$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: RammYnTmbGrIl2GyW/kpjg4tmZW6FYKDnW5x1i1nHEU= Subject key identifier: 2C:99:F5:EA:40:73:F8:1F:AE:4C:6E:68:B7:5B:A0:5F:37:BD:F7:A8 Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: 0108 Signing time: Mon 03 Nov 2025 04:58:11 +0000 Manifest this update: Mon 03 Nov 2025 04:58:10 +0000 Manifest next update: Mon 10 Nov 2025 04:58:10 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: wbW7eFQXATVtjUHP3tYsDBOV8OGS6yLDQPwbT5Eo5jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Nov 3 04:58:10 2025 GMT Not After : Nov 10 04:58:10 2025 GMT Subject: CN=69083663-c9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:f4:5f:03:4e:c6:d2:59:67:d6:b3:f8:26: 12:d2:68:9a:1c:d8:6e:86:e5:9e:9f:a3:26:db:05: b5:31:1e:5f:4e:49:2b:24:01:ed:0f:87:16:45:25: 36:24:cf:f2:63:c1:cd:63:fd:58:5b:d5:d6:26:85: 53:de:40:9f:ea:2e:99:53:b2:24:67:3a:1a:6c:63: 5f:d2:33:58:d6:54:4f:74:b3:cf:36:ae:ee:6c:26: ca:71:66:05:f7:3e:26:47:6b:41:e6:15:28:87:af: bb:dc:17:f1:b3:5c:41:58:03:37:82:5a:47:29:6b: 5e:96:fe:7b:58:5e:b1:bc:3b:c6:2b:e5:56:c8:f2: 15:bd:e4:27:75:2d:27:21:29:96:09:4a:3b:89:65: 56:c5:6c:97:49:28:40:c7:0e:07:6d:71:17:0f:d3: ea:05:ec:92:52:2b:87:d3:c7:33:07:2c:5e:a1:98: b7:25:4e:95:97:24:6d:76:59:2e:a0:bd:dc:b8:f0: 0e:92:80:9e:86:03:d8:fe:8d:48:81:51:74:d0:96: 1b:7d:83:37:af:ef:f6:4d:b9:88:7e:4d:e8:f5:36: 07:a3:88:86:40:32:61:e7:98:99:b5:cf:4d:40:71: 4b:2b:91:58:ed:da:bd:23:64:46:3b:fa:3b:0b:e5: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:99:F5:EA:40:73:F8:1F:AE:4C:6E:68:B7:5B:A0:5F:37:BD:F7:A8 X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:75:65:86:b7:2d:a1:30:df:64:92:34:e9:ca:da:f7:1e:82: 50:5b:2c:91:15:b4:b3:2c:20:06:a2:8e:79:e1:56:1b:d1:44: d9:16:8e:2a:a8:7b:27:9a:af:f9:18:16:f9:22:c8:6b:b8:dc: f2:3d:19:fa:34:6e:e2:ca:63:4c:a7:48:57:56:2e:09:65:21: 00:6b:c0:82:b2:94:65:68:53:4c:b2:2d:b6:9c:9e:d9:0c:6f: 45:c5:d9:be:bb:99:c2:8f:0c:74:ba:cb:9a:fa:76:d8:28:e0: d2:17:1a:d6:d1:c2:82:b1:87:2f:e8:e2:e3:42:7b:54:4d:78: 6f:76:68:7a:b9:6a:48:0a:84:82:d4:8c:7a:69:18:b8:f6:c2: 1f:b7:68:e0:21:7b:2b:04:ab:cb:51:ee:66:b5:54:cb:a1:a2: 99:1a:ed:fd:d4:a5:5f:ef:d8:cb:94:83:2c:05:49:9f:6a:12: f3:f4:92:65:2a:8c:a4:79:71:76:5b:3c:47:94:16:41:79:b0: 4b:2e:fc:09:4a:63:6d:05:c6:cd:e6:93:08:8d:94:58:db:35: 0a:de:dd:ed:8b:c0:c5:7e:ee:37:87:32:bf:cd:48:11:69:45: 05:77:3c:80:f6:d5:ea:ce:8d:ff:fa:d6:ac:e1:95:55:eb:84: 32:f4:49:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjUxMTAzMDQ1ODEwWhcNMjUxMTEwMDQ1ODEwWjAYMRYwFAYD VQQDEw02OTA4MzY2My1jOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Jz0XwNOxtJZZ9az+CYS0miaHNhuhuWen6Mm2wW1MR5fTkkrJAHtD4cWRSU2 JM/yY8HNY/1YW9XWJoVT3kCf6i6ZU7IkZzoabGNf0jNY1lRPdLPPNq7ubCbKcWYF 9z4mR2tB5hUoh6+73Bfxs1xBWAM3glpHKWtelv57WF6xvDvGK+VWyPIVveQndS0n ISmWCUo7iWVWxWyXSShAxw4HbXEXD9PqBeySUiuH08czByxeoZi3JU6VlyRtdlku oL3cuPAOkoCehgPY/o1IgVF00JYbfYM3r+/2TbmIfk3o9TYHo4iGQDJh55iZtc9N QHFLK5FY7dq9I2RGO/o7C+W9QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyZ9epA c/gfrkxuaLdboF83vfeoMB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgdWWGty2hMN9kkjTpytr3HoJQWyyRFbSzLCAGoo554VYb0UTZFo4q qHsnmq/5GBb5IshruNzyPRn6NG7iymNMp0hXVi4JZSEAa8CCspRlaFNMsi22nJ7Z DG9Fxdm+u5nCjwx0usua+nbYKODSFxrW0cKCsYcv6OLjQntUTXhvdmh6uWpICoSC 1Ix6aRi49sIft2jgIXsrBKvLUe5mtVTLoaKZGu391KVf79jLlIMsBUmfahLz9JJl KoykeXF2WzxHlBZBebBLLvwJSmNtBcbN5pMIjZRY2zUK3t3ti8DFfu43hzK/zUgR aUUFdzyA9tXqzo3/+tas4ZVV64Qy9Ens -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:21 2025 by rpki-client