$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json) Hash identifier: RGA/FuH3oVP0QSgDDjPVEQHHwzIMFvQLvylMoYFNjFE= Subject key identifier: E2:F5:D6:8D:27:A1:23:C5:8E:58:2C:8E:2B:DB:79:25:5B:AA:E2:8B Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft Manifest number: 01EC Signing time: Mon 03 Nov 2025 02:46:53 +0000 Manifest this update: Mon 03 Nov 2025 02:46:53 +0000 Manifest next update: Mon 10 Nov 2025 02:46:53 +0000 Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: rYwmAksycKuCd4pgK8QWGnAevFvNHjhoGU5w+K2K7BQ=) 2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: Ne5P4RHs3YFSrDYzxUegdYs2bv4xvTKvncGb7wbf4vY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Validity Not Before: Nov 3 02:46:53 2025 GMT Not After : Nov 10 02:46:53 2025 GMT Subject: CN=6908179d-720a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:eb:74:c7:4f:9a:76:5b:ca:f7:a4:b2:15: cb:5a:17:2e:72:7e:94:d4:23:4b:2e:e8:d8:1d:18: c0:6d:0f:d6:84:4a:44:ce:9e:37:5b:20:31:4a:a9: 5e:5f:26:69:15:2c:e2:a2:6b:65:32:74:48:c1:01: 55:77:51:d7:5b:46:5f:f5:eb:5f:9c:8f:aa:d1:91: 2e:6d:f7:d5:64:0e:b9:f4:cc:e5:2f:87:c6:f3:03: 80:5b:48:5a:0f:29:64:4e:20:dd:9d:d1:93:2b:7d: df:44:6d:25:13:fb:f9:8f:cf:60:50:f0:4f:d3:7f: e7:e9:c0:80:b6:5c:42:b2:f6:12:16:90:40:5e:2b: 2a:20:e7:43:4d:61:a0:ef:e6:2d:a9:98:aa:5e:f7: e5:81:a9:c7:c3:77:7d:cd:b6:0f:60:19:b1:47:44: e2:76:0c:71:63:f9:b2:ee:e7:f0:d6:1f:be:58:8d: 94:34:af:23:c3:6c:4e:09:64:d3:e0:5d:7a:ef:39: 23:da:04:43:ee:9d:00:5a:b7:c3:40:61:fb:4a:3b: c5:9a:63:71:d6:3a:11:e5:51:9f:fc:63:30:42:8e: 8d:db:b1:e1:34:31:e9:89:7a:00:fe:a1:28:11:5c: ae:88:e2:94:f3:f3:77:9c:f9:14:60:26:cc:09:7f: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F5:D6:8D:27:A1:23:C5:8E:58:2C:8E:2B:DB:79:25:5B:AA:E2:8B X509v3 Authority Key Identifier: keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:72:d0:86:cc:f5:5d:a2:93:19:3c:02:96:0d:5d:85:02:6f: 8b:74:15:ee:12:ee:f9:34:e0:71:78:ba:8e:02:94:84:62:6d: 64:24:5f:a2:b2:c6:ac:ee:7f:30:7a:07:32:eb:5d:d1:cc:3e: 53:0d:00:b4:b4:af:b5:33:ef:01:96:12:e8:d0:9d:b3:e3:ac: ce:cf:b7:70:90:f8:64:7a:db:d4:75:b7:79:e4:cd:f8:8d:74: 5e:ab:7f:09:a2:9b:13:21:e9:d1:69:0f:11:b3:76:c5:1d:e1: 30:64:31:cf:04:63:e3:39:58:fa:d0:ae:d7:5d:bc:75:6a:de: 91:40:af:d4:12:a0:64:d3:d7:7d:f1:33:45:2d:47:31:2f:56: 3d:44:de:ac:f6:94:a8:67:63:58:16:53:77:3b:c2:c1:f5:62: 41:4c:26:e6:a5:bf:5e:d2:5e:dc:86:5e:e6:3c:be:37:0a:77: 6e:02:a5:9c:69:e7:bc:a8:ad:6f:c8:fe:46:19:de:73:07:50: 0d:83:d2:5f:8c:c7:42:a2:a5:6d:48:10:73:15:c0:98:29:ad: 9e:43:52:90:80:4b:16:93:56:ca:37:59:fd:11:55:fd:5d:95: 6b:3d:b6:87:5c:8c:e0:8e:5f:86:6b:ad:b1:b9:42:8a:05:d8: 84:85:2f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY4M0QxMTAvBgNVBAUTKDdGQjE2RTQwRkEzQ0E3N0ZDRTI0QzRDOUE0NjQ1Njgz QzM5RThBMTEwHhcNMjUxMTAzMDI0NjUzWhcNMjUxMTEwMDI0NjUzWjAYMRYwFAYD VQQDEw02OTA4MTc5ZC03MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30DrdMdPmnZbyvekshXLWhcucn6U1CNLLujYHRjAbQ/WhEpEzp43WyAxSqle XyZpFSziomtlMnRIwQFVd1HXW0Zf9etfnI+q0ZEubffVZA659MzlL4fG8wOAW0ha DylkTiDdndGTK33fRG0lE/v5j89gUPBP03/n6cCAtlxCsvYSFpBAXisqIOdDTWGg 7+YtqZiqXvflganHw3d9zbYPYBmxR0TidgxxY/my7ufw1h++WI2UNK8jw2xOCWTT 4F167zkj2gRD7p0AWrfDQGH7SjvFmmNx1joR5VGf/GMwQo6N27HhNDHpiXoA/qEo EVyuiOKU8/N3nPkUYCbMCX8w5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOL11o0n oSPFjlgsjivbeSVbquKLMB8GA1UdIwQYMBaAFH+xbkD6PKd/ziTEyaRkVoPDnooR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjgzRC9BM0Q1MkZCOEM4 NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAzX09KTVRKcEdSV2c4T2Vp aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3RnVRUG84cDNfT0pNVEpwR1JXZzhPZWloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjgzRC9BM0Q1MkZCOEM4NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAz X09KTVRKcEdSV2c4T2VpaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnctCGzPVdopMZPAKWDV2FAm+LdBXuEu75NOBxeLqOApSEYm1kJF+i ssas7n8wegcy613RzD5TDQC0tK+1M+8BlhLo0J2z46zOz7dwkPhketvUdbd55M34 jXReq38JopsTIenRaQ8Rs3bFHeEwZDHPBGPjOVj60K7XXbx1at6RQK/UEqBk09d9 8TNFLUcxL1Y9RN6s9pSoZ2NYFlN3O8LB9WJBTCbmpb9e0l7chl7mPL43CnduAqWc aee8qK1vyP5GGd5zB1ANg9JfjMdCoqVtSBBzFcCYKa2eQ1KQgEsWk1bKN1n9EVX9 XZVrPbaHXIzgjl+Ga62xuUKKBdiEhS+T -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:32 2025 by rpki-client