$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: Fbq/RZNqj9gLtKRLVVtpLzr18kDHckgNgL2/VQyS48c= Subject key identifier: 05:22:DC:07:28:89:46:EB:2C:0E:D2:96:5C:A1:6F:5E:C0:C8:B1:4C Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 0282 Signing time: Wed 05 Nov 2025 01:43:56 +0000 Manifest this update: Wed 05 Nov 2025 01:43:56 +0000 Manifest next update: Wed 12 Nov 2025 01:43:56 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: xA1QaZjobxmn7d3GRGSTMwRH6p8g3TOS5iYEFg2zusM=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Validity Not Before: Nov 5 01:43:56 2025 GMT Not After : Nov 12 01:43:56 2025 GMT Subject: CN=690aabdc-0220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:c1:de:da:95:07:a0:a2:a2:6c:46:2f:34: 05:bc:94:9a:53:18:5c:d4:80:a0:6f:d8:e1:76:27: a4:90:7f:05:7b:5d:7f:dc:dd:9d:5f:c0:c0:e6:71: fe:89:96:4d:96:dd:d5:73:65:19:35:d2:23:6a:65: 04:b6:61:97:30:62:d7:61:67:00:fd:34:f0:74:f5: de:ac:8e:a4:d0:81:1d:60:3b:22:9f:e7:97:25:37: 5c:d7:e1:4b:47:4a:85:60:05:ec:f7:5e:19:e7:18: ea:cb:d2:2d:cc:4e:8b:29:c2:65:3b:74:53:2c:0d: 55:6d:24:b2:d8:ca:fd:6e:92:ed:60:d0:62:24:46: 51:e7:80:2c:04:22:ee:bf:65:67:c3:b0:75:55:13: 32:17:89:20:b1:1c:eb:de:89:01:7f:ba:6f:dc:74: 5b:b1:70:08:c5:d4:de:fa:53:42:86:f1:18:2e:ff: 63:18:6d:94:67:95:ae:c3:62:c5:ab:ea:e1:d4:52: da:43:5d:ab:48:d1:d7:f1:31:0e:3e:6d:48:b0:4e: 44:48:a9:36:8c:51:89:f3:58:a3:e8:ab:69:71:db: b7:83:c1:66:e5:22:2f:0f:c4:e1:93:83:62:ab:29: df:ee:37:7b:f3:06:0f:20:6f:62:09:b8:23:de:56: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:22:DC:07:28:89:46:EB:2C:0E:D2:96:5C:A1:6F:5E:C0:C8:B1:4C X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3f:34:7c:b5:9a:8d:c8:37:9b:34:ce:c3:27:3f:7a:a3:a8: 2a:dc:34:26:23:70:f7:b8:5b:38:7e:fe:b1:39:2e:f1:96:45: af:31:15:5f:f4:7c:b1:3b:99:83:e0:41:63:15:a8:b7:f4:23: a8:ef:b4:ab:87:d3:65:b7:3a:ca:5f:7c:3d:c2:7a:1c:48:37: 46:2f:c8:a1:41:43:48:56:71:52:f9:d9:c8:45:b6:5f:cb:de: 7e:69:f1:4d:41:05:7b:4f:f1:2e:c5:cc:98:bc:ab:a6:4a:11: 0e:9e:5f:99:46:a6:bb:48:94:1b:db:bd:d7:d7:95:46:6c:79: 29:5b:2e:f0:03:e8:db:ac:07:ff:1c:8c:72:6b:58:ba:95:6f: e9:8c:90:3d:34:74:12:1f:50:a2:8b:80:bf:db:38:07:99:5b: 4b:fa:64:0f:db:dd:b9:83:87:80:ca:3b:1a:fb:ea:0e:a6:5e: 03:fc:fc:09:b3:4c:57:34:8e:28:d1:c5:14:6b:50:30:a3:8f: 6b:96:ba:cd:bd:18:04:10:cb:66:07:43:7f:b7:36:48:3e:ca: e2:61:81:e4:45:22:4b:30:b0:08:e2:0b:a0:20:fd:b9:39:a3: e2:20:13:ab:2f:23:5e:59:c4:e0:c7:6c:e6:36:7e:05:52:a7: 8d:43:5b:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjUxMTA1MDE0MzU2WhcNMjUxMTEyMDE0MzU2WjAYMRYwFAYD VQQDEw02OTBhYWJkYy0wMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbXB3tqVB6CiomxGLzQFvJSaUxhc1ICgb9jhdiekkH8Fe11/3N2dX8DA5nH+ iZZNlt3Vc2UZNdIjamUEtmGXMGLXYWcA/TTwdPXerI6k0IEdYDsin+eXJTdc1+FL R0qFYAXs914Z5xjqy9ItzE6LKcJlO3RTLA1VbSSy2Mr9bpLtYNBiJEZR54AsBCLu v2Vnw7B1VRMyF4kgsRzr3okBf7pv3HRbsXAIxdTe+lNChvEYLv9jGG2UZ5Wuw2LF q+rh1FLaQ12rSNHX8TEOPm1IsE5ESKk2jFGJ81ij6Ktpcdu3g8Fm5SIvD8Thk4Ni qynf7jd78wYPIG9iCbgj3lY/lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUi3Aco iUbrLA7Sllyhb17AyLFMMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvPzR8tZqNyDebNM7DJz96o6gq3DQmI3D3uFs4fv6xOS7xlkWvMRVf 9HyxO5mD4EFjFai39COo77Srh9NltzrKX3w9wnocSDdGL8ihQUNIVnFS+dnIRbZf y95+afFNQQV7T/EuxcyYvKumShEOnl+ZRqa7SJQb273X15VGbHkpWy7wA+jbrAf/ HIxya1i6lW/pjJA9NHQSH1Cii4C/2zgHmVtL+mQP2925g4eAyjsa++oOpl4D/PwJ s0xXNI4o0cUUa1Awo49rlrrNvRgEEMtmB0N/tzZIPsriYYHkRSJLMLAI4gugIP25 OaPiIBOrLyNeWcTgx2zmNn4FUqeNQ1uh -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:42 2025 by rpki-client