$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: 9YgK8qEeig2LbMcMOO6bulnckn57odpfFGTH4E3munY= Subject key identifier: 4E:A2:FB:E3:A1:60:BB:90:29:8D:88:D7:60:5B:30:A4:B8:12:BC:C5 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0CF2 Signing time: Thu 30 Oct 2025 18:04:23 +0000 Manifest this update: Thu 30 Oct 2025 18:04:22 +0000 Manifest next update: Thu 06 Nov 2025 18:04:22 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: VDXoHzrOQVOjw+LdindQ80lfJTdGm1PfaAHvrRPvmF0=) 2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: vuIx5uN5ZZTHGHOWV+i45uzSngomzzsL58ntfcnGCEs=) 3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Oct 30 18:04:22 2025 GMT Not After : Nov 6 18:04:22 2025 GMT Subject: CN=6903a8a7-1735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:81:85:4b:fb:58:2a:7d:7c:0a:9d:d4:a6: eb:d9:6e:49:84:e0:79:8a:17:b6:4a:c8:66:f6:d2: d1:08:0d:70:b1:4f:02:d3:ed:99:96:e8:92:89:73: 33:8c:3d:ec:bf:62:d0:99:9a:2f:0b:ab:a5:00:4d: 3b:ac:98:9a:c4:76:5f:6e:bb:0c:c4:6b:80:b6:af: c4:2f:36:c6:d6:26:a9:90:04:f2:df:12:41:43:2d: a3:a6:03:cf:aa:c4:d8:62:50:92:d9:19:e3:e6:43: 14:ce:27:eb:3b:c1:d9:55:c5:3d:67:12:52:12:95: 6e:e4:6e:9b:f7:6f:9e:67:f0:22:c5:ea:a7:95:53: a4:90:da:14:26:2a:0e:71:d6:7c:5f:e0:2e:cd:55: 9b:bc:9c:89:e3:ea:1c:b5:9f:86:71:aa:8e:6c:72: 09:ca:06:e6:50:05:2f:3a:37:4e:b9:e6:d6:53:eb: 8c:5e:3e:a8:95:fa:c9:9a:9d:bc:ca:bd:d1:f6:5b: 1d:e8:b5:ba:bc:7a:01:18:76:77:90:ae:57:a7:8d: 58:5c:b5:af:21:f5:69:ab:6f:99:77:6f:67:72:a9: 25:34:04:4b:9f:7b:f5:63:ae:ce:d4:58:2a:79:29: 63:5e:bf:26:1c:e4:3a:c5:df:08:7a:8f:42:21:de: 45:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:FB:E3:A1:60:BB:90:29:8D:88:D7:60:5B:30:A4:B8:12:BC:C5 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3c:ae:98:3a:c3:95:4c:a3:42:cf:a0:b3:ee:d9:96:b9:9a: f8:5c:da:4a:b8:ef:7c:26:c7:11:5c:fd:94:24:01:4c:53:e3: 56:22:78:24:19:a4:fb:8b:66:86:df:2e:ea:36:79:08:e0:fc: c8:b1:0c:f6:d9:11:75:06:92:7b:36:5c:43:ce:03:f4:fc:a4: 65:42:58:37:6d:d8:8b:70:f8:be:70:67:4c:7d:26:85:1d:aa: b4:0c:62:11:b3:88:27:77:f6:be:96:3d:36:05:fa:29:b3:6d: c5:f1:1c:1a:6e:05:0b:bb:96:35:75:d4:73:82:36:94:cf:2e: 31:bc:d6:ab:4f:86:6b:c6:b8:89:e1:9d:b3:89:42:f1:b5:f8: 8b:10:4f:2f:3d:88:b8:c9:b8:76:cf:38:1a:61:ae:9d:42:6e: cb:18:f4:34:d7:f2:2b:11:11:6b:53:73:c9:59:89:07:95:1c: f8:f5:4e:74:4e:0f:36:f3:37:75:bd:c5:06:af:32:60:8c:af: 51:a8:11:d6:61:f6:c2:ad:38:35:73:2d:95:46:55:78:bb:be: d8:13:a4:43:40:c9:ee:51:05:14:80:59:56:c1:29:de:62:b8: 11:a3:d7:ab:82:ea:80:29:a3:eb:0b:7a:74:0a:f7:8b:50:05: ae:de:ba:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjUxMDMwMTgwNDIyWhcNMjUxMTA2MTgwNDIyWjAYMRYwFAYD VQQDEw02OTAzYThhNy0xNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9+BhUv7WCp9fAqd1Kbr2W5JhOB5ihe2Sshm9tLRCA1wsU8C0+2ZluiSiXMz jD3sv2LQmZovC6ulAE07rJiaxHZfbrsMxGuAtq/ELzbG1iapkATy3xJBQy2jpgPP qsTYYlCS2Rnj5kMUzifrO8HZVcU9ZxJSEpVu5G6b92+eZ/AixeqnlVOkkNoUJioO cdZ8X+AuzVWbvJyJ4+octZ+GcaqObHIJygbmUAUvOjdOuebWU+uMXj6olfrJmp28 yr3R9lsd6LW6vHoBGHZ3kK5Xp41YXLWvIfVpq2+Zd29ncqklNARLn3v1Y67O1Fgq eSljXr8mHOQ6xd8Ieo9CId5FUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6i++Oh YLuQKY2I12BbMKS4ErzFMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSPK6YOsOVTKNCz6Cz7tmWuZr4XNpKuO98JscRXP2UJAFMU+NWIngk GaT7i2aG3y7qNnkI4PzIsQz22RF1BpJ7NlxDzgP0/KRlQlg3bdiLcPi+cGdMfSaF Haq0DGIRs4gnd/a+lj02Bfops23F8RwabgULu5Y1ddRzgjaUzy4xvNarT4ZrxriJ 4Z2ziULxtfiLEE8vPYi4ybh2zzgaYa6dQm7LGPQ01/IrERFrU3PJWYkHlRz49U50 Tg828zd1vcUGrzJgjK9RqBHWYfbCrTg1cy2VRlV4u77YE6RDQMnuUQUUgFlWwSne YrgRo9erguqAKaPrC3p0CveLUAWu3rox -----END CERTIFICATE-----Generated at Fri Oct 31 05:40:20 2025 by rpki-client