$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: d6s6Inc9c1m6/MLq4VASHLOHrYPKlpBJjFbJK2bhy/8= Subject key identifier: 0B:56:4F:16:3F:31:41:EC:1B:8A:0C:91:62:19:6D:C6:23:52:D2:2A Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09F5 Signing time: Mon 20 Oct 2025 20:41:49 +0000 Manifest this update: Mon 20 Oct 2025 20:41:49 +0000 Manifest next update: Mon 27 Oct 2025 20:41:49 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: VPnUPuTx3TB5sOMKsyv2w2BG5iJSyjwAboxFi3HVwoA=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: j3TvpWzSPFDlAyo3sD7Pw75i2w5zEIxOHyTqJM4+nXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2556 (0x9fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Oct 20 20:41:49 2025 GMT Not After : Oct 27 20:41:49 2025 GMT Subject: CN=68f69e8d-0cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:1d:da:cd:6d:e8:a4:12:99:1d:49:44:02: 21:7c:54:63:bf:58:90:93:d1:9d:bf:87:e1:a5:5e: 2a:4d:62:9e:2d:ec:2f:e2:78:3d:67:bb:1d:e0:6f: 27:fe:70:a1:9c:9f:43:dd:5b:b9:52:a9:47:28:d2: e9:e1:a5:4b:0f:df:b1:c4:01:48:71:34:39:97:e8: 44:37:82:d8:55:a8:bd:0f:ba:8f:92:73:d9:0f:32: 89:65:6b:de:35:3f:ea:cc:50:ec:5f:51:16:b0:c4: 74:8e:f2:ee:36:51:81:37:17:5c:d8:21:a6:78:60: 90:1d:e6:c6:a6:98:11:04:cd:07:a3:20:ad:77:93: ce:81:3d:17:22:17:26:57:69:26:e5:37:b6:13:ea: f9:28:a2:41:2b:d4:10:65:19:2e:e3:f7:22:e0:42: 29:79:ae:e2:34:5d:6d:55:ea:e4:32:1f:37:1b:8e: 9b:f1:8f:16:76:29:b0:cf:72:3b:6d:c1:1a:99:b5: e4:b7:07:68:00:88:5b:72:84:74:6c:32:20:91:d7: 0f:fb:c0:7a:89:9d:43:70:82:fa:19:68:2a:25:d8: 41:ae:77:0f:ff:20:b5:e9:5c:a8:26:68:bf:bb:9e: 80:86:19:8a:dc:2f:eb:09:34:5f:56:7a:3f:d8:ac: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:56:4F:16:3F:31:41:EC:1B:8A:0C:91:62:19:6D:C6:23:52:D2:2A X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8f:04:c9:5f:19:59:af:26:29:9b:a3:4e:98:be:38:53:8b: d4:05:46:71:9b:e1:d9:07:66:6b:8e:d1:a1:32:c6:95:73:f6: 86:2f:b2:6b:64:bd:f8:4d:a3:16:35:be:4c:8e:8f:fb:27:7e: 21:24:04:02:df:f4:9c:22:0a:0e:98:3e:7b:b8:87:77:cb:7a: da:5b:59:21:fa:17:4c:54:68:4f:12:9e:11:2f:37:83:e4:7f: 1b:62:1a:e7:f2:09:8e:26:9e:74:9f:d2:c1:7a:df:9a:4e:af: 94:8c:51:90:e2:8e:5d:84:f8:02:96:e7:27:3f:9d:34:62:37: bd:44:75:ef:88:5f:f0:f0:d0:d2:de:13:35:6c:6b:fe:30:fe: c8:0d:19:d4:8b:ef:70:f8:eb:b8:2b:6b:55:22:95:05:71:0c: 16:c6:33:f4:67:ea:7a:bf:0f:8f:b7:66:02:03:be:bb:ea:86: f9:4b:ad:a9:27:20:d4:9d:03:e0:00:98:a7:60:eb:3a:2c:cf: bf:51:89:65:47:be:e8:ba:96:2a:f0:fd:96:ce:58:eb:dc:58: 19:7d:d3:44:6a:51:cf:ba:68:c0:f5:fb:df:4f:67:83:6a:e3: 87:ca:8a:ae:8f:99:19:30:0f:a4:b2:77:61:9c:fc:bb:5c:30: a7:a1:9b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUxMDIwMjA0MTQ5WhcNMjUxMDI3MjA0MTQ5WjAYMRYwFAYD VQQDEw02OGY2OWU4ZC0wY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8Ad2s1t6KQSmR1JRAIhfFRjv1iQk9Gdv4fhpV4qTWKeLewv4ng9Z7sd4G8n /nChnJ9D3Vu5UqlHKNLp4aVLD9+xxAFIcTQ5l+hEN4LYVai9D7qPknPZDzKJZWve NT/qzFDsX1EWsMR0jvLuNlGBNxdc2CGmeGCQHebGppgRBM0HoyCtd5POgT0XIhcm V2km5Te2E+r5KKJBK9QQZRku4/ci4EIpea7iNF1tVerkMh83G46b8Y8Wdimwz3I7 bcEambXktwdoAIhbcoR0bDIgkdcP+8B6iZ1DcIL6GWgqJdhBrncP/yC16VyoJmi/ u56AhhmK3C/rCTRfVno/2KwYnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtWTxY/ MUHsG4oMkWIZbcYjUtIqMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQjwTJXxlZryYpm6NOmL44U4vUBUZxm+HZB2ZrjtGhMsaVc/aGL7Jr ZL34TaMWNb5Mjo/7J34hJAQC3/ScIgoOmD57uId3y3raW1kh+hdMVGhPEp4RLzeD 5H8bYhrn8gmOJp50n9LBet+aTq+UjFGQ4o5dhPgClucnP500Yje9RHXviF/w8NDS 3hM1bGv+MP7IDRnUi+9w+Ou4K2tVIpUFcQwWxjP0Z+p6vw+Pt2YCA7676ob5S62p JyDUnQPgAJinYOs6LM+/UYllR77oupYq8P2Wzljr3FgZfdNEalHPumjA9fvfT2eD auOHyoquj5kZMA+ksndhnPy7XDCnoZsL -----END CERTIFICATE-----Generated at Wed Oct 22 19:06:17 2025 by rpki-client