$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: JlYgCdQzYY1jvR5OL272GJschwR/xqSoNfr6ecItpFE= Subject key identifier: A9:67:F0:40:0D:D3:2F:61:24:8B:F6:9D:B7:29:C9:5D:8A:9C:19:F4 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 02E4 Signing time: Wed 05 Nov 2025 01:26:26 +0000 Manifest this update: Wed 05 Nov 2025 01:26:25 +0000 Manifest next update: Wed 12 Nov 2025 01:26:25 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: lkekzR2EG7IdtrXNjdwJ1AFDzlqlxKJ93C/54m04/FQ=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: 9v/ZeGZKD58JIKPG+TPtlKNDrryBJF2rWiKbvOcAj4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Nov 5 01:26:25 2025 GMT Not After : Nov 12 01:26:25 2025 GMT Subject: CN=690aa7c2-854e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:b6:d4:6b:44:dc:5a:41:32:5d:7b:7f:aa: 11:2c:fe:5e:06:6c:57:41:f9:38:04:95:3f:fe:75: 8f:b7:36:20:f8:e6:91:41:d7:33:9d:21:c1:e0:f9: 82:8d:ae:95:76:7b:86:68:72:6d:34:1d:0a:1b:10: 4b:ad:e0:c1:ec:59:f1:b2:c4:fe:d9:f1:50:36:11: a1:75:88:3e:ef:bc:9c:f6:18:1c:1e:4c:21:f3:ea: c3:e6:62:e2:99:6c:97:04:4e:9b:ce:5a:54:7b:cc: c2:19:c0:17:75:22:a3:69:ee:31:b5:2a:69:d1:19: 01:95:44:0a:6c:ca:3e:cf:c1:94:7c:52:92:27:4a: d8:61:59:a0:a3:02:c5:92:64:a2:4d:fe:a2:92:b6: 0e:cf:19:2b:60:d0:25:93:48:9c:87:bf:39:e9:b8: 1b:1d:0a:83:e8:23:c0:2e:72:f4:96:11:51:a0:71: 4a:97:8d:33:b7:b8:00:8e:ae:bd:42:f1:f0:06:2b: 33:32:ff:5e:ea:b5:07:7c:35:1c:b9:20:8d:48:6d: ca:8a:b5:46:d1:75:38:43:e6:2d:91:18:36:a1:c7: 54:88:36:e9:74:99:78:37:b2:3b:0c:56:02:70:29: 51:10:c8:cb:b1:55:d4:c7:dd:31:c9:c4:20:6c:72: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:67:F0:40:0D:D3:2F:61:24:8B:F6:9D:B7:29:C9:5D:8A:9C:19:F4 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:99:f9:89:6d:85:ab:5a:58:ef:d8:c9:46:29:87:89:5e:b2: d4:16:55:2e:21:28:c8:93:bc:6e:f9:ac:15:80:b8:d8:78:87: cc:74:9b:5c:97:82:d9:10:20:d9:37:93:75:75:c2:8b:ed:1a: 0d:04:a9:eb:8f:87:d7:44:1a:2a:c4:bb:48:d7:0f:4e:f1:31: f7:34:eb:aa:59:44:90:a2:19:a5:8c:df:bb:97:c1:8b:bd:d3: a4:f9:8b:0e:74:aa:23:2d:f2:9f:82:2d:89:31:54:83:a8:d7: b9:fb:81:3c:ac:6c:a7:2b:d1:54:93:b1:a0:81:11:70:dc:d4: da:e6:1c:5d:85:f1:2c:cf:4f:4b:bf:87:ce:fa:b4:dd:8a:e4: 2e:6c:57:e0:fd:2c:bd:82:8d:95:ae:93:fe:39:12:cf:38:d2: 44:b7:9e:09:d4:73:d3:49:fe:3c:90:f6:35:d3:ef:48:b2:5d: 65:3e:89:b7:55:4d:66:62:ab:ec:e0:d5:5d:92:0b:b2:1d:7d: 56:38:c7:f0:13:d8:d9:1e:b6:13:47:75:67:41:49:fe:b4:f9: f0:e5:96:0e:ce:61:64:ad:4f:3c:31:f8:6d:fd:ee:7e:2c:a1: 02:fb:8a:85:51:be:be:f9:a0:dd:42:b8:6a:71:20:27:fc:a0: 8b:a8:ab:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUxMTA1MDEyNjI1WhcNMjUxMTEyMDEyNjI1WjAYMRYwFAYD VQQDEw02OTBhYTdjMi04NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd621GtE3FpBMl17f6oRLP5eBmxXQfk4BJU//nWPtzYg+OaRQdcznSHB4PmC ja6VdnuGaHJtNB0KGxBLreDB7FnxssT+2fFQNhGhdYg+77yc9hgcHkwh8+rD5mLi mWyXBE6bzlpUe8zCGcAXdSKjae4xtSpp0RkBlUQKbMo+z8GUfFKSJ0rYYVmgowLF kmSiTf6ikrYOzxkrYNAlk0ich7856bgbHQqD6CPALnL0lhFRoHFKl40zt7gAjq69 QvHwBiszMv9e6rUHfDUcuSCNSG3KirVG0XU4Q+YtkRg2ocdUiDbpdJl4N7I7DFYC cClREMjLsVXUx90xycQgbHL8CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKln8EAN 0y9hJIv2nbcpyV2KnBn0MB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmmfmJbYWrWljv2MlGKYeJXrLUFlUuISjIk7xu+awVgLjYeIfMdJtc l4LZECDZN5N1dcKL7RoNBKnrj4fXRBoqxLtI1w9O8TH3NOuqWUSQohmljN+7l8GL vdOk+YsOdKojLfKfgi2JMVSDqNe5+4E8rGynK9FUk7GggRFw3NTa5hxdhfEsz09L v4fO+rTdiuQubFfg/Sy9go2VrpP+ORLPONJEt54J1HPTSf48kPY10+9Isl1lPom3 VU1mYqvs4NVdkguyHX1WOMfwE9jZHrYTR3VnQUn+tPnw5ZYOzmFkrU88Mfht/e5+ LKEC+4qFUb6++aDdQrhqcSAn/KCLqKsR -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:34 2025 by rpki-client