$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: qthFMPUBNHv3TZIWLNV/mU4nhTkb9n3yjbCejVcj5QE= Subject key identifier: 10:1D:97:B4:F2:97:87:AD:0B:4B:7A:48:F7:0A:A5:E2:F0:A8:BE:3F Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 45 Signing time: Sat 25 Oct 2025 11:25:58 +0000 Manifest this update: Sat 25 Oct 2025 11:25:58 +0000 Manifest next update: Sat 01 Nov 2025 11:25:58 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: JLWvDwTOa1YjDQdkmE8sJBAE+/Ek6tbvbr7XAXgTisE=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 11:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Oct 25 11:25:58 2025 GMT Not After : Nov 1 11:25:58 2025 GMT Subject: CN=68fcb3c6-8a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:89:63:86:85:d9:db:6f:ce:75:6e:3f:26:84: d5:cd:02:cb:e1:6f:a9:b1:63:32:48:d2:2a:4d:5b: e2:07:3c:ed:50:17:cf:b8:bf:21:33:19:fd:2f:13: 70:ca:b0:6a:3e:b5:44:96:cf:ea:f3:50:f2:9b:de: 6f:3f:90:60:b8:3a:14:65:54:cc:e7:fd:f0:34:9e: 21:bf:e9:83:97:25:19:65:5e:d9:5f:c0:26:29:37: 8e:ab:2c:9e:da:d5:ce:10:77:f8:ed:1a:a0:d2:23: 8e:92:2c:1f:fb:11:17:31:1d:57:82:43:94:41:82: c2:d1:6b:28:74:b5:63:b7:09:50:dd:23:5a:a7:cc: 17:8f:25:5c:2e:7c:d7:9a:da:a9:62:07:bf:e5:e3: 4b:56:ce:0a:2a:d1:31:18:af:b8:75:0c:c9:0f:73: 83:48:87:a0:5a:e3:33:7a:bb:06:f7:24:d5:a5:ea: 22:08:ff:e3:57:3b:e8:23:7e:82:42:e6:ff:46:37: a9:39:92:95:a2:8a:51:c5:2f:59:73:6f:25:26:5f: 55:0a:5e:84:8c:dc:52:20:0c:07:9f:a1:5e:9b:64: 12:d4:a0:cf:0f:ad:33:fe:d6:aa:c5:18:3d:34:38: f4:77:f3:c6:fe:07:a9:f3:c4:0a:cc:22:64:07:8b: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1D:97:B4:F2:97:87:AD:0B:4B:7A:48:F7:0A:A5:E2:F0:A8:BE:3F X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4e:a8:01:3e:d2:03:14:70:5f:1a:0b:64:f1:22:e9:e2:9c: 31:2f:9a:fd:93:13:67:9e:0f:f6:97:0e:d4:f7:ca:4a:85:d7: f5:5b:70:0a:3d:bb:55:b7:33:54:f8:e9:8b:64:c6:da:f3:18: 9c:9c:81:bf:bb:56:6f:8a:24:31:9f:a4:4a:da:de:24:4e:99: eb:ef:6d:69:91:ae:9e:ca:b0:7c:07:fa:3a:c3:7c:15:8b:cd: 13:81:c0:ec:11:2a:82:24:a0:2c:09:2a:98:eb:17:f9:b1:47: 03:bf:89:f2:0a:0c:60:bf:00:ef:2b:7d:b1:33:ef:b7:3e:86: 9f:ad:42:31:40:a9:09:9d:ab:9a:6e:2c:b2:fa:fd:03:f1:a3: d4:60:b4:1c:69:f4:8d:9d:09:02:ce:d6:18:41:ba:52:70:dd: d3:04:6c:0b:53:51:71:ba:60:e3:e1:06:f8:b9:a7:dd:18:c8: 0a:c9:93:82:44:83:30:f2:40:04:9a:e9:76:cd:4a:ce:d4:3f: 33:36:fd:26:15:f9:79:f6:49:f5:08:99:99:d4:a5:f6:9a:ac: 1e:ae:70:e4:63:de:70:b0:05:2a:fa:9b:9e:e0:7b:5d:a1:79: 31:8e:4e:f8:83:83:f3:79:d4:53:da:12:50:57:51:45:30:ec: c4:96:d6:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTEwMjUxMTI1NThaFw0yNTExMDExMTI1NThaMBgxFjAUBgNV BAMTDTY4ZmNiM2M2LThhN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZiWOGhdnbb851bj8mhNXNAsvhb6mxYzJI0ipNW+IHPO1QF8+4vyEzGf0vE3DK sGo+tUSWz+rzUPKb3m8/kGC4OhRlVMzn/fA0niG/6YOXJRllXtlfwCYpN46rLJ7a 1c4Qd/jtGqDSI46SLB/7ERcxHVeCQ5RBgsLRayh0tWO3CVDdI1qnzBePJVwufNea 2qliB7/l40tWzgoq0TEYr7h1DMkPc4NIh6Ba4zN6uwb3JNWl6iII/+NXO+gjfoJC 5v9GN6k5kpWiilHFL1lzbyUmX1UKXoSM3FIgDAefoV6bZBLUoM8PrTP+1qrFGD00 OPR388b+B6nzxArMImQHi4WtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEB2XtPKX h60LS3pI9wql4vCovj8wHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1OqAE+0gMUcF8aC2TxIuninDEvmv2TE2eeD/aXDtT3ykqF1/VbcAo9 u1W3M1T46YtkxtrzGJycgb+7Vm+KJDGfpEra3iROmevvbWmRrp7KsHwH+jrDfBWL zROBwOwRKoIkoCwJKpjrF/mxRwO/ifIKDGC/AO8rfbEz77c+hp+tQjFAqQmdq5pu LLL6/QPxo9RgtBxp9I2dCQLO1hhBulJw3dMEbAtTUXG6YOPhBvi5p90YyArJk4JE gzDyQASa6XbNSs7UPzM2/SYV+Xn2SfUImZnUpfaarB6ucORj3nCwBSr6m57ge12h eTGOTviDg/N51FPaElBXUUUw7MSW1oU= -----END CERTIFICATE-----Generated at Mon Oct 27 07:12:53 2025 by rpki-client