$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: wjVaNSpbC534tF37pKq1rQ19JVspjsF56oWRtpT+xB0= Subject key identifier: 36:6E:F3:E6:4D:8E:4D:DE:3B:17:0E:50:86:B2:B8:33:4F:05:79:4E Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 0226 Signing time: Mon 27 Oct 2025 03:41:14 +0000 Manifest this update: Mon 27 Oct 2025 03:41:14 +0000 Manifest next update: Mon 03 Nov 2025 03:41:14 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: T46MWf9855/vgvWP95qT7fdm42BZpgVXIn2niOtmiPY=) 2: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: n2zLDtDaPNL3Ye6qBkwU/zpDC2mfhiqQ0N3aGF+8gOs=) 3: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: KwJcRfcCHNm1/1H4hZVLWjzBmRVSuYEae2GuTglAJm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Oct 27 03:41:14 2025 GMT Not After : Nov 3 03:41:14 2025 GMT Subject: CN=68fee9da-5852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:9f:2c:c1:e3:33:ed:a6:46:2f:90:d4:3e: c7:9e:79:aa:e9:d4:50:44:a0:c9:da:3a:e5:6f:b8: c8:17:7e:1c:88:42:a6:31:0c:5f:05:b3:4e:9d:6a: 05:61:d8:b9:03:7c:13:3a:38:7d:ae:0b:3b:d7:24: f1:d0:86:a0:94:cf:29:d8:05:d2:91:18:99:1e:c1: d3:96:7c:39:98:ce:01:05:0a:42:26:cb:71:12:d6: d4:19:53:91:05:59:ea:8c:8a:25:67:70:83:4e:a2: 84:92:a5:f5:2e:5c:71:aa:29:00:8f:1e:60:59:40: 34:e4:80:83:2a:34:12:19:89:9d:e9:9e:39:bc:a8: 63:eb:eb:e2:a7:56:1a:ac:70:1d:4b:16:e3:da:8f: 8a:76:b2:14:6f:26:f7:76:d7:3e:2b:6b:4d:1c:d2: 71:c0:02:de:04:22:85:47:58:06:ad:f6:09:ab:47: 3b:b3:3c:06:f5:e0:6b:68:99:e6:19:b7:b7:3e:4d: 44:dc:d3:7b:68:67:68:cd:80:a5:ba:b2:8c:1d:51: 16:87:7e:e6:3c:b0:84:49:5d:75:25:a2:e4:6b:95: 7f:97:94:e2:32:03:3c:1f:93:0a:e0:36:5b:3a:95: 13:f8:2c:78:8a:de:f5:12:85:1f:fc:ac:09:b0:2d: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6E:F3:E6:4D:8E:4D:DE:3B:17:0E:50:86:B2:B8:33:4F:05:79:4E X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:03:34:63:d4:cb:0f:93:f2:88:e3:2b:a8:19:6f:94:94:d3: 57:77:83:df:a3:e6:19:9e:4f:62:32:92:c7:fc:b5:e9:83:a9: 6a:3a:fa:08:82:08:fd:cd:59:b9:f2:6f:cc:ef:a5:68:a3:8f: ba:6f:8a:79:42:19:f7:9e:fd:ea:6d:9d:e6:c7:46:52:17:f2: 57:19:c5:8d:2f:98:55:7a:a2:50:92:f2:22:f3:a1:92:2a:2f: 40:62:85:2a:c9:61:c7:82:fb:f7:ed:ff:0b:c5:a3:4b:ba:74: 5b:cf:a2:fe:3e:b2:dc:a9:df:cc:48:1a:bd:fd:2e:dd:77:83: 7d:01:52:0a:0d:60:12:05:4d:ea:81:b5:40:61:30:73:67:88: c8:fd:a8:72:3a:97:1b:22:51:91:c6:4c:ee:27:1c:8a:4b:87: 01:ee:59:0e:d7:d4:a4:7e:49:2e:19:8c:08:9a:02:ef:92:b3: 92:1c:3f:41:3f:3b:0e:8f:e3:d7:da:fb:6e:df:1b:27:38:ab: 70:04:0b:e3:b4:97:76:8c:4c:37:ef:66:5f:cf:30:a4:6c:36: 40:7f:65:6d:e1:ff:c0:44:4d:5b:51:1f:df:dd:d4:4e:04:3b: 99:53:d4:d4:f3:51:8a:7f:46:16:b9:29:2b:8a:11:7c:8a:c0: ff:3c:36:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjUxMDI3MDM0MTE0WhcNMjUxMTAzMDM0MTE0WjAYMRYwFAYD VQQDEw02OGZlZTlkYS01ODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA2fLMHjM+2mRi+Q1D7Hnnmq6dRQRKDJ2jrlb7jIF34ciEKmMQxfBbNOnWoF Ydi5A3wTOjh9rgs71yTx0IaglM8p2AXSkRiZHsHTlnw5mM4BBQpCJstxEtbUGVOR BVnqjIolZ3CDTqKEkqX1LlxxqikAjx5gWUA05ICDKjQSGYmd6Z45vKhj6+vip1Ya rHAdSxbj2o+KdrIUbyb3dtc+K2tNHNJxwALeBCKFR1gGrfYJq0c7szwG9eBraJnm Gbe3Pk1E3NN7aGdozYClurKMHVEWh37mPLCESV11JaLka5V/l5TiMgM8H5MK4DZb OpUT+Cx4it71EoUf/KwJsC0c8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZu8+ZN jk3eOxcOUIayuDNPBXlOMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQAzRj1MsPk/KI4yuoGW+UlNNXd4Pfo+YZnk9iMpLH/LXpg6lqOvoI ggj9zVm58m/M76Voo4+6b4p5Qhn3nv3qbZ3mx0ZSF/JXGcWNL5hVeqJQkvIi86GS Ki9AYoUqyWHHgvv37f8LxaNLunRbz6L+PrLcqd/MSBq9/S7dd4N9AVIKDWASBU3q gbVAYTBzZ4jI/ahyOpcbIlGRxkzuJxyKS4cB7lkO19SkfkkuGYwImgLvkrOSHD9B PzsOj+PX2vtu3xsnOKtwBAvjtJd2jEw372ZfzzCkbDZAf2Vt4f/ARE1bUR/f3dRO BDuZU9TU81GKf0YWuSkrihF8isD/PDbg -----END CERTIFICATE-----Generated at Tue Oct 28 05:21:20 2025 by rpki-client