$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json) Hash identifier: 1wNrIlVuiBxSYt3iz6XJQbhCnSttSrC85J1oH1Vge5k= Subject key identifier: C4:48:B8:C4:D2:3C:4B:8A:34:3A:A4:BE:8D:6C:F7:FA:E1:8E:35:C6 Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF Certificate serial: 0D1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft Manifest number: 0D00 Signing time: Tue 04 Nov 2025 18:12:13 +0000 Manifest this update: Tue 04 Nov 2025 18:12:12 +0000 Manifest next update: Tue 11 Nov 2025 18:12:12 +0000 Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: zPc//fRi2CC4vU8tuNWxXn1R42xgD3Vk3qnum9z9qUE=) 2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: XLP4ULkxYx27srGDokdT1/3ibgVd5Ja0S3t9A21I8Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3357 (0xd1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF Validity Not Before: Nov 4 18:12:12 2025 GMT Not After : Nov 11 18:12:12 2025 GMT Subject: CN=690a41fd-7955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:65:e7:66:3c:6d:b2:23:7a:2c:5a:4f:01: 5f:d9:14:f6:0c:03:19:b1:bc:7f:87:5f:1a:b5:f4: 94:8d:69:22:87:8f:7a:99:6a:83:c2:81:68:c9:7b: 37:60:2f:10:f8:e5:6d:1b:a8:20:df:4a:35:81:7d: 51:bb:34:32:04:6f:94:42:71:76:23:cd:f4:82:4b: 8f:5d:78:ad:3d:55:66:0c:2f:4c:39:67:65:c2:44: be:5f:eb:33:e6:8f:bb:74:3f:0c:79:6a:a4:d8:46: 0d:00:da:47:b4:15:2b:b5:96:af:75:69:93:fe:0d: 47:87:92:f7:5c:7b:3a:69:b5:37:e0:ae:a4:7d:ae: a1:1f:29:1c:92:5d:fd:32:87:01:a3:e0:36:84:9c: 2e:7d:4b:e2:eb:27:14:5a:fd:56:d6:04:54:75:ef: 96:3b:39:8a:11:cf:b1:64:7a:67:57:53:ac:c1:4c: 26:7f:ef:7f:24:11:94:8b:eb:26:1e:fc:01:86:46: c6:ac:6c:52:f3:67:06:7e:1b:45:29:f4:92:51:dd: 47:5e:ed:2d:05:48:bc:71:f1:df:c9:bd:4b:02:6e: 25:9b:23:db:28:91:d3:cb:3f:f5:cb:c1:ec:6c:54: 23:2b:04:cd:09:54:db:d3:ab:ac:f8:e2:04:24:c8: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:48:B8:C4:D2:3C:4B:8A:34:3A:A4:BE:8D:6C:F7:FA:E1:8E:35:C6 X509v3 Authority Key Identifier: keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:dc:31:37:96:82:83:1e:08:ec:36:af:31:8f:8d:a6:b3:80: b1:8b:72:64:35:e8:ff:1d:2e:59:bc:d3:7d:e1:06:fe:23:24: 82:95:3c:2f:6c:6a:ee:80:16:82:c7:23:2f:3b:20:fd:a0:5e: 04:7c:b8:0a:03:ac:80:be:1b:20:87:01:c7:87:10:45:60:89: ac:66:6d:43:3c:66:27:eb:63:43:4f:f2:a2:17:ae:98:0e:62: 9e:6c:76:ee:93:8b:08:56:3e:5c:e2:63:c0:9a:ca:f5:2b:1d: e9:d8:e7:ef:b7:51:d1:25:23:11:31:57:38:6c:8e:64:89:57: ce:ed:e0:60:78:0f:67:74:a9:ea:a4:73:f4:17:de:1f:86:ad: f2:24:5c:39:f9:b9:39:2f:03:7e:92:9b:19:b7:ac:fa:f2:34: 6b:3f:e5:c9:5d:ba:6d:fc:ed:bc:88:df:4d:67:0a:47:2c:bd: da:44:7c:cd:67:b8:f5:8a:78:21:b6:9d:90:32:da:f8:58:8a: 3c:8a:61:a5:fe:7e:ff:8f:3c:5f:c2:46:1b:13:ad:b6:b2:f8: 36:c4:9c:3a:1b:d3:38:5b:bd:e3:72:4d:0c:be:35:dc:56:46: 6c:4a:c0:82:40:c6:2b:27:6b:28:fc:55:64:04:f1:d5:ce:7d: 0b:16:43:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMDgxMTAvBgNVBAUTKDdCNTkwNTUyMTI4NDkxMDVBRDZGMzlFNTg4MUQ4NDJF NzA3NDM5QUYwHhcNMjUxMTA0MTgxMjEyWhcNMjUxMTExMTgxMjEyWjAYMRYwFAYD VQQDEw02OTBhNDFmZC03OTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Atl52Y8bbIjeixaTwFf2RT2DAMZsbx/h18atfSUjWkih496mWqDwoFoyXs3 YC8Q+OVtG6gg30o1gX1RuzQyBG+UQnF2I830gkuPXXitPVVmDC9MOWdlwkS+X+sz 5o+7dD8MeWqk2EYNANpHtBUrtZavdWmT/g1Hh5L3XHs6abU34K6kfa6hHykckl39 MocBo+A2hJwufUvi6ycUWv1W1gRUde+WOzmKEc+xZHpnV1OswUwmf+9/JBGUi+sm HvwBhkbGrGxS82cGfhtFKfSSUd1HXu0tBUi8cfHfyb1LAm4lmyPbKJHTyz/1y8Hs bFQjKwTNCVTb06us+OIEJMj12QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRIuMTS PEuKNDqkvo1s9/rhjjXGMB8GA1UdIwQYMBaAFHtZBVIShJEFrW855YgdhC5wdDmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMwOC9BODE5MTRFMkY0 RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtRV3Riem5saUIyRUxuQjBP YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Uxa0ZVaEtFa1FXdGJ6bmxpQjJFTG5CME9hOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMwOC9BODE5MTRFMkY0RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtR V3Riem5saUIyRUxuQjBPYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDr3DE3loKDHgjsNq8xj42ms4Cxi3JkNej/HS5ZvNN94Qb+IySClTwv bGrugBaCxyMvOyD9oF4EfLgKA6yAvhsghwHHhxBFYImsZm1DPGYn62NDT/KiF66Y DmKebHbuk4sIVj5c4mPAmsr1Kx3p2Ofvt1HRJSMRMVc4bI5kiVfO7eBgeA9ndKnq pHP0F94fhq3yJFw5+bk5LwN+kpsZt6z68jRrP+XJXbpt/O28iN9NZwpHLL3aRHzN Z7j1inghtp2QMtr4WIo8imGl/n7/jzxfwkYbE622svg2xJw6G9M4W73jck0MvjXc VkZsSsCCQMYrJ2so/FVkBPHVzn0LFkNz -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:20 2025 by rpki-client