$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json) Hash identifier: TOM1IoiKF6SbYrAH/zGv5Mp9OBHMbk3vt6y77hFH7/0= Subject key identifier: E7:BD:79:64:C7:86:6D:E1:32:22:13:95:9F:D1:73:F8:86:10:A9:D8 Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft Manifest number: 1B Signing time: Fri 17 Oct 2025 11:40:08 +0000 Manifest this update: Fri 17 Oct 2025 11:40:07 +0000 Manifest next update: Fri 24 Oct 2025 11:40:07 +0000 Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: /ekdrqrg1WDcZlPdQ1TcwLEAzw+CEZzGtw9CTWwrKaY=) 2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: i3hC7Bm4Sc2fZvEP1yJ7KPUWPcWy4K6JJCzO9mbz3fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Validity Not Before: Oct 17 11:40:07 2025 GMT Not After : Oct 24 11:40:07 2025 GMT Subject: CN=68f22b17-54c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:a4:73:1a:32:4e:70:b7:6d:91:bd:0b:d7: db:c9:25:7c:7f:35:e6:ef:a1:5e:90:86:77:1b:e3: 3f:10:a9:bc:25:51:14:77:c1:3d:14:ab:e3:42:96: fb:dc:f7:10:18:b5:df:da:53:1e:5f:e1:16:08:24: 36:40:b8:a4:f2:2d:83:7a:d8:4e:44:df:fe:d7:e7: 83:9f:1a:d3:30:e0:11:91:40:7b:b6:f3:ed:56:e8: ae:9f:5a:c4:a2:40:e2:c3:f8:94:97:de:26:12:c9: 11:a5:75:98:10:3b:74:69:c0:5a:a6:11:33:98:00: 2b:ae:be:28:99:aa:ff:04:d4:e2:6f:0a:f8:61:0e: e4:c2:4e:0f:e8:6a:56:f5:f7:49:e3:1d:ef:38:cd: 82:36:c3:31:47:d0:62:4c:72:e5:21:48:cf:0e:8c: 02:1b:56:f3:81:8e:89:a6:2b:54:15:58:e4:0c:8e: b4:c9:ce:9a:1a:45:1e:9a:73:f7:62:ee:a1:3f:5a: 1c:14:d1:60:76:1f:0f:a7:b6:2e:16:30:dc:41:49: e6:fd:6d:eb:c3:e1:ce:4b:f5:4f:86:28:e2:b5:8a: 73:cc:87:0b:ac:91:8d:39:b1:f3:45:91:16:85:98: 8b:37:38:1d:be:03:0c:f1:1d:a2:16:41:0e:55:7a: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:79:64:C7:86:6D:E1:32:22:13:95:9F:D1:73:F8:86:10:A9:D8 X509v3 Authority Key Identifier: keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:47:1a:53:16:47:4c:27:76:68:d4:1c:56:35:12:9a:1a:29: 35:74:a4:42:63:32:7e:e4:b6:84:2d:f3:da:02:58:a9:9d:99: bf:b0:99:e6:19:15:e0:a6:45:21:76:9a:7b:39:c6:8b:bc:b0: 30:98:55:ee:f7:17:11:76:59:64:9d:93:bb:a0:ff:79:78:51: db:36:7b:5a:1e:34:97:fb:99:eb:04:f9:ab:b2:8e:99:91:8d: 62:fd:91:8a:e2:51:59:c3:93:a2:cb:57:77:15:e0:f7:81:bf: 24:83:70:d6:99:ab:d5:84:c3:19:90:f1:55:f4:73:15:5f:96: 3d:72:db:4d:e3:b6:8c:22:22:36:8e:1c:b1:1b:96:5e:67:b5: 2f:bc:85:5b:11:6f:04:52:2f:f7:9d:a3:06:ed:f6:b7:36:6d: 23:34:6f:02:26:ce:20:98:28:13:f0:e9:ed:fd:7f:05:1d:8d: 91:98:e0:75:75:87:fa:2d:d5:ee:ec:bf:bf:ea:5c:6f:0a:71: 9f:49:93:84:84:88:31:80:e4:9f:c4:ba:de:a9:7b:d1:48:56: 8b:44:90:65:05:dd:20:29:f5:f2:71:b0:fe:b4:5e:53:ce:06: 32:51:55:68:aa:fc:3c:be:e3:e1:29:72:25:82:b2:e5:a9:29: 08:fb:f5:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy MERCRUU5RTAeFw0yNTEwMTcxMTQwMDdaFw0yNTEwMjQxMTQwMDdaMBgxFjAUBgNV BAMTDTY4ZjIyYjE3LTU0YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCviaRzGjJOcLdtkb0L19vJJXx/NebvoV6Qhncb4z8QqbwlURR3wT0Uq+NClvvc 9xAYtd/aUx5f4RYIJDZAuKTyLYN62E5E3/7X54OfGtMw4BGRQHu28+1W6K6fWsSi QOLD+JSX3iYSyRGldZgQO3RpwFqmETOYACuuviiZqv8E1OJvCvhhDuTCTg/oalb1 90njHe84zYI2wzFH0GJMcuUhSM8OjAIbVvOBjommK1QVWOQMjrTJzpoaRR6ac/di 7qE/WhwU0WB2Hw+nti4WMNxBSeb9bevD4c5L9U+GKOK1inPMhwuskY05sfNFkRaF mIs3OB2+AwzxHaIWQQ5Veq6BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5715ZMeG beEyIhOVn9Fz+IYQqdgwHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5 WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxHGlMWR0wndmjUHFY1EpoaKTV0pEJjMn7ktoQt89oCWKmdmb+wmeYZ FeCmRSF2mns5xou8sDCYVe73FxF2WWSdk7ug/3l4Uds2e1oeNJf7mesE+auyjpmR jWL9kYriUVnDk6LLV3cV4PeBvySDcNaZq9WEwxmQ8VX0cxVflj1y203jtowiIjaO HLEbll5ntS+8hVsRbwRSL/edowbt9rc2bSM0bwImziCYKBPw6e39fwUdjZGY4HV1 h/ot1e7sv7/qXG8KcZ9Jk4SEiDGA5J/Eut6pe9FIVotEkGUF3SAp9fJxsP60XlPO BjJRVWiq/Dy+4+EpciWCsuWpKQj79a4= -----END CERTIFICATE-----Generated at Sat Oct 18 18:02:59 2025 by rpki-client