$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: WU0guEcWeul8cOQMAQL2gOpvTgvfNsMhlQfCS8GREk8= Subject key identifier: 1D:5D:CD:DD:D0:52:72:93:06:D2:7A:E4:6C:85:61:13:83:FF:19:26 Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 120E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 11F1 Signing time: Sun 02 Nov 2025 17:11:22 +0000 Manifest this update: Sun 02 Nov 2025 17:11:21 +0000 Manifest next update: Sun 09 Nov 2025 17:11:21 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: n5DPX+SL6ivCbVv0RgM3XXNNdwQLWIeCcKtKs2tdm4w=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4622 (0x120e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: Nov 2 17:11:21 2025 GMT Not After : Nov 9 17:11:21 2025 GMT Subject: CN=690790ba-aa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:a5:3b:3b:99:69:e2:58:76:db:d2:e5:9e: 86:0a:c5:61:d8:ad:43:e4:b4:25:ae:7b:41:cc:3e: 4e:d0:4c:5d:4c:11:95:42:25:4b:e6:02:72:9b:6d: 1c:03:49:60:68:4c:6c:1f:74:38:6d:9a:a1:bd:b3: a1:f1:ac:1d:9e:93:db:2a:30:2a:5e:56:a7:8e:b2: 5d:1f:7c:80:b0:d7:5c:04:9a:08:69:ce:b5:3c:fd: ef:8f:35:61:34:29:32:c0:9e:7f:6d:29:53:76:c7: 8a:d7:02:8c:76:aa:76:87:95:9f:65:3d:61:08:64: e1:64:74:c4:66:07:5d:15:5c:52:98:e8:4c:11:ea: 4a:ca:93:23:10:51:7f:4c:26:ab:89:47:87:4a:b6: f0:ec:b2:90:5d:8a:a9:1a:54:99:a6:ed:8a:1e:96: 5d:52:9f:5a:39:ed:01:7c:42:b6:76:dc:73:2d:cd: ae:1e:52:01:24:88:54:ad:81:b4:95:0a:e5:47:cb: 80:1c:31:26:7a:ef:7e:e0:5a:ad:e4:a1:df:14:9c: 5b:75:ef:cc:a6:6f:a5:e0:3a:5d:4c:71:a2:c9:8e: d8:eb:3d:14:17:86:e0:b2:f6:7a:ae:10:c1:1e:43: e4:35:84:3e:ae:45:96:8f:9a:42:cb:6c:28:be:2c: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5D:CD:DD:D0:52:72:93:06:D2:7A:E4:6C:85:61:13:83:FF:19:26 X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:16:bf:68:78:77:aa:61:5d:0f:d7:3b:2a:f0:fc:38:c2:10: 99:89:af:d6:76:e0:00:da:95:94:77:52:1c:e1:4b:26:99:36: ea:4b:52:6c:7d:c4:c5:4e:e7:06:0b:b4:fc:a9:9e:2b:54:7e: e4:86:df:7a:e2:10:fb:00:5a:f7:f2:7a:6d:47:d4:c9:2b:97: fe:21:4e:58:35:a9:a6:81:ca:0f:21:1d:18:8b:c4:66:67:17: f4:b0:c6:bb:cf:32:d7:e7:50:f1:1c:c9:a2:2e:28:95:4a:04: 8c:5a:61:ee:ef:f6:cf:b7:bc:e5:e5:6e:b9:75:2a:d8:14:ed: 49:0e:97:21:cd:ab:19:df:ca:70:60:7d:cd:34:60:6f:ea:b2: 10:b8:2e:89:00:15:9e:87:eb:eb:e2:86:84:e4:5a:96:1c:17: 16:04:15:b9:79:e5:25:31:64:9d:73:f2:05:de:ad:3a:17:71: f3:31:c5:42:32:56:32:7f:62:d8:87:ee:a1:53:90:6b:d0:9f: 00:7f:82:f4:a1:e4:fb:02:18:a4:22:c4:c1:15:1d:8e:c4:a7: 82:d5:9a:13:8b:49:96:da:78:84:5a:bb:67:6a:25:3f:f5:d9: ea:31:28:6e:0a:d2:04:fa:1a:b9:1f:dc:dc:5c:0e:5f:c9:cd: c1:b7:41:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUxMTAyMTcxMTIxWhcNMjUxMTA5MTcxMTIxWjAYMRYwFAYD VQQDEw02OTA3OTBiYS1hYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+6lOzuZaeJYdtvS5Z6GCsVh2K1D5LQlrntBzD5O0ExdTBGVQiVL5gJym20c A0lgaExsH3Q4bZqhvbOh8awdnpPbKjAqXlanjrJdH3yAsNdcBJoIac61PP3vjzVh NCkywJ5/bSlTdseK1wKMdqp2h5WfZT1hCGThZHTEZgddFVxSmOhMEepKypMjEFF/ TCariUeHSrbw7LKQXYqpGlSZpu2KHpZdUp9aOe0BfEK2dtxzLc2uHlIBJIhUrYG0 lQrlR8uAHDEmeu9+4Fqt5KHfFJxbde/Mpm+l4DpdTHGiyY7Y6z0UF4bgsvZ6rhDB HkPkNYQ+rkWWj5pCy2woviyvnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1dzd3Q UnKTBtJ65GyFYROD/xkmMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEFr9oeHeqYV0P1zsq8Pw4whCZia/WduAA2pWUd1Ic4UsmmTbqS1Js fcTFTucGC7T8qZ4rVH7kht964hD7AFr38nptR9TJK5f+IU5YNammgcoPIR0Yi8Rm Zxf0sMa7zzLX51DxHMmiLiiVSgSMWmHu7/bPt7zl5W65dSrYFO1JDpchzasZ38pw YH3NNGBv6rIQuC6JABWeh+vr4oaE5FqWHBcWBBW5eeUlMWSdc/IF3q06F3HzMcVC MlYyf2LYh+6hU5Br0J8Af4L0oeT7AhikIsTBFR2OxKeC1ZoTi0mW2niEWrtnaiU/ 9dnqMShuCtIE+hq5H9zcXA5fyc3Bt0Go -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:59 2025 by rpki-client