$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: Id4cuvICQ4Wb+yoXxjM9MzmM2AdCx0cVNZgpEUuNn7g= Subject key identifier: B4:E5:99:7C:21:3B:D5:D0:B0:EF:C3:22:A0:C4:02:E3:E8:53:28:16 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 0173 Signing time: Sun 19 Oct 2025 06:27:18 +0000 Manifest this update: Sun 19 Oct 2025 06:27:17 +0000 Manifest next update: Sun 26 Oct 2025 06:27:17 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: L3aJXAZb5X2XXXqd2r2p67GCZFD7BOL1po2O1jSlsxE=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Oct 19 06:27:17 2025 GMT Not After : Oct 26 06:27:17 2025 GMT Subject: CN=68f484c6-55d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:33:ed:90:f3:8d:08:94:1f:c8:cd:ff:37: 3f:0f:49:a9:25:44:02:d2:ae:9c:80:11:3b:c1:58: 53:69:fa:aa:1c:ed:d1:c3:7b:b2:86:f7:ca:6e:b9: f2:d0:26:a6:d1:ec:01:6a:78:f6:bb:19:0d:1e:8a: 6b:2c:50:b7:3d:06:90:e7:cd:86:94:c3:10:b7:11: 04:be:a4:91:02:06:0e:63:36:07:9b:fc:d9:73:20: 78:cd:2b:13:04:10:a6:24:c8:56:f2:11:d5:93:af: ef:07:f1:19:12:1d:59:1d:3c:83:24:fe:da:68:41: 10:f0:cd:44:1f:f1:ee:5c:47:16:57:3d:c8:cd:6d: d6:fb:22:59:90:81:78:dd:96:27:6a:00:a4:77:b8: 89:76:46:38:8e:90:98:dd:cf:08:f9:30:28:dd:8e: 8f:19:69:50:55:66:9c:dd:ed:ed:45:d9:f6:a0:a7: 16:51:2d:3a:dd:1c:c7:3c:37:b0:e5:a0:2f:44:27: 70:4f:51:b2:af:a7:68:35:83:62:30:59:74:9d:7b: 41:a0:55:3a:79:3c:a2:cf:10:03:e4:ff:39:ee:49: 76:24:9b:2f:16:42:7c:1b:cb:30:31:50:ee:5a:38: c2:03:e6:65:9d:60:a7:ee:9c:4f:a9:3d:49:12:8a: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E5:99:7C:21:3B:D5:D0:B0:EF:C3:22:A0:C4:02:E3:E8:53:28:16 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0d:92:4e:36:7c:34:b6:d2:f0:65:33:df:70:79:97:19:8f: 14:b1:0b:19:96:e9:bc:8b:6a:aa:9b:77:ba:30:79:5a:a5:53: 98:c3:e4:e6:53:c0:ab:6c:ad:ad:b0:c2:51:8a:cc:5d:2b:9a: ff:8d:cb:3d:1e:75:db:6a:00:d8:b8:8f:2b:ab:69:57:96:96: 38:f7:ec:b8:cc:20:da:9c:50:1d:a0:a1:0a:3d:a0:47:a0:c2: 6a:ce:7b:31:9f:8f:86:c0:6b:d0:83:bd:b9:48:17:98:c6:03: d1:7c:6c:12:f5:10:e0:ee:a3:ec:d4:5d:aa:dc:9d:39:60:8c: e1:f7:63:20:8c:c2:db:bf:7e:28:3e:35:5f:3d:50:a7:5c:99: 06:11:d5:8d:eb:da:07:e8:1c:09:31:dc:39:4f:75:8c:3a:7e: 95:46:b4:92:81:38:79:08:b3:1a:29:56:d7:e7:d6:97:5d:b1: 7a:96:dd:7d:34:97:ff:fe:a9:52:f6:7c:4e:c0:88:df:e6:e3: b1:59:27:ae:8e:e4:61:c8:90:05:8f:79:5a:37:69:b6:98:5a: 52:67:fa:4a:90:0c:84:8c:93:c6:d4:c4:29:53:cd:1e:2f:25: 51:3b:f3:09:37:b7:ac:66:b2:49:b7:66:44:72:52:e8:e0:49: a1:34:6d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUxMDE5MDYyNzE3WhcNMjUxMDI2MDYyNzE3WjAYMRYwFAYD VQQDEw02OGY0ODRjNi01NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlQz7ZDzjQiUH8jN/zc/D0mpJUQC0q6cgBE7wVhTafqqHO3Rw3uyhvfKbrny 0Cam0ewBanj2uxkNHoprLFC3PQaQ582GlMMQtxEEvqSRAgYOYzYHm/zZcyB4zSsT BBCmJMhW8hHVk6/vB/EZEh1ZHTyDJP7aaEEQ8M1EH/HuXEcWVz3IzW3W+yJZkIF4 3ZYnagCkd7iJdkY4jpCY3c8I+TAo3Y6PGWlQVWac3e3tRdn2oKcWUS063RzHPDew 5aAvRCdwT1Gyr6doNYNiMFl0nXtBoFU6eTyizxAD5P857kl2JJsvFkJ8G8swMVDu WjjCA+ZlnWCn7pxPqT1JEoroIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTlmXwh O9XQsO/DIqDEAuPoUygWMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+DZJONnw0ttLwZTPfcHmXGY8UsQsZlum8i2qqm3e6MHlapVOYw+Tm U8CrbK2tsMJRisxdK5r/jcs9HnXbagDYuI8rq2lXlpY49+y4zCDanFAdoKEKPaBH oMJqznsxn4+GwGvQg725SBeYxgPRfGwS9RDg7qPs1F2q3J05YIzh92MgjMLbv34o PjVfPVCnXJkGEdWN69oH6BwJMdw5T3WMOn6VRrSSgTh5CLMaKVbX59aXXbF6lt19 NJf//qlS9nxOwIjf5uOxWSeujuRhyJAFj3laN2m2mFpSZ/pKkAyEjJPG1MQpU80e LyVRO/MJN7esZrJJt2ZEclLo4EmhNG0G -----END CERTIFICATE-----Generated at Tue Oct 21 23:02:30 2025 by rpki-client