$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: qfA/Ya8Kec+/FcYW+T5pPbIUJt7zRiVdvIdSzqiY5JY= Subject key identifier: 71:2D:23:96:63:FF:E5:AF:08:A3:01:EC:9D:03:A9:EF:8D:4D:99:84 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 6B Signing time: Mon 03 Nov 2025 06:58:31 +0000 Manifest this update: Mon 03 Nov 2025 06:58:30 +0000 Manifest next update: Mon 10 Nov 2025 06:58:30 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: CVcosyG9D0oEURaUEBogUrOqUNNAsQgx4EDdHb1bp4U=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Nov 3 06:58:30 2025 GMT Not After : Nov 10 06:58:30 2025 GMT Subject: CN=69085297-a61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:44:f0:1f:6a:2b:49:48:94:a1:95:36:25: df:b3:b8:c2:05:4c:4f:02:6f:5d:cc:75:cd:7e:aa: a3:af:7b:f2:10:39:97:d0:1e:e3:6a:00:c3:30:66: f6:c3:f3:b0:3a:15:5d:05:5e:2e:e9:7f:f5:80:5f: bb:79:0f:fc:73:72:21:06:c6:d2:bc:dc:12:6d:0e: fe:37:60:4b:b4:19:7d:c5:ce:f8:8a:92:00:0c:28: 04:6f:e9:0a:f9:56:1f:d9:0a:ed:45:6d:09:58:3f: e4:80:8b:f6:4e:bf:56:ba:9b:e4:8a:f8:21:e7:fd: 8a:45:7f:60:05:39:b2:6a:11:d0:37:df:f3:c5:e9: cc:9e:bf:1c:09:bb:f1:47:4c:25:5a:dc:42:07:a2: bb:68:07:35:62:95:d3:ff:b8:16:79:bd:2e:4c:85: 2a:88:80:38:a9:6d:d1:3f:75:b0:58:71:ef:2e:a4: e5:40:02:93:49:8a:a7:31:6e:95:fd:2a:db:19:c2: d0:eb:12:c4:f7:c4:ce:8a:0c:85:45:d1:1a:9c:50: 92:6f:ad:d0:87:43:64:58:f3:08:bf:f8:a0:5c:64: 10:8c:95:1e:9f:32:4d:a7:0d:7c:8c:8a:35:f1:69: f5:1a:8c:e3:e7:ff:d0:eb:f8:9a:12:86:0d:71:16: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:23:96:63:FF:E5:AF:08:A3:01:EC:9D:03:A9:EF:8D:4D:99:84 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:95:b9:00:7b:02:44:9f:8e:54:f5:9c:93:31:38:91:b9:91: 13:f9:66:03:c2:18:bc:ff:da:33:60:7a:0b:47:49:37:b4:3c: 58:eb:9b:ed:13:73:6e:e4:54:29:04:3d:db:c1:78:59:fe:f3: 75:fb:af:a2:a4:92:46:7e:de:13:b0:39:52:8a:92:7d:36:f1: 6b:92:ca:b4:5f:0e:0f:bb:c9:95:ba:c1:0b:7b:b9:ff:22:36: 43:3a:8b:0a:69:a8:b3:3c:8c:db:9e:cf:cd:fa:8f:23:b1:70: c3:6a:66:fc:89:f8:73:b1:fc:6d:0d:cb:ff:21:6e:10:c1:35: 32:1d:cd:0a:83:d9:45:b8:1d:68:6d:fe:c4:99:17:1f:ec:de: 61:5e:66:76:1b:c1:8d:d1:08:f3:b7:2f:7a:32:8a:fa:9c:8e: 0e:99:15:8d:c0:63:16:3c:03:7d:13:4a:0d:c2:8d:ca:ce:2a: 23:14:c0:1e:61:70:77:bd:82:ae:c0:48:5b:88:dc:7c:1b:20: 6a:41:52:18:59:2f:c9:ec:15:82:e3:ff:db:9a:6e:8c:9c:d7: 30:08:98:07:66:5e:29:0d:26:be:0a:5f:70:8f:32:91:cb:d2: a0:8b:80:21:b6:05:af:4a:66:25:31:b5:28:f5:d4:cd:f7:c8: ce:e7:6a:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTExMDMwNjU4MzBaFw0yNTExMTAwNjU4MzBaMBgxFjAUBgNV BAMTDTY5MDg1Mjk3LWE2MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj5UTwH2orSUiUoZU2Jd+zuMIFTE8Cb13Mdc1+qqOve/IQOZfQHuNqAMMwZvbD 87A6FV0FXi7pf/WAX7t5D/xzciEGxtK83BJtDv43YEu0GX3FzviKkgAMKARv6Qr5 Vh/ZCu1FbQlYP+SAi/ZOv1a6m+SK+CHn/YpFf2AFObJqEdA33/PF6cyevxwJu/FH TCVa3EIHortoBzVildP/uBZ5vS5MhSqIgDipbdE/dbBYce8upOVAApNJiqcxbpX9 KtsZwtDrEsT3xM6KDIVF0RqcUJJvrdCHQ2RY8wi/+KBcZBCMlR6fMk2nDXyMijXx afUajOPn/9Dr+JoShg1xFnbFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcS0jlmP/ 5a8IowHsnQOp741NmYQwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+VuQB7AkSfjlT1nJMxOJG5kRP5ZgPCGLz/2jNgegtHSTe0PFjrm+0T c27kVCkEPdvBeFn+83X7r6KkkkZ+3hOwOVKKkn028WuSyrRfDg+7yZW6wQt7uf8i NkM6iwppqLM8jNuez836jyOxcMNqZvyJ+HOx/G0Ny/8hbhDBNTIdzQqD2UW4HWht /sSZFx/s3mFeZnYbwY3RCPO3L3oyivqcjg6ZFY3AYxY8A30TSg3CjcrOKiMUwB5h cHe9gq7ASFuI3HwbIGpBUhhZL8nsFYLj/9uaboyc1zAImAdmXikNJr4KX3CPMpHL 0qCLgCG2Ba9KZiUxtSj11M33yM7naos= -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:18 2025 by rpki-client