$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft File: rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft (raw, json) Hash identifier: N3r0puxO3OzJrkbzHXTCQLvOgXNnJhV72+nmNcrf2Ns= Subject key identifier: A1:F4:A6:5E:4F:B9:FD:43:CE:2A:ED:34:3A:73:E5:05:47:66:6D:A4 Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF Certificate issuer: /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft Manifest number: 15 Signing time: Mon 03 Nov 2025 07:53:47 +0000 Manifest this update: Mon 03 Nov 2025 07:53:46 +0000 Manifest next update: Mon 10 Nov 2025 07:53:46 +0000 Files and hashes: 1: rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl (hash: Ty4AfilHkXxi5AlLutn2nayhK4ILO47ISBkUN42XHTM=) 2: 285C90D49A8911F0B2115222C4F9AE02.roa (hash: iL5Q8l5UWu94q64YaDJD+oexRS/HLLSzlzHuSDLmHTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF Validity Not Before: Nov 3 07:53:46 2025 GMT Not After : Nov 10 07:53:46 2025 GMT Subject: CN=69085f8a-09b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:f2:1c:cb:bc:d1:67:32:ea:a6:0b:91:aa: 32:bf:d5:e5:a0:44:09:f5:40:99:09:52:65:34:8f: 11:ec:a6:b1:80:7f:58:8d:8a:74:14:00:dc:94:c9: 3e:63:61:5e:f9:b5:18:62:ea:e0:d7:09:2d:d7:a2: 54:f9:9f:d9:01:d3:bd:0c:dc:b3:ba:49:29:3c:be: a0:c1:3b:cc:6c:08:61:22:42:04:ad:3f:d0:b2:00: 3b:50:9c:ed:dc:48:9d:69:fe:b2:8b:73:01:0c:e1: b1:07:cc:17:a3:d3:74:41:28:4d:91:82:ed:dd:15: ab:ca:e7:d2:e1:14:94:ef:83:d2:c7:bb:46:83:83: 12:fa:0a:18:a5:50:de:66:79:74:da:a8:2c:7f:d8: 76:a4:fd:1e:3b:e6:18:f2:71:26:a7:82:25:b5:d6: 86:f6:87:40:64:52:86:81:25:3e:74:87:a9:7e:ae: fa:0b:34:f1:0a:c2:37:aa:15:ab:94:0c:b9:ab:29: 0f:2a:71:02:7a:78:dd:d1:c2:66:37:7a:99:85:8d: 5c:dc:4f:59:7e:2d:c9:57:d8:20:5f:c2:d3:de:8b: d2:b1:54:7e:40:b3:22:6a:21:ac:d5:59:61:78:ba: 99:36:14:e6:7e:2c:bc:9e:fa:0b:0b:3f:12:5e:28: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F4:A6:5E:4F:B9:FD:43:CE:2A:ED:34:3A:73:E5:05:47:66:6D:A4 X509v3 Authority Key Identifier: keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:2d:17:97:25:64:87:df:ab:b9:2b:a4:ad:ae:39:03:17: 40:81:ce:d0:20:4b:29:82:80:f6:1b:47:a9:0e:3e:1a:03:1e: 1c:d5:e2:8f:0b:62:6a:24:9a:24:89:59:a1:f1:50:5b:7d:db: 1a:82:2d:87:9a:42:15:d3:27:42:ec:25:b2:e8:0e:11:28:86: 57:cf:4c:45:22:8c:5e:04:a9:88:74:38:e5:72:5e:36:e4:d4: 5f:90:a2:d1:6c:6e:fe:cf:58:96:f5:f4:6b:44:34:ca:a1:b2: 2b:04:a1:1d:db:47:ad:c8:63:c1:74:2f:18:88:8d:59:d5:48: 1c:be:62:78:4c:cb:1b:9c:4e:d9:38:be:0e:93:a3:3d:2e:bb: 2c:61:50:f3:bf:ef:60:74:2b:9b:69:0e:97:a8:c5:7e:ee:ed: 59:bd:06:e2:dd:01:8f:ff:2c:9a:cb:85:e2:57:7a:0f:47:ed: 58:d4:46:2b:36:89:51:20:77:d4:9d:d6:10:c1:0d:64:fd:a3: 9a:5f:c1:ab:4d:2a:60:e1:ba:16:1b:0d:bd:e9:c4:e9:55:5f: 88:d1:2c:72:f6:ea:09:d6:78:a2:20:68:c1:69:ca:0c:0a:93: ac:92:34:00:1f:fb:7b:73:40:28:d4:50:39:b4:68:6a:2a:1f: ee:22:57:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkE3NDExMC8GA1UEBRMoQUQ2NTM0ODM5RkU2QTdBODc3NjBBMUVEMEEzOUMzMTA2 OTNGQjlGRjAeFw0yNTExMDMwNzUzNDZaFw0yNTExMTAwNzUzNDZaMBgxFjAUBgNV BAMTDTY5MDg1ZjhhLTA5YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCvPIcy7zRZzLqpguRqjK/1eWgRAn1QJkJUmU0jxHsprGAf1iNinQUANyUyT5j YV75tRhi6uDXCS3XolT5n9kB070M3LO6SSk8vqDBO8xsCGEiQgStP9CyADtQnO3c SJ1p/rKLcwEM4bEHzBej03RBKE2Rgu3dFavK59LhFJTvg9LHu0aDgxL6ChilUN5m eXTaqCx/2Hak/R475hjycSangiW11ob2h0BkUoaBJT50h6l+rvoLNPEKwjeqFauU DLmrKQ8qcQJ6eN3RwmY3epmFjVzcT1l+LclX2CBfwtPei9KxVH5AsyJqIazVWWF4 upk2FOZ+LLye+gsLPxJeKHfZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUofSmXk+5 /UPOKu00OnPlBUdmbaQwHwYDVR0jBBgwFoAUrWU0g5/mp6h3YKHtCjnDEGk/uf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QTc0LzRDMzFGQjQ0OUE4 ODExRjBBNDc3OUMxMEM0RjlBRTAyL3JXVTBnNV9tcDZoM1lLSHRDam5ERUdrX3Vm OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcldVMGc1X21wNmgzWUtIdENqbkRFR2tfdWY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QTc0LzRDMzFGQjQ0OUE4ODExRjBBNDc3OUMxMEM0RjlBRTAyL3JXVTBnNV9tcDZo M1lLSHRDam5ERUdrX3VmOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/GLReXJWSH36u5K6StrjkDF0CBztAgSymCgPYbR6kOPhoDHhzV4o8L YmokmiSJWaHxUFt92xqCLYeaQhXTJ0LsJbLoDhEohlfPTEUijF4EqYh0OOVyXjbk 1F+QotFsbv7PWJb19GtENMqhsisEoR3bR63IY8F0LxiIjVnVSBy+YnhMyxucTtk4 vg6Toz0uuyxhUPO/72B0K5tpDpeoxX7u7Vm9BuLdAY//LJrLheJXeg9H7VjURis2 iVEgd9Sd1hDBDWT9o5pfwatNKmDhuhYbDb3pxOlVX4jRLHL26gnWeKIgaMFpygwK k6ySNAAf+3tzQCjUUDm0aGoqH+4iV2I= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:44 2025 by rpki-client