$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: 3JQcNtB64MzdZWfj8LjvVcOSaFBPhGOH5yEz2f7b9GE= Subject key identifier: 05:B9:FC:4B:41:2D:DC:7C:FB:47:F4:BA:2C:4B:BB:0F:90:AB:5E:9F Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0CB6 Signing time: Sun 02 Nov 2025 18:36:48 +0000 Manifest this update: Sun 02 Nov 2025 18:36:48 +0000 Manifest next update: Sun 09 Nov 2025 18:36:48 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: kYS9rYxsutcMchJtlAwJY1dk4pIPSRgAKTyisp678MY=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: fAbemN+lwz0SU1+ivydeiDA0TzR3+7XHqo4CZ/rRSIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Nov 2 18:36:48 2025 GMT Not After : Nov 9 18:36:48 2025 GMT Subject: CN=6907a4c0-10f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:04:0a:14:74:6f:b0:ec:8a:84:e7:96:d5: b2:c3:c5:0a:e0:0a:dd:b1:20:0b:70:bf:b4:d9:08: b3:b6:81:b6:4a:e7:4e:fd:1a:4f:c9:99:91:8a:ca: 64:dc:cb:10:a7:cb:5c:24:6d:d6:73:2a:e7:31:54: 7f:ee:7e:81:7d:b8:20:b9:af:f7:c9:b8:06:47:6e: b3:d8:32:cf:8c:23:db:69:b5:0a:44:c9:06:74:d3: a4:97:be:f1:c2:56:bc:3c:3c:66:4e:e7:13:49:6a: 98:ac:7b:eb:fc:c4:bd:46:cf:5d:93:e9:02:60:fe: 08:46:62:63:a3:96:6c:bd:e7:aa:f7:40:e5:63:40: f3:7d:53:90:fd:01:f8:8c:82:77:2e:68:19:e4:ab: b5:99:ba:d2:48:b1:52:7d:17:47:44:e4:b3:08:f3: 9b:ea:cf:9d:61:cd:8a:7d:c7:71:0f:03:21:d5:96: 59:20:6f:27:00:e7:c3:b0:fb:6c:4a:cc:84:03:01: 42:4e:ce:8e:ff:99:55:8b:72:36:1f:e0:f0:bc:d3: 3f:b1:cb:5e:11:c2:bf:2e:47:c2:19:07:5c:4c:19: eb:c2:ed:6f:6a:cc:2d:16:27:68:b5:74:18:e3:96: ed:80:8b:b9:93:29:3d:80:15:ba:85:3d:bd:74:fa: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B9:FC:4B:41:2D:DC:7C:FB:47:F4:BA:2C:4B:BB:0F:90:AB:5E:9F X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:43:60:26:05:6c:6c:d9:96:39:f2:4c:18:28:3a:c0:40:80: bf:57:55:00:88:f2:f8:c7:fe:58:f7:d5:af:51:0f:12:76:0d: b8:50:cf:51:a4:04:8d:2e:83:38:6d:70:ea:0a:21:f5:ab:d1: 20:4f:33:df:16:4b:76:44:7a:8c:13:04:62:25:aa:9e:15:6e: 57:0e:b7:7c:9b:6a:d1:c4:b3:20:17:a5:a7:d3:b2:18:cb:8a: 37:f9:70:37:a1:b4:f1:c4:b6:30:15:b2:0b:bf:28:db:a6:7b: 2b:d4:f3:dd:01:97:08:94:10:56:38:e0:a9:00:ff:b7:0c:f6: c9:0f:e1:ab:a2:57:ca:d8:48:9f:c6:58:d0:6b:f9:e2:5f:4f: 12:88:65:bc:c6:ed:6c:cb:28:86:57:29:2e:d8:8c:fd:5e:1d: 35:c5:8b:f7:14:68:4a:62:b8:82:4e:ec:04:9c:82:ef:98:90: 9b:68:5a:5b:3c:d9:b6:f9:92:86:7f:77:c9:4b:7d:6e:50:be: 06:e5:4f:ef:32:aa:40:6c:53:7f:74:79:ab:fc:82:4c:21:a0: dc:62:a6:9f:56:43:56:f7:21:41:dd:f1:75:0b:8b:36:19:03: cb:0d:32:cf:12:4a:b9:ad:43:d9:5a:dc:e1:09:a4:b5:39:49: 0e:1e:d6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUxMTAyMTgzNjQ4WhcNMjUxMTA5MTgzNjQ4WjAYMRYwFAYD VQQDEw02OTA3YTRjMC0xMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0kEChR0b7DsioTnltWyw8UK4ArdsSALcL+02QiztoG2SudO/RpPyZmRispk 3MsQp8tcJG3WcyrnMVR/7n6Bfbggua/3ybgGR26z2DLPjCPbabUKRMkGdNOkl77x wla8PDxmTucTSWqYrHvr/MS9Rs9dk+kCYP4IRmJjo5Zsveeq90DlY0DzfVOQ/QH4 jIJ3LmgZ5Ku1mbrSSLFSfRdHROSzCPOb6s+dYc2KfcdxDwMh1ZZZIG8nAOfDsPts SsyEAwFCTs6O/5lVi3I2H+DwvNM/scteEcK/LkfCGQdcTBnrwu1vaswtFidotXQY 45btgIu5kyk9gBW6hT29dPo4PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW5/EtB Ldx8+0f0uixLuw+Qq16fMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Q2AmBWxs2ZY58kwYKDrAQIC/V1UAiPL4x/5Y99WvUQ8Sdg24UM9R pASNLoM4bXDqCiH1q9EgTzPfFkt2RHqMEwRiJaqeFW5XDrd8m2rRxLMgF6Wn07IY y4o3+XA3obTxxLYwFbILvyjbpnsr1PPdAZcIlBBWOOCpAP+3DPbJD+GrolfK2Eif xljQa/niX08SiGW8xu1syyiGVyku2Iz9Xh01xYv3FGhKYriCTuwEnILvmJCbaFpb PNm2+ZKGf3fJS31uUL4G5U/vMqpAbFN/dHmr/IJMIaDcYqafVkNW9yFB3fF1C4s2 GQPLDTLPEkq5rUPZWtzhCaS1OUkOHtb2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:10 2025 by rpki-client