$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json) Hash identifier: X1L1jdvJjHv2po2eHK4RY5ewboAHX1EF9hFd0Yc8mxg= Subject key identifier: 64:29:44:A9:73:D3:AF:D7:BE:DE:D8:C5:AE:0B:D2:A5:11:46:E9:95 Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft Manifest number: 90 Signing time: Fri 17 Oct 2025 09:54:51 +0000 Manifest this update: Fri 17 Oct 2025 09:54:50 +0000 Manifest next update: Fri 24 Oct 2025 09:54:50 +0000 Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: fCiS2dm/incVulav3uX8GPwhv40Ehv2xh/y5QjrBCy0=) 2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: BnzgVRQY1lWGd2cFrP1xnxB6cOmKQA86fc66ckx28mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 09:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Validity Not Before: Oct 17 09:54:50 2025 GMT Not After : Oct 24 09:54:50 2025 GMT Subject: CN=68f2126a-fc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:78:69:32:0c:b5:ff:5c:db:e1:39:94:3f: 2e:d0:21:2b:70:cc:76:27:d0:54:ab:4f:48:03:fe: 95:ad:40:46:4d:a6:38:a7:a1:3e:76:05:27:40:73: dc:b8:18:73:ed:fd:bf:02:3b:53:68:ef:05:2a:20: f4:83:38:ec:2a:d5:93:65:66:3b:77:9c:4e:d2:ef: 25:30:9d:6e:a3:68:69:c8:f4:36:ff:b2:05:60:2f: 03:19:96:77:58:e3:d1:8c:28:95:f9:b8:47:7a:f4: 64:ac:74:63:b2:6a:ec:71:7c:7f:f3:46:ed:44:c3: bc:6c:f6:5b:46:2c:8b:19:85:2e:e9:6e:d2:bd:06: 47:6c:d0:22:4b:a7:f5:ff:0b:cf:94:82:c3:61:1a: 28:16:ff:84:b7:39:7f:b1:ff:dc:11:cb:c1:c5:30: 85:0b:8a:e5:d6:61:3d:a0:90:9a:b4:52:8c:6d:2e: b4:06:04:ea:fb:17:9b:a1:7c:c8:f2:bb:13:de:77: 0e:76:2a:91:77:ae:54:c0:83:1b:48:9b:ee:7c:82: 94:51:e3:1e:63:50:d9:63:4c:35:52:af:49:10:94: ef:d1:87:d5:91:0c:ca:37:0e:f4:64:32:9b:4d:ad: bc:7d:ca:f6:bc:1f:a9:14:90:2c:39:57:2f:3b:4d: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:29:44:A9:73:D3:AF:D7:BE:DE:D8:C5:AE:0B:D2:A5:11:46:E9:95 X509v3 Authority Key Identifier: keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:bc:ad:2e:d2:6c:67:f0:65:da:e0:a0:bb:48:f9:45:c2:e1: 76:34:9f:fe:06:d1:63:a7:2b:c8:c1:fd:1b:a1:10:18:bf:19: a2:48:e3:cc:a9:20:07:80:85:0e:9c:04:53:f6:85:ae:ba:95: b7:4b:1b:78:61:f6:9d:a0:57:77:32:63:22:26:c9:9b:b6:8c: 56:48:d0:fa:2a:43:2c:f2:8e:b4:24:eb:52:8e:5f:16:e6:61: 78:7a:31:78:f9:25:a0:d3:e9:df:f7:c2:8a:a6:c2:af:76:cb: 56:e5:df:ea:1e:f0:8a:0c:ac:90:59:05:ab:66:61:f4:6e:90: c4:43:ae:70:7b:5e:02:a0:0f:47:3e:be:2d:3f:e2:4d:c9:37: d4:83:f0:08:c1:b4:ca:b0:c2:ea:35:47:1c:73:73:a3:13:e4: 5e:ee:2b:ba:32:5a:11:56:7d:11:14:02:de:ba:63:7f:cd:34: 66:c7:65:a1:d1:0d:13:f2:1f:ae:10:5e:a8:83:20:40:e6:14: 8e:9b:7d:c0:36:2a:1a:71:e7:67:d5:3e:b9:43:a3:ef:af:fd: 5e:fe:80:5d:a6:3b:bb:c0:35:e6:ad:99:d1:f0:8d:0d:00:6f: f5:55:90:30:e2:14:fe:49:76:c4:e0:ac:ca:fa:20:22:5e:e3: 96:f1:d6:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKEQzNkUxMDQyNjFGODE5RDY4RDBGNzBCQjI5QURGRThF RjQ2M0IyRUQwHhcNMjUxMDE3MDk1NDUwWhcNMjUxMDI0MDk1NDUwWjAYMRYwFAYD VQQDEw02OGYyMTI2YS1mYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzV4aTIMtf9c2+E5lD8u0CErcMx2J9BUq09IA/6VrUBGTaY4p6E+dgUnQHPc uBhz7f2/AjtTaO8FKiD0gzjsKtWTZWY7d5xO0u8lMJ1uo2hpyPQ2/7IFYC8DGZZ3 WOPRjCiV+bhHevRkrHRjsmrscXx/80btRMO8bPZbRiyLGYUu6W7SvQZHbNAiS6f1 /wvPlILDYRooFv+Etzl/sf/cEcvBxTCFC4rl1mE9oJCatFKMbS60BgTq+xeboXzI 8rsT3ncOdiqRd65UwIMbSJvufIKUUeMeY1DZY0w1Uq9JEJTv0YfVkQzKNw70ZDKb Ta28fcr2vB+pFJAsOVcvO028kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQpRKlz 06/Xvt7Yxa4L0qURRumVMB8GA1UdIwQYMBaAFNNuEEJh+BnWjQ9wuymt/o70Y7Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy80RkVDMUMwNENF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdkYU5EM0M3S2EzLWp2Umpz dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy80RkVDMUMwNENFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdk YU5EM0M3S2EzLWp2UmpzdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhvK0u0mxn8GXa4KC7SPlFwuF2NJ/+BtFjpyvIwf0boRAYvxmiSOPM qSAHgIUOnART9oWuupW3Sxt4YfadoFd3MmMiJsmbtoxWSND6KkMs8o60JOtSjl8W 5mF4ejF4+SWg0+nf98KKpsKvdstW5d/qHvCKDKyQWQWrZmH0bpDEQ65we14CoA9H Pr4tP+JNyTfUg/AIwbTKsMLqNUccc3OjE+Re7iu6MloRVn0RFALeumN/zTRmx2Wh 0Q0T8h+uEF6ogyBA5hSOm33ANioacedn1T65Q6Pvr/1e/oBdpju7wDXmrZnR8I0N AG/1VZAw4hT+SXbE4KzK+iAiXuOW8dZq -----END CERTIFICATE-----Generated at Sat Oct 18 23:36:33 2025 by rpki-client