$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft File: 4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json) Hash identifier: GL+0VgVIWAlV6qbBJx6UjZqTKMmvcg6Tz8h0eruVSGo= Subject key identifier: 00:7D:7A:31:29:78:B4:AD:36:8E:2D:EC:51:C6:F4:8F:98:E3:1D:59 Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 Certificate issuer: /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Certificate serial: 0806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft Manifest number: 07FB Signing time: Tue 04 Nov 2025 21:09:02 +0000 Manifest this update: Tue 04 Nov 2025 21:09:02 +0000 Manifest next update: Tue 11 Nov 2025 21:09:02 +0000 Files and hashes: 1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: +q6PooccJAqwk76/ccE5eJ0Ibu4xK7hXHp1wxHtlfIc=) 2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: ZknxYLcseYgQHA8GKWCkWbIGR6Obm6R2RGgZoA7El3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Validity Not Before: Nov 4 21:09:02 2025 GMT Not After : Nov 11 21:09:02 2025 GMT Subject: CN=690a6b6e-0dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:0c:e1:43:29:92:56:cf:ee:13:ed:2a:9b: 43:eb:63:6c:e2:b3:8f:8e:63:5e:78:14:3b:e2:2a: 65:71:4b:23:da:ef:be:fb:e9:f1:cc:93:61:cf:b8: 31:0d:f8:9d:20:64:b1:04:83:12:83:78:c8:1f:ef: 79:b7:64:38:7a:4d:77:c8:cc:46:bd:0d:d3:c3:4a: c0:c0:59:ac:16:5d:f2:af:64:a5:12:e2:78:2f:ef: 9d:e3:ad:b7:d8:ae:93:24:ff:d6:f0:a3:0f:35:a5: 56:a6:2e:7a:1b:60:c6:72:94:59:5b:36:02:f5:de: 22:8c:21:ee:be:40:a4:a5:20:cd:3a:22:02:61:48: 4b:8e:da:e4:45:ae:cd:85:cb:61:5a:79:8a:38:17: 39:4d:e8:a2:8c:b6:b2:ca:f3:2a:3d:2e:7f:fb:da: 6c:d4:fb:2b:1d:f0:64:eb:33:39:1b:50:7d:41:ee: 91:72:b0:0c:37:7b:5b:b0:85:01:ee:7a:5d:08:59: 2f:03:2b:f0:84:58:2e:68:34:d2:a3:4e:c6:49:f1: 09:2e:38:56:d9:02:d6:1e:50:a0:2e:7b:af:54:e2: e3:43:49:cf:d2:a6:a4:2f:00:a4:6e:9f:3b:f5:b0: 5c:0c:c6:75:e1:e3:16:38:4c:4a:30:50:b8:65:90: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:7A:31:29:78:B4:AD:36:8E:2D:EC:51:C6:F4:8F:98:E3:1D:59 X509v3 Authority Key Identifier: keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1b:46:e8:0a:f3:81:37:b7:bd:2e:62:8c:ed:ea:02:79:ff: 0c:20:73:bc:d7:e8:5b:cf:b4:66:f5:12:71:ab:7f:ce:37:fe: 9b:59:25:dc:70:5f:de:f0:75:16:c4:0a:8d:01:3f:f4:57:6c: 18:2a:4f:8c:25:7d:d6:03:76:02:98:6c:d3:1e:d2:dd:f9:86: 08:42:fa:21:8e:41:6e:2f:88:2a:db:10:71:ce:fc:79:9b:69: 12:ec:d9:d5:71:fe:d0:86:73:af:71:0e:c1:c9:07:26:2c:e0: 8b:b7:b7:18:cf:ea:96:94:99:54:e4:fa:51:81:a5:11:dc:2d: 38:09:b0:f5:b8:a5:5c:88:93:39:8b:0c:0e:94:c2:8c:3d:5b: 5d:1b:44:8d:e3:bd:fd:d9:4a:f0:41:fe:98:77:73:e8:8f:e6: 6a:5f:7c:f4:6b:80:99:eb:4b:7f:10:89:fe:71:ce:a9:80:f1: 27:24:28:ff:00:23:d2:5a:08:44:54:ed:14:f1:82:19:cc:b8: 66:35:68:f7:85:02:97:0c:1d:42:f4:20:61:93:b7:af:14:f0: 3a:c6:88:2f:b9:95:61:32:06:43:6b:0c:92:5e:3c:f7:ff:be: c9:2e:52:57:1b:46:2a:91:c1:31:fc:45:b5:ff:bf:fa:7c:6d: 1a:b9:1f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNTMxMTAvBgNVBAUTKEUzRUIyNzlFRDAxRTgzOUVGMjQ1ODA2RTA0NTFGQzE1 NTAwOTI2QTIwHhcNMjUxMTA0MjEwOTAyWhcNMjUxMTExMjEwOTAyWjAYMRYwFAYD VQQDEw02OTBhNmI2ZS0wZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQAM4UMpklbP7hPtKptD62Ns4rOPjmNeeBQ74iplcUsj2u++++nxzJNhz7gx DfidIGSxBIMSg3jIH+95t2Q4ek13yMxGvQ3Tw0rAwFmsFl3yr2SlEuJ4L++d4623 2K6TJP/W8KMPNaVWpi56G2DGcpRZWzYC9d4ijCHuvkCkpSDNOiICYUhLjtrkRa7N hcthWnmKOBc5TeiijLayyvMqPS5/+9ps1PsrHfBk6zM5G1B9Qe6RcrAMN3tbsIUB 7npdCFkvAyvwhFguaDTSo07GSfEJLjhW2QLWHlCgLnuvVOLjQ0nP0qakLwCkbp87 9bBcDMZ14eMWOExKMFC4ZZBv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB9ejEp eLStNo4t7FHG9I+Y4x1ZMB8GA1UdIwQYMBaAFOPrJ57QHoOe8kWAbgRR/BVQCSai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM1My9FNzhFNDE2RTA0 OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1N3lSWUJ1QkZIOEZWQUpK cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtc25udEFlZzU3eVJZQnVCRkg4RlZBSkpxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM1My9FNzhFNDE2RTA0OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1 N3lSWUJ1QkZIOEZWQUpKcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2G0boCvOBN7e9LmKM7eoCef8MIHO81+hbz7Rm9RJxq3/ON/6bWSXc cF/e8HUWxAqNAT/0V2wYKk+MJX3WA3YCmGzTHtLd+YYIQvohjkFuL4gq2xBxzvx5 m2kS7NnVcf7QhnOvcQ7ByQcmLOCLt7cYz+qWlJlU5PpRgaUR3C04CbD1uKVciJM5 iwwOlMKMPVtdG0SN47392UrwQf6Yd3Poj+ZqX3z0a4CZ60t/EIn+cc6pgPEnJCj/ ACPSWghEVO0U8YIZzLhmNWj3hQKXDB1C9CBhk7evFPA6xogvuZVhMgZDawySXjz3 /77JLlJXG0YqkcEx/EW1/7/6fG0auR9g -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:48 2025 by rpki-client