$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: aJoYkHWrV1qzOlQ45TccVTYtpSDa/Wmxq1zWxNr8Sd0= Subject key identifier: AB:FB:B0:0A:10:7E:3F:F7:98:42:CD:F0:8A:1D:79:E8:10:E7:46:12 Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 3536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 3503 Signing time: Sun 02 Nov 2025 14:18:05 +0000 Manifest this update: Sun 02 Nov 2025 14:18:05 +0000 Manifest next update: Sun 09 Nov 2025 14:18:05 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: 9/da5zCDPGA/KUJ3hhLN1B+52gKEhsbzepsNMS79LlM=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: E8L7EMY++G+/jL4fto/6X8FIxPH0nU/qyOAGKr50fbg=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: cZP7pPe4Y/msfUjF/3Xl+aRlpqp1LPFsqoN3iYA504I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13622 (0x3536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Nov 2 14:18:05 2025 GMT Not After : Nov 9 14:18:05 2025 GMT Subject: CN=6907681d-84b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:63:96:95:e3:f1:d3:1a:4d:e9:7c:a4:d6: 86:5d:2f:f0:b7:52:da:96:64:e6:5f:eb:e9:43:cc: 9e:47:d2:b8:1a:fa:61:ac:40:2a:0f:8c:12:d8:c6: d4:e6:7d:53:4c:12:f0:18:4c:50:e8:1e:98:bb:2b: 7a:bf:93:0f:06:7a:9b:c5:38:85:92:7a:3c:ce:03: 2c:75:75:74:97:52:c1:d1:40:1c:fb:2f:ec:5b:8b: dd:e1:c3:54:1e:36:b1:bf:ac:7a:5b:17:e0:ac:12: a7:91:8c:8d:30:6b:a7:dd:2f:d9:b9:22:26:a7:64: a6:45:3b:79:b9:a4:1f:1a:58:0f:9b:3d:45:2d:57: e9:b9:15:2b:78:17:ee:e4:c2:4c:c0:8e:99:d5:5c: 67:c5:ae:71:72:7a:f6:d8:12:60:95:12:78:8d:1f: 20:81:c6:02:99:9e:7a:d7:2a:f7:c9:05:8d:b1:a3: 2b:cb:a7:69:46:ff:ec:ac:f2:34:e5:3a:ad:64:4d: 61:07:62:da:d6:e9:47:4a:9b:06:d7:0b:6b:21:a5: 3d:22:83:70:0a:fe:d0:aa:1b:5b:62:4d:6a:99:ca: 81:ff:64:5f:c2:2d:b4:82:96:a3:a8:36:ce:b1:d8: 5c:8e:f6:20:21:ef:a6:a4:e2:19:b5:09:bf:3a:be: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FB:B0:0A:10:7E:3F:F7:98:42:CD:F0:8A:1D:79:E8:10:E7:46:12 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:84:d7:0d:33:02:61:3e:5c:55:ba:59:48:b7:48:5b:18:62: 93:ea:2a:b9:d1:0e:65:d6:8e:6c:01:2e:1d:fe:f3:94:e9:4e: 95:d3:e0:50:c2:da:3f:2b:bb:e0:0a:46:7d:b2:c7:46:ac:18: cf:7e:be:59:b6:35:ae:78:a0:45:c3:f3:72:36:98:39:d3:c9: 2e:38:11:ca:bf:81:45:14:13:d5:9b:04:c8:e7:54:61:0c:95: e5:1c:ee:e7:e3:75:90:83:de:d0:7b:ae:4f:d5:5d:75:87:83: 2b:44:6f:fd:c9:e1:86:12:21:04:3e:a6:7a:44:38:c1:6f:b9: 3a:a2:85:fc:82:63:c7:69:54:e8:18:c8:b6:4f:96:2d:8a:1c: 22:4f:8c:6c:e3:a3:35:4a:a0:14:83:82:6b:ea:d8:d7:39:73: ec:cd:0d:30:81:95:b9:ea:7e:02:9f:37:ac:87:6d:eb:57:97: 41:30:98:58:40:39:63:18:9e:c6:44:a3:ee:2b:4e:ea:da:f7: 55:68:67:94:4d:5d:b6:88:ce:bd:55:6d:39:a6:70:c8:38:be: eb:0e:9f:6e:4a:e0:43:7e:4f:33:11:57:0a:84:65:e9:96:23: 60:f4:e2:aa:bd:da:f8:dd:f4:cd:dd:7c:4b:0d:9e:9d:91:d4: 37:ab:de:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjUxMTAyMTQxODA1WhcNMjUxMTA5MTQxODA1WjAYMRYwFAYD VQQDEw02OTA3NjgxZC04NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xBjlpXj8dMaTel8pNaGXS/wt1LalmTmX+vpQ8yeR9K4GvphrEAqD4wS2MbU 5n1TTBLwGExQ6B6Yuyt6v5MPBnqbxTiFkno8zgMsdXV0l1LB0UAc+y/sW4vd4cNU Hjaxv6x6WxfgrBKnkYyNMGun3S/ZuSImp2SmRTt5uaQfGlgPmz1FLVfpuRUreBfu 5MJMwI6Z1Vxnxa5xcnr22BJglRJ4jR8ggcYCmZ561yr3yQWNsaMry6dpRv/srPI0 5TqtZE1hB2La1ulHSpsG1wtrIaU9IoNwCv7QqhtbYk1qmcqB/2Rfwi20gpajqDbO sdhcjvYgIe+mpOIZtQm/Or4gZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKv7sAoQ fj/3mELN8IodeegQ50YSMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQhNcNMwJhPlxVullIt0hbGGKT6iq50Q5l1o5sAS4d/vOU6U6V0+BQ wto/K7vgCkZ9ssdGrBjPfr5ZtjWueKBFw/NyNpg508kuOBHKv4FFFBPVmwTI51Rh DJXlHO7n43WQg97Qe65P1V11h4MrRG/9yeGGEiEEPqZ6RDjBb7k6ooX8gmPHaVTo GMi2T5YtihwiT4xs46M1SqAUg4Jr6tjXOXPszQ0wgZW56n4Cnzesh23rV5dBMJhY QDljGJ7GRKPuK07q2vdVaGeUTV22iM69VW05pnDIOL7rDp9uSuBDfk8zEVcKhGXp liNg9OKqvdr43fTN3XxLDZ6dkdQ3q96u -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:26 2025 by rpki-client