$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: CHi2aSCBVnSyfegxTlA5OCffwpZWERda2Se9zqnEai4= Subject key identifier: A5:ED:F4:DA:89:A3:FD:DE:B1:30:42:51:95:B3:AB:B5:D4:62:5E:41 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 06CD Signing time: Wed 22 Oct 2025 23:05:48 +0000 Manifest this update: Wed 22 Oct 2025 23:05:48 +0000 Manifest next update: Wed 29 Oct 2025 23:05:48 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: 8GdV+Wn++1XzODlWVOkcr6uy5BA8UDgTylDTHIyD5+I=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Oct 22 23:05:48 2025 GMT Not After : Oct 29 23:05:48 2025 GMT Subject: CN=68f9634c-9066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:f3:5a:d7:92:66:56:f7:14:00:39:bb:60: 0c:70:45:2c:d7:f7:2e:72:3e:e7:e1:21:49:95:7f: fd:e7:01:2d:74:34:72:5d:16:da:4a:e0:54:32:e2: ec:00:56:e0:60:56:b6:9e:c7:21:1f:65:39:8b:0c: 4a:b5:d8:13:ef:f1:55:0e:88:73:f3:ce:99:d4:7b: 49:e9:fe:32:9b:b0:94:cd:2c:10:43:98:2e:5d:b3: c2:79:7f:f2:80:49:d3:7a:6f:fb:5b:89:03:c3:95: 8f:5b:a0:eb:ce:b7:8e:44:86:10:ed:7c:18:8f:f5: 4c:32:f5:87:6c:ab:4b:70:f1:3d:39:82:a7:2e:11: 8e:8f:41:3e:23:7b:17:d7:c6:78:eb:e1:4c:5a:78: a5:68:a5:a4:29:04:92:5c:3e:22:86:fb:a1:8f:a5: 7a:eb:22:6a:21:48:60:16:30:18:8d:15:f1:cd:8e: af:5f:c1:d2:ea:28:8c:0a:e9:fb:79:86:3d:b5:9d: 41:87:1b:15:67:f4:0e:f0:44:b8:c9:f8:d7:d0:3b: 71:ce:91:61:35:ab:d6:40:68:a2:d7:e1:52:af:60: 6d:dc:e2:f4:58:c7:2d:4f:f6:1e:4b:9e:47:43:9f: 65:85:0e:e5:24:4e:80:7a:6e:70:de:54:79:fa:ed: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:ED:F4:DA:89:A3:FD:DE:B1:30:42:51:95:B3:AB:B5:D4:62:5E:41 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:88:49:ad:33:e2:bf:85:6f:ef:e4:c3:1c:45:af:1d:be:16: b0:2c:56:51:ec:2e:ed:7e:0c:9b:52:76:58:cc:9b:ca:2a:67: 6b:64:cc:7b:fa:34:3e:4e:cf:a4:6f:91:3c:06:66:15:63:41: 05:39:38:c9:09:54:4f:32:b6:02:6e:47:18:41:0d:ef:44:39: 2a:c5:04:72:7e:fb:a9:8e:73:13:5d:c8:1b:0e:2c:b5:1c:8f: 18:dc:94:8b:a3:8f:e5:0c:a7:02:49:20:5c:2e:05:02:da:2f: 95:fc:b8:92:d3:25:4a:e1:1c:60:38:ce:ac:38:3f:44:1d:23: 88:28:73:33:26:d7:e8:80:65:a5:c1:73:6e:04:72:cd:77:c7: f3:4a:87:93:aa:f9:51:85:73:7d:89:6b:c8:ea:4d:37:6e:d8: 09:54:f8:54:19:48:71:2d:c9:0a:a4:41:62:a3:1d:d4:0f:5b: e5:4e:fa:6c:fa:68:f8:6e:3c:c3:28:5d:73:ed:15:9d:e0:10: 24:79:a0:29:0d:77:15:94:cd:6c:35:fe:27:ad:57:75:fb:af: 10:52:4b:1b:a6:54:a8:77:ef:fb:ce:c7:91:26:d6:05:d6:62: 70:77:10:1f:dc:e2:1f:b1:32:53:66:2e:fc:72:7d:f0:60:d6: e5:db:3a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUxMDIyMjMwNTQ4WhcNMjUxMDI5MjMwNTQ4WjAYMRYwFAYD VQQDEw02OGY5NjM0Yy05MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9nzWteSZlb3FAA5u2AMcEUs1/cucj7n4SFJlX/95wEtdDRyXRbaSuBUMuLs AFbgYFa2nschH2U5iwxKtdgT7/FVDohz886Z1HtJ6f4ym7CUzSwQQ5guXbPCeX/y gEnTem/7W4kDw5WPW6DrzreORIYQ7XwYj/VMMvWHbKtLcPE9OYKnLhGOj0E+I3sX 18Z46+FMWnilaKWkKQSSXD4ihvuhj6V66yJqIUhgFjAYjRXxzY6vX8HS6iiMCun7 eYY9tZ1BhxsVZ/QO8ES4yfjX0DtxzpFhNavWQGii1+FSr2Bt3OL0WMctT/YeS55H Q59lhQ7lJE6Aem5w3lR5+u25YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXt9NqJ o/3esTBCUZWzq7XUYl5BMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAiEmtM+K/hW/v5MMcRa8dvhawLFZR7C7tfgybUnZYzJvKKmdrZMx7 +jQ+Ts+kb5E8BmYVY0EFOTjJCVRPMrYCbkcYQQ3vRDkqxQRyfvupjnMTXcgbDiy1 HI8Y3JSLo4/lDKcCSSBcLgUC2i+V/LiS0yVK4RxgOM6sOD9EHSOIKHMzJtfogGWl wXNuBHLNd8fzSoeTqvlRhXN9iWvI6k03btgJVPhUGUhxLckKpEFiox3UD1vlTvps +mj4bjzDKF1z7RWd4BAkeaApDXcVlM1sNf4nrVd1+68QUksbplSod+/7zseRJtYF 1mJwdxAf3OIfsTJTZi78cn3wYNbl2zry -----END CERTIFICATE-----Generated at Fri Oct 24 18:14:58 2025 by rpki-client