$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft File: MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json) Hash identifier: ersiSHQrz20Fpi3WjwaQFcBwQI5yXdFx7WwcfZW1zmM= Subject key identifier: E9:71:F1:10:6D:60:5D:74:C0:4E:F3:68:77:F8:DE:C4:AB:A4:73:BF Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Certificate serial: 0310 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft Manifest number: 030C Signing time: Wed 05 Nov 2025 01:14:43 +0000 Manifest this update: Wed 05 Nov 2025 01:14:42 +0000 Manifest next update: Wed 12 Nov 2025 01:14:42 +0000 Files and hashes: 1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: xv4n6UR+bY7bKroTJ/vT0Jbw3qD7RlOoYoYSb57//9k=) 2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: O9VH081pE8F9Lw59kLD8OKGix93beOfAyf1mf+VTITU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 784 (0x310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Validity Not Before: Nov 5 01:14:42 2025 GMT Not After : Nov 12 01:14:42 2025 GMT Subject: CN=690aa502-3f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:09:b8:87:29:4f:2a:61:83:b0:4f:95:fb:e2: ea:bf:8e:93:99:22:b1:cc:41:f6:75:a6:3e:d6:4b: d1:ac:5a:09:e8:bf:84:2c:71:e9:9a:8e:58:2e:d6: da:da:14:9b:ef:b2:fd:0d:50:42:a5:4a:c6:77:1b: 9c:1d:90:91:c8:85:3a:71:14:81:15:82:73:59:b9: 60:ac:5c:53:cf:ce:65:ba:57:06:24:be:2a:90:a0: 07:7d:a4:82:f1:b3:5c:87:94:e9:ff:5d:c1:d8:2a: 48:4d:de:9d:54:2b:fc:cb:ed:a6:b4:6f:69:f0:83: 31:f8:03:b4:9d:de:81:17:1f:08:8c:36:24:40:68: 34:f4:34:11:68:7a:bc:ba:d7:c2:c8:03:8f:ff:16: 35:41:5b:f2:0e:4e:63:49:76:56:cf:01:bc:9b:42: f7:68:3a:c7:7e:de:73:86:a4:f1:c2:99:0c:62:7d: af:3d:1c:10:76:78:81:15:88:03:82:b0:09:28:08: 79:c2:79:6d:bd:8b:c4:fd:4e:a0:12:01:73:87:12: 00:7f:62:91:5d:f9:7c:bf:95:ae:c6:1c:81:8d:03: 4d:1c:15:cd:2d:0c:e2:98:5b:d4:0b:ed:ab:f6:7a: 06:5f:ae:5d:1d:de:20:32:63:e3:a0:8c:b5:79:a9: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:F1:10:6D:60:5D:74:C0:4E:F3:68:77:F8:DE:C4:AB:A4:73:BF X509v3 Authority Key Identifier: keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c6:19:b5:49:ee:b5:64:37:07:83:5b:50:8f:7c:70:d2:4b: 91:8b:0d:83:33:a8:75:ff:5f:8b:6f:8a:9f:bf:7e:52:2d:8c: 54:e0:2e:57:ed:4d:9b:07:28:99:5f:01:66:4a:6a:a7:03:8d: 6b:dd:a4:31:a5:68:f3:64:f7:23:81:f6:ee:dc:c1:36:33:d8: af:df:9f:4a:b8:cc:ba:56:d8:f6:0c:ce:9a:78:91:d3:e6:6b: 5c:10:9a:86:ca:5e:98:7c:38:b0:24:ce:ee:3b:70:23:2f:65: 27:2a:cf:43:8c:b7:95:67:79:c4:76:d6:1f:3f:b7:37:64:bd: f0:68:33:23:35:9d:41:f6:25:83:01:12:6e:54:e3:fc:21:49: a5:b2:ef:21:4c:95:e0:1e:44:0c:88:29:96:6e:09:e7:66:25: a5:70:3f:c9:45:a6:8e:e6:20:54:7c:07:28:99:cd:9f:46:41: 75:fb:ac:a1:0a:0f:56:cb:21:77:60:db:d2:b5:98:3a:d1:75: 09:19:51:55:0a:5f:01:6a:76:d3:d0:58:da:91:b9:70:c4:5d: 4b:e0:57:2d:96:fc:fa:c8:35:78:e0:36:ef:88:b5:34:1f:60: e7:04:98:e8:6f:71:37:70:67:f3:d4:77:22:d5:0a:91:9f:64: 3e:cd:3a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMDAxMTAvBgNVBAUTKDMwOUEyQTM2NDMzNEE5RERCQTRBNkQ0NDA0MUQ3OUE1 RDMyQkFGQUIwHhcNMjUxMTA1MDExNDQyWhcNMjUxMTEyMDExNDQyWjAYMRYwFAYD VQQDEw02OTBhYTUwMi0zZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Qm4hylPKmGDsE+V++Lqv46TmSKxzEH2daY+1kvRrFoJ6L+ELHHpmo5YLtba 2hSb77L9DVBCpUrGdxucHZCRyIU6cRSBFYJzWblgrFxTz85lulcGJL4qkKAHfaSC 8bNch5Tp/13B2CpITd6dVCv8y+2mtG9p8IMx+AO0nd6BFx8IjDYkQGg09DQRaHq8 utfCyAOP/xY1QVvyDk5jSXZWzwG8m0L3aDrHft5zhqTxwpkMYn2vPRwQdniBFYgD grAJKAh5wnltvYvE/U6gEgFzhxIAf2KRXfl8v5WuxhyBjQNNHBXNLQzimFvUC+2r 9noGX65dHd4gMmPjoIy1eaksRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlx8RBt YF10wE7zaHf43sSrpHO/MB8GA1UdIwQYMBaAFDCaKjZDNKndukptRAQdeaXTK6+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEwMC9FNDNEQzVDQUYy QkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFkMjZTbTFFQkIxNXBkTXJy NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Kb3FOa00wcWQyNlNtMUVCQjE1cGRNcnI2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzEwMC9FNDNEQzVDQUYyQkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFk MjZTbTFFQkIxNXBkTXJyNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxhm1Se61ZDcHg1tQj3xw0kuRiw2DM6h1/1+Lb4qfv35SLYxU4C5X 7U2bByiZXwFmSmqnA41r3aQxpWjzZPcjgfbu3ME2M9iv359KuMy6Vtj2DM6aeJHT 5mtcEJqGyl6YfDiwJM7uO3AjL2UnKs9DjLeVZ3nEdtYfP7c3ZL3waDMjNZ1B9iWD ARJuVOP8IUmlsu8hTJXgHkQMiCmWbgnnZiWlcD/JRaaO5iBUfAcomc2fRkF1+6yh Cg9WyyF3YNvStZg60XUJGVFVCl8BanbT0FjakblwxF1L4Fctlvz6yDV44DbviLU0 H2DnBJjob3E3cGfz1Hci1QqRn2Q+zTqp -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:04 2025 by rpki-client