$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json) Hash identifier: vL4BxVy7zyAgE1RK7n60t/L1iP3VA8cOnWQ2HfTMo3E= Subject key identifier: 23:4F:CF:18:3D:5D:1F:42:18:F0:AF:4A:86:E5:CB:AD:E1:25:A3:70 Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft Manifest number: 0C47 Signing time: Tue 04 Nov 2025 18:43:52 +0000 Manifest this update: Tue 04 Nov 2025 18:43:51 +0000 Manifest next update: Tue 11 Nov 2025 18:43:51 +0000 Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: RORKFMc6mi0X7B7BU9BaFZOu12G7yT5q3W80RAJdV9g=) 2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Nov 4 18:43:51 2025 GMT Not After : Nov 11 18:43:51 2025 GMT Subject: CN=690a4967-a447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:f8:a5:1a:58:fc:92:a7:ee:8a:cd:33:78: 4c:be:ff:d4:bc:83:34:96:f4:66:8f:78:b1:6b:63: 08:2a:6b:eb:8f:a1:a5:f7:94:9f:41:4f:42:68:2a: 08:cf:a0:ca:a3:8f:b9:be:94:6f:6b:c9:1a:04:13: 33:da:17:6d:cf:75:c2:18:d2:0e:98:9c:67:88:5e: 77:7a:6c:a5:e1:7e:0d:51:21:7a:f7:50:bf:39:ef: 30:58:21:69:c9:9a:ba:77:dd:74:12:48:4b:1e:ec: 7b:90:72:95:a1:9e:f8:fa:51:58:1e:df:1e:f6:6d: 86:c2:48:a3:ee:2b:20:bc:40:e4:31:85:9a:2a:0f: b7:0c:84:88:2d:7b:71:8c:9a:d9:d0:dd:14:bf:74: b8:09:4a:ef:38:30:16:37:86:69:16:21:3e:b0:e4: 7f:aa:2a:55:4e:08:83:92:2f:18:60:12:27:a2:7d: 72:b4:e6:b7:d8:f9:1c:52:cb:50:9d:0f:09:9a:06: e3:99:d3:ca:60:c2:81:72:cc:4e:95:35:69:54:72: 76:9b:6e:ba:ea:ab:23:0e:fa:12:7d:35:c5:54:26: dd:72:fb:1a:7e:1f:60:ab:4e:0e:dc:8a:09:0d:28: 78:0d:4d:a5:7c:85:54:8b:b3:8f:0f:3e:ad:43:d3: d5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:CF:18:3D:5D:1F:42:18:F0:AF:4A:86:E5:CB:AD:E1:25:A3:70 X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:3e:59:fe:60:ea:74:22:f5:f4:29:db:cc:8e:8d:23:f9:a1: 5d:ea:39:a0:06:a5:b8:27:fb:83:b3:a7:72:11:bf:5f:ce:ac: 00:a1:f2:00:f1:d3:b7:f9:46:f1:77:1b:25:9b:d8:2f:1a:de: 3a:51:d3:9b:81:c8:5c:60:2c:b4:8c:3c:ae:a3:38:47:e0:d6: c9:7d:1c:40:fc:dd:fe:0f:9b:af:49:e7:34:f0:89:52:1f:e3: d3:58:ad:ea:e7:2b:14:b2:7b:5a:13:4e:a4:57:a4:66:80:fd: 86:0d:1f:4d:7e:67:cc:8d:8c:28:b8:30:c9:fa:c1:f9:a2:8c: c1:cd:44:50:ac:8c:7d:b3:bb:93:54:af:e4:07:2d:d3:e8:27: 87:2d:02:06:29:9b:d7:54:34:56:e7:37:dc:60:8f:6b:5e:ab: a4:b0:b5:51:71:57:4e:1b:35:db:f5:be:9e:e9:58:94:c9:af: 38:49:69:34:7c:2c:85:3c:55:ef:87:0d:79:0b:85:75:23:8e: f2:83:b2:08:5a:b1:d8:08:b5:d2:88:ba:a2:49:b5:1b:cf:e3: 71:1b:c8:23:51:e6:6e:87:a1:be:be:f9:f6:60:a9:5c:b7:dc: 62:a3:fa:ff:21:a6:c6:9f:c1:99:59:6b:a6:f0:92:ed:a0:de: e0:e2:1a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUxMTA0MTg0MzUxWhcNMjUxMTExMTg0MzUxWjAYMRYwFAYD VQQDEw02OTBhNDk2Ny1hNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12X4pRpY/JKn7orNM3hMvv/UvIM0lvRmj3ixa2MIKmvrj6Gl95SfQU9CaCoI z6DKo4+5vpRva8kaBBMz2hdtz3XCGNIOmJxniF53emyl4X4NUSF691C/Oe8wWCFp yZq6d910EkhLHux7kHKVoZ74+lFYHt8e9m2Gwkij7isgvEDkMYWaKg+3DISILXtx jJrZ0N0Uv3S4CUrvODAWN4ZpFiE+sOR/qipVTgiDki8YYBInon1ytOa32PkcUstQ nQ8JmgbjmdPKYMKBcsxOlTVpVHJ2m2666qsjDvoSfTXFVCbdcvsafh9gq04O3IoJ DSh4DU2lfIVUi7OPDz6tQ9PVZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNPzxg9 XR9CGPCvSobly63hJaNwMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3 dkNvUVlUQ0plZmVZb1NFVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQPln+YOp0IvX0KdvMjo0j+aFd6jmgBqW4J/uDs6dyEb9fzqwAofIA 8dO3+Ubxdxslm9gvGt46UdObgchcYCy0jDyuozhH4NbJfRxA/N3+D5uvSec08IlS H+PTWK3q5ysUsntaE06kV6RmgP2GDR9NfmfMjYwouDDJ+sH5oozBzURQrIx9s7uT VK/kBy3T6CeHLQIGKZvXVDRW5zfcYI9rXquksLVRcVdOGzXb9b6e6ViUya84SWk0 fCyFPFXvhw15C4V1I47yg7IIWrHYCLXSiLqiSbUbz+NxG8gjUeZuh6G+vvn2YKlc t9xio/r/IabGn8GZWWum8JLtoN7g4hr6 -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:26 2025 by rpki-client