$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json) Hash identifier: 7KvfPtYA5hhIHMnSJY5+AyA+0sOexilvXrGPg0yr1E4= Subject key identifier: 5A:FA:42:9D:70:16:A3:E4:63:53:F5:B0:25:35:07:D6:92:BF:0B:46 Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1EFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft Manifest number: 1EF2 Signing time: Tue 04 Nov 2025 16:07:35 +0000 Manifest this update: Tue 04 Nov 2025 16:07:34 +0000 Manifest next update: Tue 11 Nov 2025 16:07:34 +0000 Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: qQt2hkVguKxDdUqbBKixNrh5nlc4CPGgvNm876wKO4M=) 2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: C0V7rJkkp2JIZ4YaUDj+rMPHF5Fx4yPepeCUU5377D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7933 (0x1efd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: Nov 4 16:07:34 2025 GMT Not After : Nov 11 16:07:34 2025 GMT Subject: CN=690a24c7-885f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:a5:5f:47:b9:48:24:3f:04:b2:68:22:b0: 46:b3:ee:83:66:f5:59:ef:21:dd:7b:72:73:3e:b8: 67:f9:be:0a:83:9e:de:c1:e5:12:1c:9a:4c:83:94: 3b:af:34:81:03:17:a3:cc:cc:b9:26:39:a2:d8:d3: 07:e2:7a:08:39:49:c5:31:0a:5a:08:8e:6f:e2:24: 92:e9:85:a0:7f:f6:fa:cf:6f:e9:5d:68:1d:ca:56: 85:19:f3:17:a8:bb:5a:e7:ec:bc:d2:34:b4:df:9d: 91:06:e9:af:e8:5a:52:89:e1:99:a7:d8:36:3c:9b: 5a:24:79:17:cd:6f:39:a3:ec:7e:99:df:d5:b0:02: cb:a0:1a:ab:4a:29:ea:b5:eb:15:93:ce:32:35:12: d1:64:3b:62:12:72:a5:b6:9e:30:0a:05:3e:80:76: d4:6d:ff:10:18:84:1e:55:dd:bd:59:c6:f5:fc:cb: 1a:a3:54:63:cc:28:0d:72:98:ca:74:2d:e1:72:5e: 8f:c6:9c:fa:fd:98:11:f3:b2:91:ae:62:87:83:48: 5e:bb:c2:c7:99:9a:a3:f5:0d:ba:e8:0f:96:d2:aa: 6f:31:87:39:e7:19:56:34:90:0a:03:4b:8a:cc:ff: 05:8a:68:86:db:06:14:6b:79:1e:f8:a2:52:8f:75: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:42:9D:70:16:A3:E4:63:53:F5:B0:25:35:07:D6:92:BF:0B:46 X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3f:04:1a:a0:fe:3a:10:b4:07:f4:e0:d0:2f:5a:a7:c6:17: f8:c3:4c:35:09:ac:5e:ad:71:d2:e4:8a:58:5b:57:a6:d2:0e: 74:78:bf:b4:ff:85:bd:7e:39:18:95:c4:d4:1e:17:05:d5:d7: 6c:77:f1:8f:db:56:f5:6b:a3:37:3a:a9:e9:95:33:6d:f4:93: 1b:47:2d:5e:df:0a:1b:fe:86:33:2a:1b:56:d3:44:60:10:11: cc:51:22:fc:3a:ae:ac:53:a3:f1:1f:93:38:3c:ca:b9:3f:d6: 2b:a0:9e:1e:0a:df:52:3a:68:8b:c3:a6:69:9f:37:c1:94:97: 51:4e:c5:a1:83:92:93:3d:6f:7e:ae:3b:b6:4b:90:23:8b:b1: 06:ef:47:c5:8a:80:fc:bd:2e:c5:b8:6a:de:b4:0b:82:a2:da: ff:87:3d:a9:b2:fa:ee:15:78:dc:b1:97:3a:ad:38:a7:54:2c: 4a:7e:31:d7:be:6a:57:0a:8c:5c:09:35:1e:53:aa:ef:f2:fd: 8b:a1:e8:01:bf:e4:2e:85:97:f5:de:b9:ff:f3:a0:c1:af:26: 5c:c2:5e:b4:8f:95:39:57:3c:ab:74:2c:4d:c7:46:20:49:4f: 0b:2b:70:a0:b2:2d:64:21:0d:b3:03:d0:99:85:46:13:60:da: 58:51:bc:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUxMTA0MTYwNzM0WhcNMjUxMTExMTYwNzM0WjAYMRYwFAYD VQQDEw02OTBhMjRjNy04ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomqlX0e5SCQ/BLJoIrBGs+6DZvVZ7yHde3JzPrhn+b4Kg57eweUSHJpMg5Q7 rzSBAxejzMy5Jjmi2NMH4noIOUnFMQpaCI5v4iSS6YWgf/b6z2/pXWgdylaFGfMX qLta5+y80jS0352RBumv6FpSieGZp9g2PJtaJHkXzW85o+x+md/VsALLoBqrSinq tesVk84yNRLRZDtiEnKltp4wCgU+gHbUbf8QGIQeVd29Wcb1/Msao1RjzCgNcpjK dC3hcl6Pxpz6/ZgR87KRrmKHg0heu8LHmZqj9Q266A+W0qpvMYc55xlWNJAKA0uK zP8FimiG2wYUa3ke+KJSj3WfZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr6Qp1w FqPkY1P1sCU1B9aSvwtGMB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRGOC8yMjhBRDNFQTZCMzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5q cTNTV1FIUzI1a2xHZE9MMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvPwQaoP46ELQH9ODQL1qnxhf4w0w1CaxerXHS5IpYW1em0g50eL+0 /4W9fjkYlcTUHhcF1ddsd/GP21b1a6M3OqnplTNt9JMbRy1e3wob/oYzKhtW00Rg EBHMUSL8Oq6sU6PxH5M4PMq5P9YroJ4eCt9SOmiLw6ZpnzfBlJdRTsWhg5KTPW9+ rju2S5Aji7EG70fFioD8vS7FuGretAuCotr/hz2psvruFXjcsZc6rTinVCxKfjHX vmpXCoxcCTUeU6rv8v2LoegBv+QuhZf13rn/86DBryZcwl60j5U5VzyrdCxNx0Yg SU8LK3Cgsi1kIQ2zA9CZhUYTYNpYUbx6 -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:13 2025 by rpki-client