$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: ObKpg6+Tkq/dYWo26aic8nmQQi9t4cyPYZLugXjautk= Subject key identifier: E5:34:D0:2B:3F:27:54:E1:25:AE:37:F9:82:7D:F4:D8:5E:16:FE:06 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 03F1 Signing time: Mon 03 Nov 2025 00:29:05 +0000 Manifest this update: Mon 03 Nov 2025 00:29:05 +0000 Manifest next update: Mon 10 Nov 2025 00:29:05 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: dc/LijnFx9SxCstQUF2Kay5dX/TPk0tdU4tdg4OhTKo=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: Nov 3 00:29:05 2025 GMT Not After : Nov 10 00:29:05 2025 GMT Subject: CN=6907f751-b97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:4f:a9:9d:3e:bf:d3:0a:c2:b2:ec:27:a6: aa:fc:2e:9d:a8:86:4d:69:d3:b0:70:a5:85:ef:b1: bf:92:d7:a2:27:2f:f2:e3:ae:28:d3:8b:6e:6e:8a: b9:85:d4:1b:a3:e6:b3:8c:1b:82:1c:30:ce:91:4c: bc:5b:a7:84:39:b7:40:d3:6c:3d:05:44:e5:1e:f5: e8:38:fc:87:41:54:56:5a:30:75:4c:96:8f:56:fa: 07:9c:b8:fc:05:6b:2e:d2:f5:a8:5f:5e:b5:2e:a2: b0:49:17:d8:ed:f7:0e:77:1e:f0:8e:d5:d9:0a:0f: 63:da:9a:cd:ff:68:af:86:de:40:cd:59:19:72:f0: b3:cb:a9:77:0f:44:1b:4a:25:ad:12:61:c6:a3:71: 7a:ff:bd:b6:3f:98:d8:e4:88:93:5c:dc:b9:31:ef: c4:e7:9b:a5:2e:3f:e0:9f:dd:9d:c4:dc:ff:a3:cb: 4e:b9:c9:d2:93:03:30:a2:e0:31:08:aa:d0:66:8b: ed:59:ad:30:d3:51:1b:e5:fe:13:20:27:59:44:1f: ee:57:dd:a7:b0:dd:dd:f1:4d:4b:03:fb:8d:ad:16: 91:44:73:a1:83:96:c9:f3:83:23:16:d1:0b:15:3e: ce:25:bd:be:59:bc:c1:29:56:dd:9d:c0:27:71:f2: cd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:34:D0:2B:3F:27:54:E1:25:AE:37:F9:82:7D:F4:D8:5E:16:FE:06 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6b:2b:e6:83:02:86:8b:5e:e3:56:1a:10:64:69:1f:a7:27: fd:60:89:41:06:7e:0e:10:cd:2b:75:18:b0:c2:a2:aa:a2:9b: 70:83:98:44:e9:16:35:32:50:89:3b:71:cc:e5:05:a9:9a:20: cd:7a:06:98:e6:33:03:ee:c4:e3:56:f8:b4:fc:25:6b:26:62: ff:c0:2f:15:04:0c:92:59:90:43:46:cd:4e:84:b5:df:3c:95: 15:b5:1d:ff:00:3f:7d:cb:c6:f1:0f:8f:52:d5:70:c5:3d:60: 35:78:ec:1d:94:fa:aa:f1:9a:a5:48:a8:60:c4:9d:6e:68:d9: c5:a7:ca:75:ad:a5:4b:4c:75:37:89:a4:dc:88:2b:b3:82:21: f9:48:39:bc:a0:93:b7:a7:17:08:2f:5d:17:fb:33:18:89:c8: 65:b2:41:97:dc:65:6d:c8:20:5a:3e:4a:41:a2:31:7a:65:2e: 5b:c1:83:9c:89:a9:92:ca:ec:56:38:77:ed:d7:c5:c9:d1:93: 01:44:aa:3e:a0:7c:90:e1:20:5b:6f:d0:3f:91:2d:bc:8d:c0: 80:87:43:54:43:57:89:76:af:ec:34:ec:be:6d:1c:19:b8:15: 4e:9b:04:9f:37:fe:ad:83:bc:32:fd:72:88:4e:e8:a5:2d:30: 97:fd:a1:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUxMTAzMDAyOTA1WhcNMjUxMTEwMDAyOTA1WjAYMRYwFAYD VQQDEw02OTA3Zjc1MS1iOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YZPqZ0+v9MKwrLsJ6aq/C6dqIZNadOwcKWF77G/kteiJy/y464o04tuboq5 hdQbo+azjBuCHDDOkUy8W6eEObdA02w9BUTlHvXoOPyHQVRWWjB1TJaPVvoHnLj8 BWsu0vWoX161LqKwSRfY7fcOdx7wjtXZCg9j2prN/2ivht5AzVkZcvCzy6l3D0Qb SiWtEmHGo3F6/722P5jY5IiTXNy5Me/E55ulLj/gn92dxNz/o8tOucnSkwMwouAx CKrQZovtWa0w01Eb5f4TICdZRB/uV92nsN3d8U1LA/uNrRaRRHOhg5bJ84MjFtEL FT7OJb2+WbzBKVbdncAncfLNvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU00Cs/ J1ThJa43+YJ99NheFv4GMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfayvmgwKGi17jVhoQZGkfpyf9YIlBBn4OEM0rdRiwwqKqoptwg5hE 6RY1MlCJO3HM5QWpmiDNegaY5jMD7sTjVvi0/CVrJmL/wC8VBAySWZBDRs1OhLXf PJUVtR3/AD99y8bxD49S1XDFPWA1eOwdlPqq8ZqlSKhgxJ1uaNnFp8p1raVLTHU3 iaTciCuzgiH5SDm8oJO3pxcIL10X+zMYichlskGX3GVtyCBaPkpBojF6ZS5bwYOc iamSyuxWOHft18XJ0ZMBRKo+oHyQ4SBbb9A/kS28jcCAh0NUQ1eJdq/sNOy+bRwZ uBVOmwSfN/6tg7wy/XKITuilLTCX/aE9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:06 2025 by rpki-client