$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: tDVTXOmye0jgUZeY6bx7Wb5f/MBwpqSTOfjPuZDR5CQ= Subject key identifier: CE:ED:4C:97:44:A9:4D:D1:A6:5D:20:C9:80:D3:53:A5:59:34:05:C5 Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 0622 Signing time: Tue 04 Nov 2025 22:52:36 +0000 Manifest this update: Tue 04 Nov 2025 22:52:36 +0000 Manifest next update: Tue 11 Nov 2025 22:52:36 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: 0i4Moc4Rihhd6xS0DeMf+5SFYfMSL4Kn5d7waVX6BIU=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: LpIzyfQvDqArXC9hZJ5ZqGifDCSL9ldak3ZwH8S2NRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: Nov 4 22:52:36 2025 GMT Not After : Nov 11 22:52:36 2025 GMT Subject: CN=690a83b4-b80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:91:40:c8:52:b6:0c:3c:9d:38:c1:54:65: c3:53:47:53:d8:25:55:76:4a:9e:38:1e:22:8e:00: 77:50:1d:1d:32:be:62:4b:06:9f:b8:f3:0a:ef:6b: 8e:08:f7:9d:7b:a9:6a:d1:ce:76:ba:24:69:e2:eb: 3b:77:21:62:5a:79:77:2b:0b:1c:4e:22:8d:63:fa: 98:b5:e9:1c:4a:cf:9d:8c:16:9a:1b:0d:1d:7d:94: f7:e2:b5:73:ec:2a:a2:6c:1a:97:20:7c:a9:f9:2d: 03:53:b5:b3:67:c3:d3:50:32:c8:3b:ff:a9:53:a0: 99:30:b5:79:4d:2f:d6:8e:e3:56:16:c4:13:ac:82: 07:36:bc:28:a5:72:47:ea:c3:9b:a3:2a:b6:78:26: 4b:e0:76:a8:f5:79:99:7c:65:42:21:83:19:3a:b7: 4f:2b:5e:d2:ae:58:45:1c:45:f5:e2:9b:e7:ef:d0: 0b:3c:0c:3a:4b:6b:3c:8b:be:70:a1:81:58:0c:b0: 76:84:2b:b7:17:18:69:fb:93:81:6d:84:fb:b3:e5: b0:e0:1c:39:60:d6:65:7c:c4:94:71:5f:e4:69:e9: 18:00:22:e0:8d:71:e6:d0:53:11:a0:3b:71:a4:9a: 93:43:32:6a:43:cb:a4:2e:fe:9b:e3:89:d8:89:72: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:ED:4C:97:44:A9:4D:D1:A6:5D:20:C9:80:D3:53:A5:59:34:05:C5 X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:d8:e3:e9:90:28:6e:49:88:39:a5:c8:84:52:42:e5:04: d8:fd:93:b5:69:79:3f:2c:cf:fe:c7:69:5c:e0:e6:5f:23:61: 7d:1c:c5:e9:92:1c:00:c0:7d:45:cb:84:30:d5:53:20:16:be: 18:e3:55:fe:00:f8:a2:f1:90:e2:24:de:33:25:3f:47:03:6a: ae:95:48:ef:49:b6:7f:5c:8d:c9:5c:5e:bb:0b:8e:88:ba:a1: 1a:11:8b:76:89:b8:fd:d9:83:a4:b5:00:5e:98:eb:79:7c:74: e2:6d:91:1c:2c:9c:26:a1:69:2c:0a:dd:ce:5a:4d:7e:1e:09: 49:be:1f:a1:f9:80:88:51:5c:8a:53:82:9e:69:27:4f:4a:da: 9e:b4:b6:c4:1b:d1:81:a2:b6:42:c6:66:c0:08:e2:17:ae:37: 68:03:5b:08:5e:e8:60:ee:f1:4e:3a:8e:63:ed:27:8e:a4:b4: 0a:ff:5f:c0:e1:c0:3e:96:39:86:a4:b1:18:2d:a7:5b:57:b6: e5:52:0d:c1:bb:79:48:9e:a8:13:13:95:3a:d4:99:a3:08:e7: 87:79:22:24:61:97:c1:63:82:9b:4a:17:44:02:cc:a0:2e:fd: cf:48:67:d1:5f:2a:87:53:47:61:9f:c3:79:6b:3d:61:fd:74: b1:9a:c8:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjUxMTA0MjI1MjM2WhcNMjUxMTExMjI1MjM2WjAYMRYwFAYD VQQDEw02OTBhODNiNC1iODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A6RQMhStgw8nTjBVGXDU0dT2CVVdkqeOB4ijgB3UB0dMr5iSwafuPMK72uO CPede6lq0c52uiRp4us7dyFiWnl3KwscTiKNY/qYtekcSs+djBaaGw0dfZT34rVz 7CqibBqXIHyp+S0DU7WzZ8PTUDLIO/+pU6CZMLV5TS/WjuNWFsQTrIIHNrwopXJH 6sOboyq2eCZL4Hao9XmZfGVCIYMZOrdPK17SrlhFHEX14pvn79ALPAw6S2s8i75w oYFYDLB2hCu3Fxhp+5OBbYT7s+Ww4Bw5YNZlfMSUcV/kaekYACLgjXHm0FMRoDtx pJqTQzJqQ8ukLv6b44nYiXKTpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7tTJdE qU3Rpl0gyYDTU6VZNAXFMB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQUNjj6ZAobkmIOaXIhFJC5QTY/ZO1aXk/LM/+x2lc4OZfI2F9HMXp khwAwH1Fy4Qw1VMgFr4Y41X+APii8ZDiJN4zJT9HA2qulUjvSbZ/XI3JXF67C46I uqEaEYt2ibj92YOktQBemOt5fHTibZEcLJwmoWksCt3OWk1+HglJvh+h+YCIUVyK U4KeaSdPStqetLbEG9GBorZCxmbACOIXrjdoA1sIXuhg7vFOOo5j7SeOpLQK/1/A 4cA+ljmGpLEYLadbV7blUg3Bu3lInqgTE5U61JmjCOeHeSIkYZfBY4KbShdEAsyg Lv3PSGfRXyqHU0dhn8N5az1h/XSxmsiz -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:07 2025 by rpki-client