$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: X/NFWZWTgvP7H1t40u2RX1LOwwzAax9erxo13csJeyU= Subject key identifier: CF:AA:D0:6C:3B:33:18:36:E3:EF:C2:76:F5:AA:33:28:69:BF:06:64 Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 0374 Signing time: Wed 05 Nov 2025 00:58:41 +0000 Manifest this update: Wed 05 Nov 2025 00:58:41 +0000 Manifest next update: Wed 12 Nov 2025 00:58:41 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: GrHta3qv5mWDar/l9uv5QSJJpc3waiBarcutILzTd40=) 2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: ZO4FyXUvWQjoBnjdYas53x9mwxjL1ZSYmacbdFPrIGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Nov 5 00:58:41 2025 GMT Not After : Nov 12 00:58:41 2025 GMT Subject: CN=690aa141-e127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:92:6f:83:c2:56:8e:5d:09:c4:4e:99:ad: be:f3:7e:e1:0c:91:30:de:f3:04:90:19:da:d2:46: 94:7e:e0:29:ca:d3:1d:24:90:26:0f:08:56:06:ce: a5:d4:fc:fa:1c:e6:cc:72:c0:6c:d4:05:bb:54:df: a3:e1:a9:05:51:0b:fe:68:69:e2:fc:4d:b2:04:46: 52:ba:7e:2b:3d:f5:22:83:88:a6:99:a4:f4:61:56: 8b:60:28:0c:cf:d8:84:2b:f7:55:4a:85:81:6e:ad: 57:19:09:89:41:ad:4f:75:f9:76:37:c7:fd:0b:cf: aa:89:88:01:e6:98:6b:b5:27:09:b7:81:33:41:4d: 46:9c:fc:5f:47:c4:3f:11:36:99:45:a0:8f:91:e2: 84:e5:91:b5:07:7b:e3:fe:d7:ab:6b:01:2b:6c:f0: e6:8a:70:be:de:f7:8d:e9:6f:3f:c4:11:3f:e8:0e: a5:34:98:08:7c:86:78:c5:b0:f1:65:35:fc:b2:d4: 26:5b:9e:d3:de:4c:fb:b0:a5:57:b4:a6:f4:18:85: 0d:41:ad:2b:7b:0c:20:ec:0b:ba:53:27:4e:f5:36: 6a:fa:be:ac:a7:38:2c:87:2e:eb:cc:58:b8:a5:e7: c6:ac:d3:ee:42:db:06:30:6e:1d:30:31:26:ec:e8: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AA:D0:6C:3B:33:18:36:E3:EF:C2:76:F5:AA:33:28:69:BF:06:64 X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a5:dc:5b:71:9f:7b:1b:2d:18:5a:55:7f:0b:d0:ab:d6:86: e1:9d:fd:64:31:1f:00:9d:65:2c:3b:b2:86:9f:10:2a:aa:39: 32:96:a4:64:02:91:8c:c9:8e:7b:54:da:d6:2b:45:d1:e0:71: 44:22:a1:49:f2:b4:ac:04:41:21:f3:d6:73:be:eb:0a:9e:dd: 2c:44:31:11:e1:54:ce:43:9a:8d:d9:4f:2f:f9:38:29:9b:63: d7:22:fd:fd:21:6f:e4:33:8f:93:52:ea:a9:60:5a:4f:13:28: cb:a9:0d:02:a5:47:4f:73:91:2d:bd:55:b0:32:40:10:73:17: 02:9d:56:34:7a:a1:ec:84:8d:dc:97:11:43:5b:60:92:c8:ad: a8:a5:ef:f8:53:d3:e2:59:c5:25:41:18:0e:2d:81:47:9a:07: 2a:a3:06:b8:97:72:b5:ae:43:d4:1a:20:f0:13:d4:88:cd:95: f8:f1:68:a6:9e:aa:f9:94:79:6d:52:d8:fa:90:cf:7b:c1:50: 4d:c8:ed:0a:da:e1:9f:40:1d:d5:b7:6b:65:ee:03:df:3b:88: a0:a2:38:03:21:fe:c7:c2:39:27:4e:e3:3c:b4:65:82:fe:41: 2e:ed:27:a6:58:db:23:da:81:7c:35:67:14:ad:67:e4:68:f9: 91:c8:5b:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjUxMTA1MDA1ODQxWhcNMjUxMTEyMDA1ODQxWjAYMRYwFAYD VQQDEw02OTBhYTE0MS1lMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb+Sb4PCVo5dCcROma2+837hDJEw3vMEkBna0kaUfuApytMdJJAmDwhWBs6l 1Pz6HObMcsBs1AW7VN+j4akFUQv+aGni/E2yBEZSun4rPfUig4immaT0YVaLYCgM z9iEK/dVSoWBbq1XGQmJQa1Pdfl2N8f9C8+qiYgB5phrtScJt4EzQU1GnPxfR8Q/ ETaZRaCPkeKE5ZG1B3vj/terawErbPDminC+3veN6W8/xBE/6A6lNJgIfIZ4xbDx ZTX8stQmW57T3kz7sKVXtKb0GIUNQa0rewwg7Au6UydO9TZq+r6spzgshy7rzFi4 pefGrNPuQtsGMG4dMDEm7OhIKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+q0Gw7 Mxg24+/CdvWqMyhpvwZkMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOpdxbcZ97Gy0YWlV/C9Cr1obhnf1kMR8AnWUsO7KGnxAqqjkylqRk ApGMyY57VNrWK0XR4HFEIqFJ8rSsBEEh89ZzvusKnt0sRDER4VTOQ5qN2U8v+Tgp m2PXIv39IW/kM4+TUuqpYFpPEyjLqQ0CpUdPc5EtvVWwMkAQcxcCnVY0eqHshI3c lxFDW2CSyK2ope/4U9PiWcUlQRgOLYFHmgcqowa4l3K1rkPUGiDwE9SIzZX48Wim nqr5lHltUtj6kM97wVBNyO0K2uGfQB3Vt2tl7gPfO4igojgDIf7HwjknTuM8tGWC /kEu7SemWNsj2oF8NWcUrWfkaPmRyFsa -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:22 2025 by rpki-client