$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json) Hash identifier: pwWnbXI98+Rcxgme8iYD2HoBvFGQvSNDHSmo/XiYBSs= Subject key identifier: 40:B5:E5:13:74:77:6B:1D:B2:34:AD:47:F3:FF:7C:1C:7C:02:6E:5B Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft Manifest number: 07DF Signing time: Sun 02 Nov 2025 21:09:22 +0000 Manifest this update: Sun 02 Nov 2025 21:09:22 +0000 Manifest next update: Sun 09 Nov 2025 21:09:22 +0000 Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: h6Jiplj/HfWP+zuzPj+jdezP5t13QQ+lzpVxiBKY49g=) 2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: 6t5gjK6uSlTdUUyjqaA8L4ugjjxcnRzK8+qoE0d23h4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Validity Not Before: Nov 2 21:09:22 2025 GMT Not After : Nov 9 21:09:22 2025 GMT Subject: CN=6907c882-af17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:06:ad:f8:d2:8d:1a:0e:9e:6e:50:fa:86:6c: ab:05:ff:c6:c1:de:ef:04:b6:b1:42:ec:4f:9a:b7: d0:93:55:7e:0a:38:4a:9d:b8:0d:37:99:b8:ce:e4: 7e:b5:ea:d7:c1:54:66:40:0f:d6:76:db:fd:98:e2: 2a:08:ad:6e:c4:43:67:d2:46:08:95:64:f0:cf:6a: eb:70:07:a5:d9:c7:77:e2:37:4a:a2:0f:d8:50:81: b4:3f:42:70:aa:cc:b1:08:18:08:26:ee:85:ec:59: 18:25:5f:f0:51:00:8f:35:4a:e6:48:9b:44:67:5f: 43:d4:ac:5e:ca:88:03:1c:f2:60:27:d9:2a:f9:00: 6b:9a:f7:57:26:0b:07:49:8e:6f:61:21:f8:5e:54: fc:7c:d6:1c:a8:2a:d0:79:fb:10:d0:08:dc:6b:af: 5a:91:0a:e8:8e:92:e0:24:f3:f0:08:38:20:fe:74: 7a:be:38:87:21:7f:ee:3b:2a:38:d5:aa:76:0d:93: 1b:4e:92:01:f1:4c:8a:ea:a5:07:e1:ba:e6:54:a1: 5b:12:9a:f9:b1:50:85:36:45:43:de:8b:69:62:9e: 20:3d:46:86:87:1c:34:2c:bd:72:d8:5a:1c:34:9b: ce:4d:e7:62:22:ac:46:52:c6:11:be:3e:a5:0a:2f: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B5:E5:13:74:77:6B:1D:B2:34:AD:47:F3:FF:7C:1C:7C:02:6E:5B X509v3 Authority Key Identifier: keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a0:f3:f3:11:23:ba:37:19:79:5c:93:1b:89:e1:4c:86:ee: 2b:2e:83:a7:5d:b4:a7:55:14:50:2d:c4:f7:d7:96:af:ba:7b: f3:b0:f5:ad:0c:9e:73:9a:98:6c:4e:9b:fb:e2:54:0c:33:79: 51:2b:aa:e5:a5:72:44:6d:db:fb:db:82:42:62:50:23:be:69: 53:d3:9c:68:69:74:ec:80:4e:c1:1a:2f:1a:5e:59:39:90:32: c7:45:11:ef:b2:e0:d5:5a:aa:f1:dc:d5:cc:2f:bb:9f:88:79: 01:05:1d:96:0f:1e:b6:c6:14:c8:34:cb:2f:44:d8:f6:6a:23: 7e:45:91:3a:d8:f4:3a:dd:05:48:f2:9b:c6:29:38:ec:bc:9a: ea:16:66:4b:47:ef:65:e0:1f:d0:17:76:bd:a3:4f:7c:a7:de: 1c:06:7d:08:ef:dc:ca:f9:dc:08:0b:b1:40:10:bb:c9:3a:ff: a7:38:e2:5c:68:a3:81:c5:9e:20:f2:8d:d2:0b:17:77:dc:45: 6d:0f:78:6e:f0:2b:e5:1a:44:a8:41:70:36:96:83:92:42:42: 72:0e:5b:e9:0a:f5:72:10:ed:b3:74:64:af:bf:06:ed:19:49: cd:8a:78:fc:a6:65:2c:c7:56:a8:55:32:a5:47:90:db:32:08: 04:10:5e:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2 MTc0REU4M0EwHhcNMjUxMTAyMjEwOTIyWhcNMjUxMTA5MjEwOTIyWjAYMRYwFAYD VQQDEw02OTA3Yzg4Mi1hZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Aat+NKNGg6eblD6hmyrBf/Gwd7vBLaxQuxPmrfQk1V+CjhKnbgNN5m4zuR+ terXwVRmQA/Wdtv9mOIqCK1uxENn0kYIlWTwz2rrcAel2cd34jdKog/YUIG0P0Jw qsyxCBgIJu6F7FkYJV/wUQCPNUrmSJtEZ19D1KxeyogDHPJgJ9kq+QBrmvdXJgsH SY5vYSH4XlT8fNYcqCrQefsQ0Ajca69akQrojpLgJPPwCDgg/nR6vjiHIX/uOyo4 1ap2DZMbTpIB8UyK6qUH4brmVKFbEpr5sVCFNkVD3otpYp4gPUaGhxw0LL1y2Foc NJvOTediIqxGUsYRvj6lCi+ZfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC15RN0 d2sdsjStR/P/fBx8Am5bMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtY V1JPWTJDOHowUmhoZE42RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxoPPzESO6Nxl5XJMbieFMhu4rLoOnXbSnVRRQLcT315avunvzsPWt DJ5zmphsTpv74lQMM3lRK6rlpXJEbdv724JCYlAjvmlT05xoaXTsgE7BGi8aXlk5 kDLHRRHvsuDVWqrx3NXML7ufiHkBBR2WDx62xhTINMsvRNj2aiN+RZE62PQ63QVI 8pvGKTjsvJrqFmZLR+9l4B/QF3a9o098p94cBn0I79zK+dwIC7FAELvJOv+nOOJc aKOBxZ4g8o3SCxd33EVtD3hu8CvlGkSoQXA2loOSQkJyDlvpCvVyEO2zdGSvvwbt GUnNinj8pmUsx1aoVTKlR5DbMggEEF6P -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:45 2025 by rpki-client