$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: DgWrPkTXJL+onWsOF7thJ2LgE41J4QXJLYviW71o418= Subject key identifier: 49:6A:4B:8A:D9:2B:AE:FD:23:C6:6B:8B:F7:F9:84:13:17:68:62:FF Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2AC2 Signing time: Wed 22 Oct 2025 15:41:00 +0000 Manifest this update: Wed 22 Oct 2025 15:40:59 +0000 Manifest next update: Wed 29 Oct 2025 15:40:59 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: 8UYC1BlmoAt+izW10Hj/SOpr5h59Aslzlks5WM2Whzg=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: hRXVDS2SOPtJ34LPdCH4GrMLjogwv7F/rCNwzymK5NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10969 (0x2ad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Oct 22 15:40:59 2025 GMT Not After : Oct 29 15:40:59 2025 GMT Subject: CN=68f8fb0c-8021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:b5:52:52:68:c2:1b:f8:61:b9:dd:ab:3a: 45:ab:d5:7d:56:6e:50:14:2b:aa:44:84:7a:60:01: eb:d9:7d:b7:93:3e:1f:e6:9d:be:db:02:c9:68:24: 48:7a:0f:f2:07:d6:cb:fc:ab:0e:71:53:c4:01:15: 59:19:ac:76:1d:3a:82:30:be:f3:64:4c:e0:e3:81: 74:61:1e:56:05:a6:be:0d:7f:ff:13:0f:78:fb:1c: b4:d5:9e:7d:f0:3e:20:76:6c:89:3c:eb:68:c9:98: 93:73:5f:7c:70:56:5f:ce:1f:72:91:f0:c1:29:c2: 7d:db:e0:bc:22:e0:2c:1c:a8:d3:95:1d:db:ce:e7: cb:82:97:42:ed:cb:fc:1f:0d:24:b7:f5:11:0a:d1: c1:b4:06:f1:64:22:ee:b9:c4:f2:65:85:d1:d2:47: 3c:68:7e:cf:ec:25:5a:8b:48:d5:29:d6:2b:9c:34: 3d:ad:fe:3e:1c:0a:9d:8e:2d:a7:2a:05:4c:41:9b: 7f:e9:7d:1d:33:20:19:e7:a4:3c:ab:dd:90:ab:56: 5c:07:be:80:a2:08:45:2b:cf:78:03:0a:47:88:11: 74:69:97:ab:3c:d6:34:c6:10:81:42:05:d5:ff:a2: 4c:d0:b6:b9:a8:35:9d:7a:66:15:75:41:1b:45:4e: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6A:4B:8A:D9:2B:AE:FD:23:C6:6B:8B:F7:F9:84:13:17:68:62:FF X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:01:3f:55:3f:8a:27:21:8e:65:af:88:83:21:03:ab:fc:fa: e3:27:40:53:ff:bf:8b:c6:58:18:2b:69:d1:be:46:06:4d:33: 17:b0:46:36:78:e8:c4:a7:29:5c:dc:8d:f6:8c:dc:5b:ec:95: cd:08:e8:e5:e8:68:fa:e9:ce:83:07:c7:00:5b:a5:56:5f:7e: 56:e6:c5:78:a1:8a:ae:30:60:29:18:b2:5e:26:53:b8:4f:ab: cc:ea:cf:f9:71:55:c2:7c:20:47:b5:9a:48:df:02:0a:8b:4a: 7d:9f:62:72:69:10:17:0a:9e:2e:29:3c:3f:a5:bd:95:3c:0d: 21:30:6a:61:b5:bd:af:53:71:b5:10:83:fc:88:e0:08:ff:99: 79:2b:0a:e8:02:b7:c3:71:43:97:9b:55:62:38:17:0f:7c:a8: 59:d1:90:65:c4:ea:2c:47:5c:ac:a7:fd:d4:85:b4:4c:1e:28: 93:15:14:b1:25:96:9f:f6:db:85:40:9c:71:54:fd:a5:67:4b: 9f:f0:f1:d1:e6:8f:92:47:48:a5:17:6f:86:91:38:6b:c4:95: d7:14:42:cf:b2:13:c7:59:d6:8c:6b:9e:51:25:91:de:cf:ca: be:02:6f:e7:3a:66:d1:88:03:fd:96:ce:77:00:17:6f:40:27: c0:35:2d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUxMDIyMTU0MDU5WhcNMjUxMDI5MTU0MDU5WjAYMRYwFAYD VQQDEw02OGY4ZmIwYy04MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF+1UlJowhv4YbndqzpFq9V9Vm5QFCuqRIR6YAHr2X23kz4f5p2+2wLJaCRI eg/yB9bL/KsOcVPEARVZGax2HTqCML7zZEzg44F0YR5WBaa+DX//Ew94+xy01Z59 8D4gdmyJPOtoyZiTc198cFZfzh9ykfDBKcJ92+C8IuAsHKjTlR3bzufLgpdC7cv8 Hw0kt/URCtHBtAbxZCLuucTyZYXR0kc8aH7P7CVai0jVKdYrnDQ9rf4+HAqdji2n KgVMQZt/6X0dMyAZ56Q8q92Qq1ZcB76AoghFK894AwpHiBF0aZerPNY0xhCBQgXV /6JM0La5qDWdemYVdUEbRU75fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElqS4rZ K679I8Zri/f5hBMXaGL/MB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKAT9VP4onIY5lr4iDIQOr/PrjJ0BT/7+LxlgYK2nRvkYGTTMXsEY2 eOjEpylc3I32jNxb7JXNCOjl6Gj66c6DB8cAW6VWX35W5sV4oYquMGApGLJeJlO4 T6vM6s/5cVXCfCBHtZpI3wIKi0p9n2JyaRAXCp4uKTw/pb2VPA0hMGphtb2vU3G1 EIP8iOAI/5l5KwroArfDcUOXm1ViOBcPfKhZ0ZBlxOosR1ysp/3UhbRMHiiTFRSx JZaf9tuFQJxxVP2lZ0uf8PHR5o+SR0ilF2+GkThrxJXXFELPshPHWdaMa55RJZHe z8q+Am/nOmbRiAP9ls53ABdvQCfANS1+ -----END CERTIFICATE-----Generated at Wed Oct 22 22:39:50 2025 by rpki-client