$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: /YfCz9yvFPU2oumEjbKr/u3uuOXjSiB8BM6Uuf8Eb/g= Subject key identifier: C5:C1:56:37:7F:94:43:DD:43:8F:71:96:52:36:68:0E:A2:C5:7D:19 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 03BD Signing time: Mon 03 Nov 2025 00:37:59 +0000 Manifest this update: Mon 03 Nov 2025 00:37:58 +0000 Manifest next update: Mon 10 Nov 2025 00:37:58 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: hhmFuYxDA7s6exb/bA5F0zFvhT9SojuD2G+07YQbeWY=) 2: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (hash: 4I3Yc+oHBu75hPbHWxPxeRv9eI1vw2aVJaFMOmOjLHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Nov 3 00:37:58 2025 GMT Not After : Nov 10 00:37:58 2025 GMT Subject: CN=6907f967-ef00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:ad:d5:52:f5:92:68:f3:d1:42:a7:35:11: 98:4c:a8:94:3b:65:e3:68:e9:b0:48:e3:78:19:2a: 64:55:a0:35:a4:eb:4f:af:3f:a6:43:6c:e1:0b:21: 53:24:51:da:93:e5:18:ed:8e:50:d0:4b:5b:7a:87: 3c:6c:86:8a:42:c4:76:5a:dd:67:00:4d:18:d5:d1: 41:d4:16:d4:a3:ac:2a:23:fa:c1:9c:59:12:54:be: c3:c0:b4:8b:11:a4:97:19:b0:09:e1:f0:4f:59:23: 5a:69:3f:d4:05:8d:d6:b8:cd:7f:d2:d9:28:41:24: 0e:0d:0f:c3:9c:cf:29:31:ac:c3:c8:4e:f9:bb:b1: f3:9b:8b:57:df:fd:58:6b:cf:7e:8c:a6:0b:43:ad: 02:62:23:45:91:4a:62:47:c1:0f:35:05:13:d1:aa: 13:d3:b8:26:fd:df:04:eb:15:b1:7f:80:b0:8b:56: 32:ef:c6:49:22:83:6b:b3:5b:e5:72:bf:09:8f:47: 44:e7:6f:58:51:f6:c5:ba:f0:62:8f:1c:94:af:e7: a5:eb:1e:bf:07:40:c1:22:30:49:a3:16:8c:5d:70: d7:9f:58:d9:a0:0f:40:b1:b6:b6:44:7d:ce:94:9c: 30:02:3c:07:88:33:d7:54:3a:f8:f0:ff:1b:eb:0b: 0c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C1:56:37:7F:94:43:DD:43:8F:71:96:52:36:68:0E:A2:C5:7D:19 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e6:ff:72:57:80:49:5d:0c:c4:b5:19:04:e2:f2:73:6a:cf: 65:82:46:54:52:d7:26:0d:37:9b:61:b4:5d:f6:b9:9f:9e:a4: 82:7b:15:89:7d:6f:d2:29:e4:03:81:db:5f:a5:47:1d:c6:ad: 61:04:60:20:7d:25:bb:76:db:f1:3d:1e:fe:31:9f:cb:3c:e1: 70:3f:ec:1d:47:b6:a8:51:dd:5b:5e:a9:07:ec:e2:0a:c9:5a: e2:fc:a5:dd:df:2b:63:08:0a:5a:4d:49:65:fe:4d:42:7d:59: 2d:d8:58:52:4d:6b:34:24:44:ab:6f:33:6d:f2:a3:62:51:03: ec:5e:48:a5:e2:30:54:2d:18:91:9e:87:d0:5f:4d:cd:97:3b: 0b:4e:dc:a4:99:9e:e0:42:be:97:d2:e7:31:c7:3c:1f:28:9b: 31:98:af:3a:6e:62:27:f4:bb:25:b5:ca:36:6e:45:44:1d:88: bb:75:c9:6f:42:62:c4:80:d4:b7:58:f7:53:a3:25:21:78:d5: a2:4d:e6:23:ca:04:a0:90:07:c4:97:45:a2:8b:bd:c3:57:1c: 3a:93:cb:ca:da:6e:34:71:95:8c:5e:4e:9d:3b:11:7f:49:72: 2e:a2:3e:d0:6c:34:9c:2b:35:c3:c7:d9:45:61:7c:3e:1b:48: 0b:97:d9:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUxMTAzMDAzNzU4WhcNMjUxMTEwMDAzNzU4WjAYMRYwFAYD VQQDEw02OTA3Zjk2Ny1lZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9mt1VL1kmjz0UKnNRGYTKiUO2XjaOmwSON4GSpkVaA1pOtPrz+mQ2zhCyFT JFHak+UY7Y5Q0Etbeoc8bIaKQsR2Wt1nAE0Y1dFB1BbUo6wqI/rBnFkSVL7DwLSL EaSXGbAJ4fBPWSNaaT/UBY3WuM1/0tkoQSQODQ/DnM8pMazDyE75u7Hzm4tX3/1Y a89+jKYLQ60CYiNFkUpiR8EPNQUT0aoT07gm/d8E6xWxf4Cwi1Yy78ZJIoNrs1vl cr8Jj0dE529YUfbFuvBijxyUr+el6x6/B0DBIjBJoxaMXXDXn1jZoA9Asba2RH3O lJwwAjwHiDPXVDr48P8b6wsMHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXBVjd/ lEPdQ49xllI2aA6ixX0ZMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR5v9yV4BJXQzEtRkE4vJzas9lgkZUUtcmDTebYbRd9rmfnqSCexWJ fW/SKeQDgdtfpUcdxq1hBGAgfSW7dtvxPR7+MZ/LPOFwP+wdR7aoUd1bXqkH7OIK yVri/KXd3ytjCApaTUll/k1CfVkt2FhSTWs0JESrbzNt8qNiUQPsXkil4jBULRiR nofQX03NlzsLTtykmZ7gQr6X0ucxxzwfKJsxmK86bmIn9Lsltco2bkVEHYi7dclv QmLEgNS3WPdToyUheNWiTeYjygSgkAfEl0Wii73DVxw6k8vK2m40cZWMXk6dOxF/ SXIuoj7QbDScKzXDx9lFYXw+G0gLl9nq -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:08 2025 by rpki-client