$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: 5UA7XTn0oM0FK7ndhfcOXnvJSXlO4SXiItcrlZkbLqA= Subject key identifier: 5F:8A:B8:63:14:A1:99:8C:DF:BE:E3:E0:2A:98:03:8F:3E:C5:37:91 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0C95 Signing time: Tue 04 Nov 2025 18:24:28 +0000 Manifest this update: Tue 04 Nov 2025 18:24:28 +0000 Manifest next update: Tue 11 Nov 2025 18:24:27 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: zHYgGNRPXDDwmZ5cNxbiAyfOMPbuVuLyDoLpeMh+e9k=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: nPz5etvH54CH9fTIMVloTiUDB5Qsl1I9QXbAO8u0vO8=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: yDcvIxrioePtxpeJhvFLHJCVBxiycv8OBxChNhzEutw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Nov 4 18:24:28 2025 GMT Not After : Nov 11 18:24:27 2025 GMT Subject: CN=690a44dc-9ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:2e:fe:0e:52:4b:05:f3:c7:71:0e:71:d6: 59:ae:95:75:2e:cb:82:34:db:e7:c8:c4:98:e1:68: 57:05:a6:3e:70:0c:0c:de:8a:11:2d:06:2c:8b:9e: ea:6f:36:dc:97:8f:46:af:56:a9:60:6c:db:92:91: c7:2e:cc:fc:3a:d3:b8:e1:27:18:1b:12:d8:85:12: b3:5f:cb:c7:98:8b:1f:bb:0d:53:5c:ef:a4:bb:af: 94:af:c5:ab:94:e3:f0:8d:44:9d:ac:28:b0:26:04: 3f:0c:56:17:8b:a2:8c:53:79:18:78:51:62:6d:a4: 84:24:d2:8e:00:2e:b2:27:87:ae:b7:60:f0:76:2d: 06:04:ee:4e:76:51:75:27:a4:48:7e:da:ec:22:cc: 12:09:95:c7:e6:53:55:f2:00:fe:b6:d8:6c:84:7c: ff:e1:36:2a:49:d1:9c:2e:eb:a6:15:8a:63:97:05: 62:01:55:0d:57:9a:6d:46:87:c1:88:33:1d:1c:55: ad:f5:94:ae:a4:a9:96:65:e3:5e:f6:97:e1:dd:10: 7a:04:0d:b4:a8:be:05:87:68:43:98:db:61:bf:29: ad:54:35:a2:c7:6f:6e:9c:18:ca:30:60:96:ec:14: 18:8f:76:55:15:27:3c:b9:8f:7e:18:90:62:5f:85: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8A:B8:63:14:A1:99:8C:DF:BE:E3:E0:2A:98:03:8F:3E:C5:37:91 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:7d:e8:c0:68:3c:fa:fe:0a:cd:27:0e:8d:1d:21:ba:58:6a: 2f:92:a9:b1:0c:48:18:45:bf:c2:65:5c:53:27:cf:0a:ce:65: 80:55:59:cd:88:22:e1:6b:35:0e:23:9d:47:16:d1:44:7d:ed: df:c0:33:f7:e6:54:0c:50:a6:37:eb:ab:7e:00:3c:c6:5c:75: 5f:16:e6:70:8f:b5:27:26:3d:84:5b:cd:59:4f:63:1e:f5:12: 07:aa:68:b6:1d:ff:0f:09:e7:83:a5:43:a5:fb:2b:04:90:10: a3:60:9b:70:40:9f:68:06:0e:f6:1e:88:40:d0:99:5b:b3:ea: f6:fd:1e:a5:d6:ad:73:59:7e:41:3a:8d:32:1c:53:d5:70:6a: 1d:8a:b6:8c:32:11:39:fb:9c:42:55:39:8b:14:32:82:67:fb: a8:88:6d:f2:0e:b9:43:97:6b:b4:02:d7:41:01:8f:8f:13:1a: 48:ef:48:3b:3b:f1:4c:3e:db:4a:27:87:f7:52:21:1b:45:61: 53:bd:6a:91:ab:13:4c:9d:b6:fe:3e:dd:66:80:07:c7:be:17: 1a:ce:5b:c5:d6:d0:53:e4:a7:8a:6d:8f:e6:43:86:00:5a:0e: 9b:66:67:0e:e5:ba:e7:c3:6b:35:4a:6f:17:9e:db:5a:e9:8e: 5f:7b:b9:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUxMTA0MTgyNDI4WhcNMjUxMTExMTgyNDI3WjAYMRYwFAYD VQQDEw02OTBhNDRkYy05YWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtD4u/g5SSwXzx3EOcdZZrpV1LsuCNNvnyMSY4WhXBaY+cAwM3ooRLQYsi57q bzbcl49Gr1apYGzbkpHHLsz8OtO44ScYGxLYhRKzX8vHmIsfuw1TXO+ku6+Ur8Wr lOPwjUSdrCiwJgQ/DFYXi6KMU3kYeFFibaSEJNKOAC6yJ4eut2Dwdi0GBO5OdlF1 J6RIftrsIswSCZXH5lNV8gD+tthshHz/4TYqSdGcLuumFYpjlwViAVUNV5ptRofB iDMdHFWt9ZSupKmWZeNe9pfh3RB6BA20qL4Fh2hDmNthvymtVDWix29unBjKMGCW 7BQYj3ZVFSc8uY9+GJBiX4VtewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+KuGMU oZmM377j4CqYA48+xTeRMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOfejAaDz6/grNJw6NHSG6WGovkqmxDEgYRb/CZVxTJ88KzmWAVVnN iCLhazUOI51HFtFEfe3fwDP35lQMUKY366t+ADzGXHVfFuZwj7UnJj2EW81ZT2Me 9RIHqmi2Hf8PCeeDpUOl+ysEkBCjYJtwQJ9oBg72HohA0Jlbs+r2/R6l1q1zWX5B Oo0yHFPVcGodiraMMhE5+5xCVTmLFDKCZ/uoiG3yDrlDl2u0AtdBAY+PExpI70g7 O/FMPttKJ4f3UiEbRWFTvWqRqxNMnbb+Pt1mgAfHvhcazlvF1tBT5KeKbY/mQ4YA Wg6bZmcO5brnw2s1Sm8Xntta6Y5fe7ng -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:12 2025 by rpki-client