$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: b3pl6DSAbHSLgPrmPR9QXJ4ow+DbJd5zc3Tr64YVSck= Subject key identifier: BC:72:8C:60:45:15:9D:A9:16:EF:81:C1:42:D4:1A:CD:74:E0:8F:AD Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 024B Signing time: Mon 03 Nov 2025 01:58:02 +0000 Manifest this update: Mon 03 Nov 2025 01:58:02 +0000 Manifest next update: Mon 10 Nov 2025 01:58:02 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: 40hMyAJQ97Jp6Q5H3WqMStIPYS8BTcJR+aK5Hkh3kV0=) 2: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: Dx1pBlafOm0m8bbODgiKskeR6QqBvwTMg4dCOCDQ9dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Nov 3 01:58:02 2025 GMT Not After : Nov 10 01:58:02 2025 GMT Subject: CN=69080c2a-5378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:bc:14:0f:ed:e2:b8:9c:68:f9:71:8a:d7: 62:67:d4:61:ab:e4:55:c8:97:d9:a4:9f:a6:01:32: 15:ba:10:62:f3:b7:c8:20:f1:18:9d:35:de:44:42: 01:22:fb:0b:94:44:e4:15:b1:b3:bb:fb:92:93:05: 3a:62:c9:08:73:54:61:8e:0f:62:10:36:99:59:90: 70:fc:e7:9a:f5:74:c9:2c:63:b1:af:7b:18:42:35: c3:f1:71:17:1b:09:27:fc:b1:c5:39:f6:ff:1a:57: 47:49:ed:de:91:1b:16:71:7a:cf:95:5c:33:a5:18: 3b:34:bb:9e:0f:e1:84:ef:7b:76:a0:9a:76:f5:9f: b2:2e:1d:4e:e4:ef:da:e9:f0:6b:8c:e6:9d:da:b4: 4f:21:05:b2:06:08:8c:24:44:55:6b:5f:57:4d:62: 77:03:c2:f7:9a:f7:a0:9a:d6:24:33:a4:25:9c:04: d7:b8:0f:bd:95:77:67:7d:4a:27:00:52:c0:1e:67: e7:61:dc:6b:cb:b0:b8:8d:e6:98:93:62:e8:5a:4b: 36:29:17:2c:d0:22:8d:78:b2:9c:ea:5d:89:c6:e0: 6f:c8:01:4f:5a:39:d9:36:ee:96:74:89:29:8e:20: 43:9b:59:20:37:9c:15:7d:12:c1:fe:36:5d:a0:1e: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:72:8C:60:45:15:9D:A9:16:EF:81:C1:42:D4:1A:CD:74:E0:8F:AD X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e3:96:ff:00:18:5a:19:aa:91:0f:87:b6:35:c7:8a:af:b0: b8:a2:2d:5c:15:c7:af:ac:c0:7b:f3:ed:a1:28:e7:59:96:b9: 53:c5:27:ff:2a:e2:60:7c:91:3c:80:57:a8:3e:30:ce:b5:25: b5:e8:b0:cf:3e:4d:65:74:1a:f2:da:3f:31:a9:15:fc:08:c5: 14:ea:29:4c:03:09:65:2c:0e:e2:41:4a:ff:7c:95:b7:3b:45: 3c:11:17:11:3d:e9:83:7d:84:7c:19:13:17:ef:f8:20:d5:ae: 21:9f:f5:e1:b8:94:f9:ef:d4:3d:7e:c4:fd:dd:ea:47:c5:81: 59:ce:0c:cf:57:55:76:d2:d2:16:9e:13:b7:b4:00:6d:b5:69: 0e:5c:4d:05:43:45:05:ed:3f:0b:df:da:3b:b2:76:c2:a3:9b: f3:83:37:cb:0e:2d:68:d6:03:12:74:5c:47:b4:8e:d0:d5:f2: f7:c7:9d:04:0c:a9:3b:1f:83:00:10:7e:80:23:75:c8:03:46: 9d:48:6d:b7:1c:39:7d:0b:d5:79:94:c0:a5:ca:87:e7:21:78: 68:46:e5:86:67:e4:9d:b1:dc:00:30:44:a9:5d:21:ba:87:8b: 6c:71:b1:17:38:5b:5b:23:68:98:41:a8:a1:37:42:23:73:e5: 11:e1:60:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUxMTAzMDE1ODAyWhcNMjUxMTEwMDE1ODAyWjAYMRYwFAYD VQQDEw02OTA4MGMyYS01Mzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNm8FA/t4ricaPlxitdiZ9Rhq+RVyJfZpJ+mATIVuhBi87fIIPEYnTXeREIB IvsLlETkFbGzu/uSkwU6YskIc1Rhjg9iEDaZWZBw/Oea9XTJLGOxr3sYQjXD8XEX Gwkn/LHFOfb/GldHSe3ekRsWcXrPlVwzpRg7NLueD+GE73t2oJp29Z+yLh1O5O/a 6fBrjOad2rRPIQWyBgiMJERVa19XTWJ3A8L3mvegmtYkM6QlnATXuA+9lXdnfUon AFLAHmfnYdxry7C4jeaYk2LoWks2KRcs0CKNeLKc6l2JxuBvyAFPWjnZNu6WdIkp jiBDm1kgN5wVfRLB/jZdoB6FpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxyjGBF FZ2pFu+BwULUGs104I+tMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP45b/ABhaGaqRD4e2NceKr7C4oi1cFcevrMB78+2hKOdZlrlTxSf/ KuJgfJE8gFeoPjDOtSW16LDPPk1ldBry2j8xqRX8CMUU6ilMAwllLA7iQUr/fJW3 O0U8ERcRPemDfYR8GRMX7/gg1a4hn/XhuJT579Q9fsT93epHxYFZzgzPV1V20tIW nhO3tABttWkOXE0FQ0UF7T8L39o7snbCo5vzgzfLDi1o1gMSdFxHtI7Q1fL3x50E DKk7H4MAEH6AI3XIA0adSG23HDl9C9V5lMClyofnIXhoRuWGZ+SdsdwAMESpXSG6 h4tscbEXOFtbI2iYQaihN0Ijc+UR4WDU -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:27 2025 by rpki-client