$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: 5NhuMqD6QaR5T0BP8akeVXH7mRFiFqLykTu6iRCGF+c= Subject key identifier: 04:CE:AE:6C:6D:CE:B1:E4:D5:10:60:C7:91:17:39:72:5E:5C:C1:52 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1385 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 136E Signing time: Mon 20 Oct 2025 17:25:06 +0000 Manifest this update: Mon 20 Oct 2025 17:25:05 +0000 Manifest next update: Mon 27 Oct 2025 17:25:05 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: mrFN1U8Vwn4sSJ8b+MYEWlvDD6gYE60JMIAwb69WAKQ=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4997 (0x1385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Oct 20 17:25:05 2025 GMT Not After : Oct 27 17:25:05 2025 GMT Subject: CN=68f67072-93a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:5b:85:7d:b4:86:76:a4:08:6d:df:65:8c: 52:3f:d7:83:a5:2c:29:2f:2a:ba:5c:6a:3c:e4:98: bc:c1:d9:1d:33:7b:e7:98:e0:ec:fa:c1:75:ee:53: 5c:e1:f9:8a:c2:4b:71:e4:4b:61:8d:c7:c4:e7:07: d6:9c:1d:fb:ab:b0:bc:5c:f7:0e:1e:b0:92:2e:0a: 12:53:54:d9:d3:9f:0e:80:1a:d0:b9:8c:f2:83:51: 4a:5c:bc:7c:12:a4:db:92:4d:88:02:95:37:f7:4f: dc:12:2d:a4:28:61:5c:ad:d9:17:d1:57:a6:84:57: b3:50:f5:ce:bd:61:f4:22:33:bc:9b:fc:18:aa:03: 24:63:7f:ae:3f:46:69:5f:46:ba:e0:2d:e2:45:1a: 2e:dd:eb:f5:c8:0a:e4:22:a7:00:04:42:5b:21:12: 98:f2:48:8b:4d:58:c8:35:a5:74:50:1b:bb:42:fc: 99:e7:7f:47:49:17:59:9e:d6:69:3c:f1:ee:78:2b: fd:32:fb:7a:54:02:cc:eb:d6:48:1c:c1:b5:de:9e: 12:ac:7f:da:ff:27:1c:48:45:64:b9:59:00:3d:b9: 2d:75:28:8c:4f:3a:3a:5a:67:3c:b4:2a:63:92:8e: c4:5a:a0:21:1c:bb:12:ce:37:a1:5d:45:bb:ee:7a: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CE:AE:6C:6D:CE:B1:E4:D5:10:60:C7:91:17:39:72:5E:5C:C1:52 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:29:00:c7:60:4d:04:72:93:10:92:98:a7:ae:57:55:e9:7a: e7:bb:8d:a6:e6:d2:04:c4:0d:d0:92:10:e6:e8:4b:fa:75:68: 06:61:18:c8:7e:ed:ad:3f:d5:db:78:fc:e0:8e:32:e3:aa:e5: 97:90:ec:47:95:29:66:3c:c7:27:d5:ea:35:b2:8e:f2:d9:a1: fe:b4:31:b7:eb:25:0e:3b:e4:73:d6:8e:6c:17:d1:5d:9b:6b: 87:8f:61:be:18:2d:fb:16:1b:c3:33:c4:21:f1:9f:07:65:74: d6:17:ce:7c:22:11:92:4d:56:de:2b:da:67:eb:24:75:b8:ee: 26:d6:17:62:16:a2:12:7b:84:64:58:43:d9:43:76:62:a9:f5: 78:56:74:5e:3b:2a:00:4f:e1:64:c6:2f:06:6d:ef:36:e3:17: 13:59:00:ee:35:75:f7:0d:e4:68:a7:f0:63:aa:61:f1:15:d1: 09:19:c2:c7:db:db:fa:09:58:49:70:9a:94:44:e8:7c:f7:f1: 07:34:60:e9:41:0d:eb:b0:ed:3f:73:04:e6:64:38:a8:3d:69: 49:6f:ba:09:ed:21:87:62:8c:a6:97:72:65:b8:a3:c2:75:f5: ec:5b:20:d7:de:ab:f3:16:c3:c5:74:a9:36:cf:ca:cd:b7:a6: fc:35:50:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUxMDIwMTcyNTA1WhcNMjUxMDI3MTcyNTA1WjAYMRYwFAYD VQQDEw02OGY2NzA3Mi05M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCBbhX20hnakCG3fZYxSP9eDpSwpLyq6XGo85Ji8wdkdM3vnmODs+sF17lNc 4fmKwktx5EthjcfE5wfWnB37q7C8XPcOHrCSLgoSU1TZ058OgBrQuYzyg1FKXLx8 EqTbkk2IApU390/cEi2kKGFcrdkX0VemhFezUPXOvWH0IjO8m/wYqgMkY3+uP0Zp X0a64C3iRRou3ev1yArkIqcABEJbIRKY8kiLTVjINaV0UBu7QvyZ539HSRdZntZp PPHueCv9Mvt6VALM69ZIHMG13p4SrH/a/yccSEVkuVkAPbktdSiMTzo6Wmc8tCpj ko7EWqAhHLsSzjehXUW77nqhCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATOrmxt zrHk1RBgx5EXOXJeXMFSMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQKQDHYE0EcpMQkpinrldV6Xrnu42m5tIExA3QkhDm6Ev6dWgGYRjI fu2tP9XbePzgjjLjquWXkOxHlSlmPMcn1eo1so7y2aH+tDG36yUOO+Rz1o5sF9Fd m2uHj2G+GC37FhvDM8Qh8Z8HZXTWF858IhGSTVbeK9pn6yR1uO4m1hdiFqISe4Rk WEPZQ3ZiqfV4VnReOyoAT+Fkxi8Gbe824xcTWQDuNXX3DeRop/BjqmHxFdEJGcLH 29v6CVhJcJqUROh89/EHNGDpQQ3rsO0/cwTmZDioPWlJb7oJ7SGHYoyml3JluKPC dfXsWyDX3qvzFsPFdKk2z8rNt6b8NVDj -----END CERTIFICATE-----Generated at Tue Oct 21 13:52:19 2025 by rpki-client