$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json) Hash identifier: Z+81jyE8LFWhU8feDbGPjykjCvwHlO9gCacsfR5nzHE= Subject key identifier: 1A:10:D7:37:A6:09:56:FE:53:64:9E:CB:6A:E3:38:CD:4A:7D:20:9E Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft Manifest number: 0209 Signing time: Mon 03 Nov 2025 02:19:41 +0000 Manifest this update: Mon 03 Nov 2025 02:19:41 +0000 Manifest next update: Mon 10 Nov 2025 02:19:41 +0000 Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: R5nKyVoUg68YQDIImp1wrFmvfPxOV0+lEqM6oeHrUs0=) 2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: 0cSwyQIrwsLrX5HCGrd1L+L8tXaOyusCzdo4wFfko7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: Nov 3 02:19:41 2025 GMT Not After : Nov 10 02:19:41 2025 GMT Subject: CN=6908113d-63d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:02:31:6a:7e:c1:4f:86:4f:5b:d3:e1:83: 02:da:a3:bf:3e:64:35:86:96:5a:a8:7b:1f:26:ef: 54:db:7f:a4:91:16:36:cd:5a:ba:5d:05:25:23:c8: 87:5a:a3:bb:a8:15:ec:90:27:3b:d5:2a:bf:6e:df: 08:36:38:85:33:32:9a:16:71:63:d2:aa:41:db:91: 6a:5b:c9:e4:67:39:40:55:ed:54:31:8d:f9:c5:9a: 9c:31:b7:dc:b2:c0:1a:32:29:46:a4:d1:af:d0:01: 26:14:b2:46:62:59:8e:3a:58:a4:2b:0f:76:cc:2f: 1c:df:24:85:cb:d1:ac:bb:d5:bb:76:08:f8:09:d7: 66:2b:9d:ca:61:f9:26:76:94:b1:34:58:59:69:b5: 33:b3:25:92:29:f3:0e:31:8c:3f:3c:d4:b0:87:60: 29:85:63:51:fe:c7:95:03:bb:c5:0a:2a:6f:d6:bc: 38:fd:71:eb:49:ae:e6:40:6f:54:38:18:53:ca:aa: 2e:da:1f:15:3c:a4:cc:8f:e2:93:51:68:db:29:de: 24:bc:f0:fe:a8:75:78:85:8b:fd:15:85:1e:85:0f: 34:9c:02:29:d7:28:59:6a:9b:d3:20:cc:cd:88:47: 10:e7:cb:58:fc:0b:c8:40:f0:46:8c:a4:16:d2:e1: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:D7:37:A6:09:56:FE:53:64:9E:CB:6A:E3:38:CD:4A:7D:20:9E X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:1d:b1:bd:73:74:c9:5d:af:d8:8f:e0:c7:54:42:d0:43:06: 64:ec:7f:18:08:f5:cc:16:73:c6:0e:9a:fc:07:5e:34:5b:5f: 9c:b5:47:4a:b8:6b:df:59:40:83:46:d2:fe:30:43:6b:c5:c2: 6a:cd:4c:da:84:09:1b:82:62:20:02:44:72:e1:50:ca:7d:35: 6f:52:7a:7f:55:5a:ad:16:8c:58:50:b7:95:9a:a4:11:82:3c: ea:ea:49:42:b2:7f:80:46:b6:df:ab:9e:48:c3:44:b1:47:14: 39:10:c9:f6:97:00:29:53:3b:df:b4:0f:14:b1:cd:c4:c6:df: 9f:3e:c0:1a:a4:f6:7b:8b:93:84:17:a2:4f:d7:da:69:98:06: dc:8b:cf:c3:85:16:ec:c3:f9:c2:8e:b3:f4:73:3b:e1:69:72: d0:c4:1e:8f:50:84:df:e0:d4:a7:1e:e5:88:70:f6:50:49:3e: ac:9f:99:9e:98:20:96:df:8e:43:41:2f:29:6c:5c:aa:12:b3: 65:3e:fa:70:8f:42:ab:38:bd:ae:78:a0:98:6b:61:c6:34:06: de:28:c8:30:3e:8a:a3:e4:0e:c3:d2:8a:d6:79:59:47:bb:bc: 4c:72:23:64:af:09:cc:77:26:3b:f7:60:9f:ef:19:a0:1b:1f: ba:29:a8:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjUxMTAzMDIxOTQxWhcNMjUxMTEwMDIxOTQxWjAYMRYwFAYD VQQDEw02OTA4MTEzZC02M2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFACMWp+wU+GT1vT4YMC2qO/PmQ1hpZaqHsfJu9U23+kkRY2zVq6XQUlI8iH WqO7qBXskCc71Sq/bt8INjiFMzKaFnFj0qpB25FqW8nkZzlAVe1UMY35xZqcMbfc ssAaMilGpNGv0AEmFLJGYlmOOlikKw92zC8c3ySFy9Gsu9W7dgj4CddmK53KYfkm dpSxNFhZabUzsyWSKfMOMYw/PNSwh2AphWNR/seVA7vFCipv1rw4/XHrSa7mQG9U OBhTyqou2h8VPKTMj+KTUWjbKd4kvPD+qHV4hYv9FYUehQ80nAIp1yhZapvTIMzN iEcQ58tY/AvIQPBGjKQW0uEKdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoQ1zem CVb+U2Sey2rjOM1KfSCeMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFNC8wNUZFRjQ0QTlFMEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVu d09abXNVcHNaWFNsTnZObk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRHbG9c3TJXa/Yj+DHVELQQwZk7H8YCPXMFnPGDpr8B140W1+ctUdK uGvfWUCDRtL+MENrxcJqzUzahAkbgmIgAkRy4VDKfTVvUnp/VVqtFoxYULeVmqQR gjzq6klCsn+ARrbfq55Iw0SxRxQ5EMn2lwApUzvftA8Usc3Ext+fPsAapPZ7i5OE F6JP19ppmAbci8/DhRbsw/nCjrP0czvhaXLQxB6PUITf4NSnHuWIcPZQST6sn5me mCCW345DQS8pbFyqErNlPvpwj0KrOL2ueKCYa2HGNAbeKMgwPoqj5A7D0orWeVlH u7xMciNkrwnMdyY792Cf7xmgGx+6Kaja -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:23 2025 by rpki-client