$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: LxP0m/bxS+xN1EQvq9LMQijq+xoPaYLvDvefJxyMUG8= Subject key identifier: 25:93:75:61:1D:AB:A6:B5:F6:E1:00:82:FD:99:E9:04:AA:01:27:14 Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 0A58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 0A52 Signing time: Sun 02 Nov 2025 19:38:30 +0000 Manifest this update: Sun 02 Nov 2025 19:38:30 +0000 Manifest next update: Sun 09 Nov 2025 19:38:30 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: j16i4HonmREDqw70xjMHmnNj4RED9ZmjrSL7v9L1ak4=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: yZGCclZoBxnBhfhgaEtvdMtpamiVGJaHMeM0i3edazA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: Nov 2 19:38:30 2025 GMT Not After : Nov 9 19:38:30 2025 GMT Subject: CN=6907b336-51b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:88:12:a1:df:ee:08:a2:ee:7c:ab:6b:3a:a2: 64:c8:b5:77:3c:f8:d5:05:e4:82:37:db:c7:05:d6: 02:bb:14:24:cc:37:5e:79:20:67:80:cb:d1:d7:22: 5c:70:52:96:8f:a5:b9:23:c6:1b:9f:a3:fb:59:c8: 61:ce:2f:7c:99:e9:0b:4d:94:86:09:03:0b:5f:31: e3:70:f2:00:d5:ff:cb:44:a8:59:ee:61:9b:2e:5d: 77:1f:0b:ae:7e:49:c3:c3:fe:a1:55:cd:9c:6e:c2: 6c:fe:71:9e:c8:7a:4b:9a:0a:f4:79:9d:38:79:07: 3e:0a:15:d4:04:b4:d5:7d:21:27:a0:c4:8a:48:d9: d9:d0:23:1d:0b:47:55:f1:60:d6:f5:a6:ba:d3:59: eb:bc:5a:8e:34:05:91:e9:a4:42:48:0e:72:ad:76: 17:a5:32:65:db:b3:73:b9:e5:f4:63:16:28:24:46: 7e:7d:c2:bb:7f:eb:fe:44:d5:31:ae:91:f2:a8:8d: 01:9a:e5:80:af:f9:aa:20:89:bc:a4:14:61:72:0d: 5c:65:2c:46:6f:53:20:68:db:21:7c:b0:ca:1f:f3: 53:7f:75:cc:26:46:79:59:75:af:e2:5c:70:e0:19: 45:3e:d9:0b:49:23:5d:34:5a:52:ea:6f:a2:9e:6f: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:75:61:1D:AB:A6:B5:F6:E1:00:82:FD:99:E9:04:AA:01:27:14 X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:80:62:b8:7b:c8:bc:58:83:7d:bf:3d:7d:61:44:f5:2e:0a: 48:49:75:d9:6f:e2:9e:b9:d2:38:ba:4d:cc:34:0b:d5:50:ec: 56:db:f9:4b:d6:f1:e9:3a:0b:59:39:eb:ee:b5:e3:bd:1d:93: a0:a4:d0:28:5a:40:21:9c:0c:15:8a:2d:e3:6c:3d:ab:c8:a3: 04:93:e2:3b:20:f0:35:c8:83:fe:54:1f:c6:ec:6f:2f:05:57: 80:1a:47:d4:0d:bd:a1:65:05:de:c2:93:63:97:39:46:36:c1: 8e:6e:cb:18:0a:3c:98:9c:3b:23:81:9d:0c:f1:f8:72:4c:87: 6c:f6:3b:91:17:09:0c:ee:d1:b4:df:72:a1:97:50:04:2e:ad: 15:9b:17:c8:75:eb:60:74:e2:d0:bc:44:0a:2d:7c:a7:77:75: 66:3e:95:a8:02:89:05:20:24:dc:ee:fb:36:bc:f0:92:d2:35: 11:53:7f:26:aa:ec:73:82:94:0f:74:ba:2f:7c:2a:b1:21:60: 2e:ea:7a:d2:63:1a:75:39:8d:2c:73:e4:26:fc:d5:19:04:ef: 34:41:86:d5:72:79:7a:32:7c:94:86:36:10:65:88:49:05:fc: 5e:71:4f:5c:cb:14:df:54:82:da:7d:f6:23:eb:6a:46:97:b2: 3a:0a:af:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjUxMTAyMTkzODMwWhcNMjUxMTA5MTkzODMwWjAYMRYwFAYD VQQDEw02OTA3YjMzNi01MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ogSod/uCKLufKtrOqJkyLV3PPjVBeSCN9vHBdYCuxQkzDdeeSBngMvR1yJc cFKWj6W5I8Ybn6P7Wchhzi98mekLTZSGCQMLXzHjcPIA1f/LRKhZ7mGbLl13Hwuu fknDw/6hVc2cbsJs/nGeyHpLmgr0eZ04eQc+ChXUBLTVfSEnoMSKSNnZ0CMdC0dV 8WDW9aa601nrvFqONAWR6aRCSA5yrXYXpTJl27NzueX0YxYoJEZ+fcK7f+v+RNUx rpHyqI0BmuWAr/mqIIm8pBRhcg1cZSxGb1MgaNshfLDKH/NTf3XMJkZ5WXWv4lxw 4BlFPtkLSSNdNFpS6m+inm9aGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWTdWEd q6a19uEAgv2Z6QSqAScUMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKgGK4e8i8WIN9vz19YUT1LgpISXXZb+KeudI4uk3MNAvVUOxW2/lL 1vHpOgtZOevuteO9HZOgpNAoWkAhnAwVii3jbD2ryKMEk+I7IPA1yIP+VB/G7G8v BVeAGkfUDb2hZQXewpNjlzlGNsGObssYCjyYnDsjgZ0M8fhyTIds9juRFwkM7tG0 33Khl1AELq0VmxfIdetgdOLQvEQKLXynd3VmPpWoAokFICTc7vs2vPCS0jURU38m quxzgpQPdLovfCqxIWAu6nrSYxp1OY0sc+Qm/NUZBO80QYbVcnl6MnyUhjYQZYhJ BfxecU9cyxTfVILaffYj62pGl7I6Cq8s -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:14 2025 by rpki-client