$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: XcKVngjTWctWoHa+nusqYgkM6njxwytju1F6GuxLGaY= Subject key identifier: 92:01:96:3C:51:96:8D:4B:6F:54:D9:86:AE:13:BE:83:0E:73:64:4D Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 34F1 Signing time: Wed 22 Oct 2025 15:06:48 +0000 Manifest this update: Wed 22 Oct 2025 15:06:47 +0000 Manifest next update: Wed 29 Oct 2025 15:06:47 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: H2IZTYrKqMkR2w4yGrSk8LyEju0M/uAPJB1KPi8i8xk=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: rz7KWjBZEYdZagJgiTo6rpG1kH3c3NzFacklKm2JF8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Oct 22 15:06:47 2025 GMT Not After : Oct 29 15:06:47 2025 GMT Subject: CN=68f8f307-7e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:29:40:c0:31:76:4b:6e:06:d4:41:7a:69:45: ea:4e:4f:46:45:67:5f:34:b0:52:ef:34:21:0f:e1: 97:61:d9:cd:bf:30:9f:06:00:2f:af:6b:ee:37:dd: 94:90:e2:40:68:fc:44:28:a1:77:5e:a3:af:fe:06: a0:3e:a7:9a:40:2d:32:ef:e1:c2:b3:e8:02:1e:02: e5:2a:62:00:77:85:53:b2:32:76:51:f1:da:97:3b: 6a:bb:ab:2b:cf:7f:38:31:af:9b:11:a7:ff:2e:12: 60:a7:43:87:99:9d:5a:75:50:f6:75:c0:02:ca:4c: 82:bf:82:d2:1c:4d:a2:5e:2f:0d:cf:c0:31:cc:76: 58:00:cc:f8:2d:21:ab:8f:9d:1c:4e:41:ed:17:a6: ff:fb:7f:37:6d:b4:ad:21:97:d5:05:f3:23:3c:35: 82:0f:2e:ae:8d:7b:c8:e9:2d:ab:b1:dc:27:3c:7d: ef:fe:93:c0:a9:05:e0:99:ed:08:1c:32:a3:29:bc: e9:63:3e:0d:8a:db:f8:63:b0:4f:5b:9c:05:72:66: 22:ff:9f:7c:cc:77:12:19:a3:42:46:58:a4:05:5c: b2:ef:bf:ee:01:5d:92:66:17:60:d3:47:a1:1c:b1: ae:7e:34:60:ca:09:62:a9:0c:3c:b3:07:0b:30:f8: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:01:96:3C:51:96:8D:4B:6F:54:D9:86:AE:13:BE:83:0E:73:64:4D X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:32:0f:6c:d0:26:3f:d7:a3:61:a9:25:1e:f4:ee:3a:8c:2d: ee:c6:10:45:78:96:69:17:0c:9a:a2:b8:ff:84:fd:42:ca:30: c2:a0:a1:20:79:35:92:45:39:7c:34:4d:4d:6b:59:6b:8f:37: 7c:80:a9:9a:9b:e7:a4:9e:3e:dc:be:90:22:5f:59:79:f4:87: 2e:da:68:a4:6d:36:e5:1b:6b:88:9e:c1:5e:75:dd:c9:a1:71: ec:4e:5a:87:59:be:02:3a:50:9c:0b:f7:c6:4b:6d:ba:a4:90: c5:32:24:5a:d5:ba:b1:62:2a:1d:ba:77:1f:e4:17:ae:e8:b2: 2f:af:45:66:00:3d:d8:b1:09:9c:c1:23:ae:3b:48:05:b1:6a: cd:48:4a:23:6f:d6:39:5b:35:56:dc:61:46:57:f2:5b:6b:76: e3:0c:da:11:25:17:b6:39:b4:82:74:73:3a:6b:c8:c0:9e:e9: 47:88:53:b0:ff:95:45:fe:ff:64:6b:cb:e7:b1:20:5f:6e:21: c1:7d:ab:3b:7f:d8:5a:8d:b0:6c:e8:06:ab:c1:93:e1:3c:8b: bd:0a:16:52:4d:d6:68:bd:04:93:94:ca:c2:3b:75:df:f7:fe: 3d:d5:54:f4:2f:3f:18:87:a3:f2:f1:c5:de:73:4c:3e:d6:c3: 2c:78:59:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjUxMDIyMTUwNjQ3WhcNMjUxMDI5MTUwNjQ3WjAYMRYwFAYD VQQDEw02OGY4ZjMwNy03ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ClAwDF2S24G1EF6aUXqTk9GRWdfNLBS7zQhD+GXYdnNvzCfBgAvr2vuN92U kOJAaPxEKKF3XqOv/gagPqeaQC0y7+HCs+gCHgLlKmIAd4VTsjJ2UfHalztqu6sr z384Ma+bEaf/LhJgp0OHmZ1adVD2dcACykyCv4LSHE2iXi8Nz8AxzHZYAMz4LSGr j50cTkHtF6b/+383bbStIZfVBfMjPDWCDy6ujXvI6S2rsdwnPH3v/pPAqQXgme0I HDKjKbzpYz4Nitv4Y7BPW5wFcmYi/598zHcSGaNCRlikBVyy77/uAV2SZhdg00eh HLGufjRgygliqQw8swcLMPj0fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIBljxR lo1Lb1TZhq4TvoMOc2RNMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Mg9s0CY/16NhqSUe9O46jC3uxhBFeJZpFwyaorj/hP1CyjDCoKEg eTWSRTl8NE1Na1lrjzd8gKmam+eknj7cvpAiX1l59Icu2mikbTblG2uInsFedd3J oXHsTlqHWb4COlCcC/fGS226pJDFMiRa1bqxYioduncf5Beu6LIvr0VmAD3YsQmc wSOuO0gFsWrNSEojb9Y5WzVW3GFGV/Jba3bjDNoRJRe2ObSCdHM6a8jAnulHiFOw /5VF/v9ka8vnsSBfbiHBfas7f9hajbBs6AarwZPhPIu9ChZSTdZovQSTlMrCO3Xf 9/491VT0Lz8Yh6Py8cXec0w+1sMseFlE -----END CERTIFICATE-----Generated at Thu Oct 23 06:40:37 2025 by rpki-client