ 2YL4sPQ0aKr2jKvS+1JEbF8M3IShu0h6rYQwI1Q8cum1lZaHGrnhlEaxaBeopwDv KQKylyMItqKxWGKjfX/HClmfeg9UpJ9/F4UqSVCINZCMZxbnRxxLCErYGG43FPQB ROHEsvbeJg+FrY8Q2d1XUKkOywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEo6cRbJ XKIjE0gv6DOqx5tMQWuTMB8GA1UdIwQYMBaAFEkTZnXn4jTn0viEWZjixi20iILK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BNzU0RDM4MEQ2 RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5PZlMtSVJabU9MR0xiU0ln c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5P ZlMtSVJabU9MR0xiU0lnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4hVe8lwsNaLmR7Y4KuiikC9zFTH5cEnmQp6tO//Tm0vweEu5raCE 7HZ5PInZOgDdcseTiUSVb/sO9KtVyv8pAWVrNrztNbLpjBkgkAqsoFfu205atfA7 q/JHDwKRPc1+FMwVrROCtW08hER82iqcCc1lg9q4Rkl0yEzuwCOMVgUfo9haiPCR lrfWjaPCDTVk6L6kloCKPwY3X0BdFoOqHa/yhUOzSQWz2lScVE5ZuqmYOnrRZ3Je W1ocu/WFBnbDByuwOs/BmMcwlQeZdkfbUljPDfCQqwS1z6pUMqRujf+WGQBID7l4 e3o9rgYINm/GC4rCAb31xYlzDk4Km/px -----END CERTIFICATE-----Generated at Fri Oct 24 18:56:30 2025 by rpki-client