$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: TtlIlEi+R7T7/ivE/kKLPC1JYEl6wGJQdtSvTW/C1lU= Subject key identifier: 77:2C:58:97:64:65:0B:4A:EC:53:FF:02:B9:CF:6C:EC:B0:D6:F3:64 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34CF Signing time: Sun 02 Nov 2025 15:09:02 +0000 Manifest this update: Sun 02 Nov 2025 15:09:02 +0000 Manifest next update: Sun 09 Nov 2025 15:09:02 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: 9/ymxWUUf+5/Wx1/aga6dap+Av+AeY4XyneLBIw15Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13519 (0x34cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Nov 2 15:09:02 2025 GMT Not After : Nov 9 15:09:02 2025 GMT Subject: CN=6907740e-b5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:c2:5e:98:0e:16:3f:b3:6e:68:3a:04:90: 55:4a:77:06:7b:da:fb:de:ee:38:49:7c:d2:51:fb: 1b:a9:ea:25:7c:25:86:23:99:6d:4c:fa:29:57:a5: df:fb:1e:17:7f:06:72:55:0b:19:2d:3b:b7:24:ca: 02:fa:0b:de:a4:c8:32:82:7f:6c:f4:8c:54:bf:e2: 51:02:5d:84:a0:a7:66:87:c7:3a:5e:bd:a8:76:6a: db:6e:e4:4c:1a:a0:ea:41:77:b7:cc:28:f0:c4:56: 30:cc:d7:2b:dd:cf:dd:32:ea:fd:f9:21:dd:31:21: 81:3a:0b:3a:65:6e:19:ea:13:bc:e7:41:48:e0:7e: e2:0a:42:3e:88:ef:44:0d:aa:49:0a:08:dd:e6:da: 34:f8:63:5a:b2:ae:b7:3c:66:9c:d6:34:f2:a6:05: 1c:62:c3:65:6e:d2:52:14:16:ca:9e:26:8e:f0:73: 0a:d4:1d:6d:72:22:37:a4:ef:0c:e2:d2:21:35:ab: a3:97:89:fa:df:5e:d2:9c:93:90:6e:57:1a:e0:c8: bb:62:2a:69:25:75:b2:8a:30:19:e9:78:d5:63:b3: 21:b1:f8:de:a7:4a:46:26:d2:62:e1:35:56:b4:8c: 7a:fc:8c:16:a9:01:ed:00:bd:e8:50:ae:da:f9:10: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2C:58:97:64:65:0B:4A:EC:53:FF:02:B9:CF:6C:EC:B0:D6:F3:64 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0b:cb:a3:e5:a4:7e:a2:fc:02:98:41:78:da:fd:27:91:6a: 54:e1:48:66:29:06:cf:23:18:bf:8c:bc:6c:5f:8f:6e:59:90: 34:45:99:79:14:75:b2:8c:95:be:32:9e:57:9f:f4:6e:18:16: 1d:9b:2f:32:53:c1:6a:68:76:ba:01:5e:ac:3b:f5:2f:cd:5f: a9:57:80:d8:9c:07:ef:96:5b:84:da:d2:c4:37:99:81:df:96: 4f:f4:22:76:2d:51:b2:9c:19:d9:bd:66:1d:f4:6c:07:95:38: 83:c8:55:11:4f:db:69:8a:aa:9e:59:49:24:23:8e:22:46:21: 24:29:9d:1a:d0:54:8a:53:5d:61:51:26:10:e2:cf:18:fd:39: 28:5e:25:05:23:3d:4b:40:ae:b9:ec:f6:ba:26:98:94:7e:f5: f5:46:e6:19:14:cf:bf:a1:46:b6:ad:cc:dd:6e:32:6f:2f:81: 94:69:52:03:b7:34:04:b0:35:76:c1:b7:2b:e3:d7:cd:87:61: d9:6e:a2:0e:6d:83:99:7d:3c:0b:b4:d6:18:93:b0:7f:c9:5e: ae:65:9e:ed:84:a1:74:8a:33:18:fe:7e:45:33:04:8a:12:5f: 50:f3:25:4c:7f:bb:26:58:d1:dc:d2:2e:fa:70:2b:9c:13:1d: e4:af:ec:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUxMTAyMTUwOTAyWhcNMjUxMTA5MTUwOTAyWjAYMRYwFAYD VQQDEw02OTA3NzQwZS1iNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+7CXpgOFj+zbmg6BJBVSncGe9r73u44SXzSUfsbqeolfCWGI5ltTPopV6Xf +x4XfwZyVQsZLTu3JMoC+gvepMgygn9s9IxUv+JRAl2EoKdmh8c6Xr2odmrbbuRM GqDqQXe3zCjwxFYwzNcr3c/dMur9+SHdMSGBOgs6ZW4Z6hO850FI4H7iCkI+iO9E DapJCgjd5to0+GNasq63PGac1jTypgUcYsNlbtJSFBbKniaO8HMK1B1tciI3pO8M 4tIhNaujl4n6317SnJOQblca4Mi7YippJXWyijAZ6XjVY7Mhsfjep0pGJtJi4TVW tIx6/IwWqQHtAL3oUK7a+RAm5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcsWJdk ZQtK7FP/ArnPbOyw1vNkMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYC8uj5aR+ovwCmEF42v0nkWpU4UhmKQbPIxi/jLxsX49uWZA0RZl5 FHWyjJW+Mp5Xn/RuGBYdmy8yU8FqaHa6AV6sO/UvzV+pV4DYnAfvlluE2tLEN5mB 35ZP9CJ2LVGynBnZvWYd9GwHlTiDyFURT9tpiqqeWUkkI44iRiEkKZ0a0FSKU11h USYQ4s8Y/TkoXiUFIz1LQK657Pa6JpiUfvX1RuYZFM+/oUa2rczdbjJvL4GUaVID tzQEsDV2wbcr49fNh2HZbqIObYOZfTwLtNYYk7B/yV6uZZ7thKF0ijMY/n5FMwSK El9Q8yVMf7smWNHc0i76cCucEx3kr+yQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:30 2025 by rpki-client