$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json) Hash identifier: HiKHKTaFCjvOa5mmBG2lROw9zLx9wxGkekAFcvwyzEw= Subject key identifier: 3A:B7:21:7B:EC:45:EC:0E:D4:79:94:1D:58:9A:EE:67:23:77:1B:94 Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft Manifest number: 19 Signing time: Mon 03 Nov 2025 07:51:15 +0000 Manifest this update: Mon 03 Nov 2025 07:51:14 +0000 Manifest next update: Mon 10 Nov 2025 07:51:14 +0000 Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: +4MTXZxkFlaKHh4DBFJNVmZMUcgaxy1RVVKi497eH2o=) 2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: YmblmfroJEPUhmWz7o6a8qxz0P00eBgbcYH8HDNSw40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Validity Not Before: Nov 3 07:51:14 2025 GMT Not After : Nov 10 07:51:14 2025 GMT Subject: CN=69085ef2-82ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:23:57:94:0a:a8:32:dd:e1:17:5d:b2:8d:7a: 5a:78:cc:a9:eb:64:fc:ac:ab:39:2a:2b:ab:cc:02: 97:0c:82:46:74:cb:55:be:18:6f:01:eb:9c:e8:77: 81:ca:39:99:4b:cc:80:27:4f:72:89:d6:3e:bd:e1: 52:1f:4e:b0:97:85:4c:d7:3f:60:7f:3c:79:dd:b1: 7d:56:55:81:87:45:a2:ea:b7:13:90:e2:29:56:84: 6a:f3:b2:bf:84:7d:26:20:35:08:cf:17:6b:52:0d: 0d:41:8b:9b:a5:e9:f1:f6:48:90:20:40:4c:3c:78: 3e:79:5e:c9:93:05:2b:45:94:66:5d:7f:07:9d:90: 03:75:5d:1f:83:1f:bd:f4:63:8b:0d:3b:82:84:74: 67:44:51:b7:80:af:b3:5b:1f:74:4d:df:9d:55:ca: e5:a8:85:4d:c7:51:f2:4a:e4:f1:38:e7:82:cb:2b: 2d:1c:d7:27:7a:c7:68:f5:23:d5:ac:52:a7:0e:a7: c2:f5:73:28:f7:01:99:55:ac:55:e6:90:ce:35:7e: 37:07:67:a5:ee:15:6e:1c:21:46:d7:30:7e:18:4c: 3a:9c:26:ad:f2:46:46:14:09:42:7e:72:83:8d:db: d2:54:bc:48:a4:c8:7b:98:fe:4c:c9:98:5a:dc:c9: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:21:7B:EC:45:EC:0E:D4:79:94:1D:58:9A:EE:67:23:77:1B:94 X509v3 Authority Key Identifier: keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:06:a7:42:46:f4:fb:7e:e4:5e:8b:58:54:f3:27:bf:2d:90: a2:db:6f:ac:bd:01:53:a4:90:ee:bd:09:45:f9:bd:5a:ca:1d: d1:40:9e:01:56:1a:de:f7:64:93:63:99:b6:5d:a4:da:ec:63: 08:e6:ec:0c:ba:89:48:e2:a3:62:df:19:99:f3:b7:0d:01:1c: f0:0e:22:94:13:fa:ae:23:04:7e:bf:67:a7:34:bc:91:26:0e: 93:22:0f:dc:2c:59:59:ce:bb:49:29:a7:a7:4f:b6:c4:cc:53: cf:f4:e2:e8:d8:83:ea:10:e4:08:df:3a:ea:c2:ba:46:03:d4: f4:c4:cc:9c:e4:29:30:5c:cc:d6:f8:14:59:1a:d0:14:d4:8e: ff:22:97:c2:4d:89:e4:38:ce:6b:cb:38:f0:43:74:3c:aa:5b: 82:74:e5:cc:f9:f8:53:54:3e:bc:87:c3:de:e2:1a:2b:80:4f: 78:fa:78:f5:45:59:0f:4d:2e:96:cc:51:a2:17:ec:35:de:72: 4b:82:f3:fa:5f:e3:60:df:63:e7:5a:3e:fd:3e:8a:80:b4:a8: 3d:4a:2f:dd:8b:73:76:0c:0f:05:43:50:09:32:47:61:69:a3: 9b:57:c6:3b:b0:53:29:e2:b6:ff:99:07:14:1f:74:3b:aa:43: d6:c8:19:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzhBQTExMC8GA1UEBRMoOTg1MEVBRkZFRDNEQTI4NDVENTFGMDk1QUMxMTI0NTA4 OEQ1NjIzRjAeFw0yNTExMDMwNzUxMTRaFw0yNTExMTAwNzUxMTRaMBgxFjAUBgNV BAMTDTY5MDg1ZWYyLTgyZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChI1eUCqgy3eEXXbKNelp4zKnrZPysqzkqK6vMApcMgkZ0y1W+GG8B65zod4HK OZlLzIAnT3KJ1j694VIfTrCXhUzXP2B/PHndsX1WVYGHRaLqtxOQ4ilWhGrzsr+E fSYgNQjPF2tSDQ1Bi5ul6fH2SJAgQEw8eD55XsmTBStFlGZdfwedkAN1XR+DH730 Y4sNO4KEdGdEUbeAr7NbH3RN351VyuWohU3HUfJK5PE454LLKy0c1yd6x2j1I9Ws UqcOp8L1cyj3AZlVrFXmkM41fjcHZ6XuFW4cIUbXMH4YTDqcJq3yRkYUCUJ+coON 29JUvEikyHuY/kzJmFrcyXkPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOrche+xF 7A7UeZQdWJruZyN3G5QwHwYDVR0jBBgwFoAUmFDq/+09ooRdUfCVrBEkUIjVYj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3OEFBLzM3QzgxN0ZDOTc0 NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29SZFVmQ1ZyQkVrVUlqVllq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUZEcV8tMDlvb1JkVWZDVnJCRWtVSWpWWWo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 OEFBLzM3QzgxN0ZDOTc0NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29S ZFVmQ1ZyQkVrVUlqVllqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIQGp0JG9Pt+5F6LWFTzJ78tkKLbb6y9AVOkkO69CUX5vVrKHdFAngFW Gt73ZJNjmbZdpNrsYwjm7Ay6iUjio2LfGZnztw0BHPAOIpQT+q4jBH6/Z6c0vJEm DpMiD9wsWVnOu0kpp6dPtsTMU8/04ujYg+oQ5AjfOurCukYD1PTEzJzkKTBczNb4 FFka0BTUjv8il8JNieQ4zmvLOPBDdDyqW4J05cz5+FNUPryHw97iGiuAT3j6ePVF WQ9NLpbMUaIX7DXeckuC8/pf42DfY+daPv0+ioC0qD1KL92Lc3YMDwVDUAkyR2Fp o5tXxjuwUynitv+ZBxQfdDuqQ9bIGX4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:45 2025 by rpki-client