$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: 5B/pDivbWGXpktqkB89bhX5yJNTo4fbjNJNjBANfUQo= Subject key identifier: 4C:6B:F3:25:66:E2:94:41:57:97:F9:CB:91:11:20:39:F2:ED:5B:79 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: DF Signing time: Thu 23 Oct 2025 07:32:01 +0000 Manifest this update: Thu 23 Oct 2025 07:32:00 +0000 Manifest next update: Thu 30 Oct 2025 07:32:00 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: LAHl9nzq23E2mQ+7Cm+IsVwIBm3q+eK/sADvB1wyEjU=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Oct 23 07:32:00 2025 GMT Not After : Oct 30 07:32:00 2025 GMT Subject: CN=68f9d9f0-ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:e9:bd:93:2f:50:1e:f8:ec:f9:bb:4a:d2: 9d:c5:5c:e7:2f:26:18:04:86:73:cf:61:f7:4a:88: 80:89:a7:75:a0:a4:95:8d:fe:a7:cd:47:cc:f5:44: b9:98:81:61:32:b8:ab:69:74:00:cb:af:be:ce:b9: 09:41:af:99:28:93:04:2c:1c:3f:f7:c6:98:7c:40: c1:88:95:fa:5d:fe:56:1d:c8:c2:06:d7:6b:d1:2e: 6b:b4:1c:b0:a9:74:69:2d:c5:b3:28:99:5a:ac:33: da:d4:b6:3d:90:cf:5d:76:14:5e:d4:6c:3f:6b:6f: 5d:9b:47:e0:ea:42:e5:b4:a7:24:16:28:18:f0:5e: d0:e7:2a:7e:1a:40:54:77:31:cb:a3:10:c7:95:98: 81:14:25:c1:57:b1:44:a5:56:f5:9d:8a:cb:47:13: 6e:a3:c4:e8:15:55:45:1f:6a:76:81:77:0a:d6:5b: 03:2c:91:cc:08:cc:57:14:af:96:b8:34:c4:49:91: 27:bd:0e:b9:08:68:92:93:6d:dd:ea:36:3a:31:d7: f9:26:03:96:f9:66:f2:99:33:0a:0b:6f:54:0c:4a: bf:93:93:72:06:03:2e:71:b9:35:f6:af:e8:9b:eb: 75:fb:12:6f:45:d5:7f:96:f6:c1:82:46:4b:1d:23: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6B:F3:25:66:E2:94:41:57:97:F9:CB:91:11:20:39:F2:ED:5B:79 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:13:e1:70:2e:a8:b4:65:64:11:db:d7:2e:82:93:a2:b6:09: 07:fb:7a:cb:ae:07:c2:4c:5f:3d:0c:01:85:f6:15:d3:af:26: a5:46:6d:9c:b1:b6:44:65:74:61:80:2c:8d:2b:f2:d2:41:8e: 44:44:b1:69:19:75:ae:91:07:d3:03:ff:26:fd:fd:9d:d5:48: 76:66:65:8a:de:6a:fc:5d:9d:30:20:64:da:6c:86:39:46:c5: 49:1b:03:4d:dd:79:f9:a2:71:58:28:0d:7e:6b:e1:73:1a:6a: 27:cc:07:16:09:bd:ec:4f:79:a6:06:c1:df:bf:32:2e:25:2b: 9f:66:3a:86:5e:bf:a6:29:16:59:af:45:f7:6f:7e:ff:ac:ed: 06:68:b6:ad:8c:36:ee:e1:e1:97:33:ef:f5:e8:05:7f:fa:ec: 03:a0:56:25:5c:f4:e2:e2:9a:fc:51:3e:1f:9b:55:9b:7c:dc: 31:b3:f2:c3:3a:98:ff:bc:a9:e6:39:d4:c6:f4:06:65:65:a5: c5:9c:3b:b1:a4:79:88:88:60:e3:9f:b6:70:11:89:5a:65:16: 45:1c:b6:75:9a:d4:61:81:71:2f:4c:9d:08:1b:55:92:a1:e8: 4d:2f:7d:d0:e0:5f:c9:3f:58:38:f1:01:03:fc:7a:18:c0:e0: 5f:e7:35:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUxMDIzMDczMjAwWhcNMjUxMDMwMDczMjAwWjAYMRYwFAYD VQQDEw02OGY5ZDlmMC1jY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11/pvZMvUB747Pm7StKdxVznLyYYBIZzz2H3SoiAiad1oKSVjf6nzUfM9US5 mIFhMriraXQAy6++zrkJQa+ZKJMELBw/98aYfEDBiJX6Xf5WHcjCBtdr0S5rtByw qXRpLcWzKJlarDPa1LY9kM9ddhRe1Gw/a29dm0fg6kLltKckFigY8F7Q5yp+GkBU dzHLoxDHlZiBFCXBV7FEpVb1nYrLRxNuo8ToFVVFH2p2gXcK1lsDLJHMCMxXFK+W uDTESZEnvQ65CGiSk23d6jY6Mdf5JgOW+WbymTMKC29UDEq/k5NyBgMucbk19q/o m+t1+xJvRdV/lvbBgkZLHSPdpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExr8yVm 4pRBV5f5y5ERIDny7Vt5MB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3E+FwLqi0ZWQR29cugpOitgkH+3rLrgfCTF89DAGF9hXTryalRm2c sbZEZXRhgCyNK/LSQY5ERLFpGXWukQfTA/8m/f2d1Uh2ZmWK3mr8XZ0wIGTabIY5 RsVJGwNN3Xn5onFYKA1+a+FzGmonzAcWCb3sT3mmBsHfvzIuJSufZjqGXr+mKRZZ r0X3b37/rO0GaLatjDbu4eGXM+/16AV/+uwDoFYlXPTi4pr8UT4fm1WbfNwxs/LD Opj/vKnmOdTG9AZlZaXFnDuxpHmIiGDjn7ZwEYlaZRZFHLZ1mtRhgXEvTJ0IG1WS oehNL33Q4F/JP1g48QED/HoYwOBf5zXX -----END CERTIFICATE-----Generated at Thu Oct 23 10:15:10 2025 by rpki-client