$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: wXZOQk8MH4p24cR/14F6x42jqvd9+nzLiY/oomOZWS0= Subject key identifier: AC:F1:1A:66:90:C8:69:88:DC:84:53:DE:E7:23:3E:B3:98:9D:AE:46 Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 04EB Signing time: Tue 04 Nov 2025 15:56:31 +0000 Manifest this update: Tue 04 Nov 2025 15:56:31 +0000 Manifest next update: Tue 11 Nov 2025 15:56:31 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: uxbaPxf119h61kFGc0AV2t4MVugPWxr33ewhWmKD2Ps=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Nov 4 15:56:31 2025 GMT Not After : Nov 11 15:56:31 2025 GMT Subject: CN=690a222f-0a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:75:dd:a2:5a:42:6d:6d:34:89:fc:b3:14: ec:59:f7:24:71:c7:2f:1b:f1:04:69:95:03:10:33: 1a:b7:e8:cd:46:9b:97:32:66:e7:8a:28:9e:70:5f: 04:ee:28:ac:c7:7a:dc:4b:a8:ba:2f:15:85:f9:b6: 8d:e6:29:a1:3d:99:4d:b4:fa:c9:5c:fb:4b:b9:93: e5:98:dd:59:15:70:de:8c:f2:cb:aa:9a:24:0a:7c: a7:40:44:c4:71:40:92:c8:49:75:7a:c6:0c:dc:ef: b6:68:19:6d:a2:cf:39:ab:52:df:67:3e:06:58:b0: 40:d0:04:6c:1b:e8:54:1c:11:38:ae:a4:e5:b3:8a: a3:60:0b:35:2e:5d:3d:18:4e:fa:0c:39:ed:49:a9: a2:8f:43:d8:97:e1:3e:d0:83:62:b4:1e:9a:85:a1: 4d:3f:a0:68:f3:50:1c:cd:af:d4:df:86:29:94:a8: ec:aa:86:45:4b:3e:88:bd:60:97:7b:0c:56:05:16: 27:7c:d4:ff:b2:e6:1f:38:b0:6c:79:8a:79:66:5e: 47:7d:bf:39:20:b2:69:c0:f1:51:e2:96:29:a6:1d: 0e:1a:37:a0:47:53:d6:b7:3d:95:03:4b:94:a6:b1: 00:24:d1:61:ae:18:26:af:ba:dc:79:01:ba:f4:2c: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F1:1A:66:90:C8:69:88:DC:84:53:DE:E7:23:3E:B3:98:9D:AE:46 X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b2:33:35:49:be:ff:b4:f0:50:9a:d2:27:46:5b:9b:e8:36: 31:16:66:d9:c2:60:ef:be:d3:17:28:3b:56:ca:76:50:63:ef: ec:87:fe:d1:d2:41:a5:3e:a1:79:69:a6:51:00:00:4e:e7:35: fa:06:9d:96:e2:d5:1d:bf:36:c9:c8:48:42:8d:1b:21:cc:77: c3:6e:92:18:4f:af:2e:2f:2a:ea:cf:38:07:a7:1f:55:e1:ab: ad:69:ee:c8:c7:a7:63:8f:bd:aa:1a:4d:65:c1:de:82:c7:65: 2c:d3:d7:77:d4:c2:be:cf:84:1a:56:18:32:b9:a3:04:c4:9b: 6b:05:e6:df:b8:d2:da:7b:ba:94:6a:02:06:4d:af:6b:df:1d: cd:56:8d:fe:ee:6e:87:17:d6:b6:f2:4a:97:ec:ee:71:41:7e: c0:0b:96:cb:fc:66:59:74:39:e2:1e:cc:8f:01:31:33:e3:98: a3:0c:a2:7e:d2:4d:8b:65:e7:d2:b8:1d:0f:de:21:00:cd:fa: 0a:44:94:bd:ff:6e:2a:13:ea:45:3b:6f:09:e0:37:09:35:05: 18:31:eb:9b:95:e4:4c:82:73:f2:18:45:e7:21:c6:ed:67:f0: 84:4a:6c:76:28:a5:91:0c:3b:2d:8f:70:c8:f0:5b:70:60:fe: 03:97:2e:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUxMTA0MTU1NjMxWhcNMjUxMTExMTU1NjMxWjAYMRYwFAYD VQQDEw02OTBhMjIyZi0wYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFx13aJaQm1tNIn8sxTsWfckcccvG/EEaZUDEDMat+jNRpuXMmbniiiecF8E 7iisx3rcS6i6LxWF+baN5imhPZlNtPrJXPtLuZPlmN1ZFXDejPLLqpokCnynQETE cUCSyEl1esYM3O+2aBltos85q1LfZz4GWLBA0ARsG+hUHBE4rqTls4qjYAs1Ll09 GE76DDntSamij0PYl+E+0INitB6ahaFNP6Bo81Acza/U34YplKjsqoZFSz6IvWCX ewxWBRYnfNT/suYfOLBseYp5Zl5Hfb85ILJpwPFR4pYpph0OGjegR1PWtz2VA0uU prEAJNFhrhgmr7rceQG69CzR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzxGmaQ yGmI3IRT3ucjPrOYna5GMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMsjM1Sb7/tPBQmtInRlub6DYxFmbZwmDvvtMXKDtWynZQY+/sh/7R 0kGlPqF5aaZRAABO5zX6Bp2W4tUdvzbJyEhCjRshzHfDbpIYT68uLyrqzzgHpx9V 4autae7Ix6djj72qGk1lwd6Cx2Us09d31MK+z4QaVhgyuaMExJtrBebfuNLae7qU agIGTa9r3x3NVo3+7m6HF9a28kqX7O5xQX7AC5bL/GZZdDniHsyPATEz45ijDKJ+ 0k2LZefSuB0P3iEAzfoKRJS9/24qE+pFO28J4DcJNQUYMeubleRMgnPyGEXnIcbt Z/CESmx2KKWRDDstj3DI8FtwYP4Dly6l -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:29 2025 by rpki-client