$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: DqzcUd3tpiZWGvVZvo7H7Ax441BCPSV29QRV4fKB14M= Subject key identifier: 65:0F:F6:BD:E3:57:8D:20:2D:AF:7B:8A:BB:4E:27:C2:B0:51:81:2B Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 03B5 Signing time: Mon 03 Nov 2025 00:41:33 +0000 Manifest this update: Mon 03 Nov 2025 00:41:33 +0000 Manifest next update: Mon 10 Nov 2025 00:41:33 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: L5IBesQFaLzGxmozxkqCUEwb90WZVm+i8F7mZHbLgLI=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 2CusgDeod/GNoY/LuvI1PPosNLPCfcqPbyc433D/0Uw=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: Qo8S4vnL8vk6lsjFg8E5pxu1jHSHJhkqcg0rzkOHusw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Nov 3 00:41:33 2025 GMT Not After : Nov 10 00:41:33 2025 GMT Subject: CN=6907fa3d-ee79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:40:3e:6a:28:f3:33:01:39:e2:8e:06:41: 6b:53:9f:6e:9d:bf:4e:15:19:55:ca:34:13:8f:94: 4b:73:d7:38:04:b4:19:a3:f1:b8:52:22:7b:da:1c: cf:9d:ed:b1:68:0c:c5:bc:c2:a0:34:60:60:9c:32: 1b:79:b5:d4:0d:5f:bb:6f:c4:3d:68:a7:0e:bb:8f: 56:09:a5:4f:47:f2:4f:ec:3b:6a:ff:8e:bf:93:56: 62:7a:5c:92:15:f4:1f:b8:ca:64:4a:d5:c9:a2:da: 41:00:c4:07:a1:7a:d7:dc:3e:a1:5b:25:d0:d4:27: 41:bf:47:38:0b:57:e5:d2:46:a5:fa:2c:f4:56:fb: c1:bf:d5:ee:25:ef:91:9d:c7:b5:f3:cd:38:43:02: 4b:fb:0a:51:3b:15:e9:bb:cc:9c:fe:19:68:f9:be: f4:10:55:d5:fd:59:c0:dc:ba:13:97:f0:74:4e:07: 4b:1a:af:50:09:a1:37:de:cd:50:89:05:5e:1d:86: 92:e0:3a:49:d9:db:4c:38:79:ad:ef:51:e8:28:32: 11:ab:f4:51:b6:fa:92:91:af:f3:8f:cb:97:52:bf: d7:05:90:5a:41:60:92:cc:37:ca:cd:5c:76:06:af: 58:55:f3:a1:d8:c9:1d:dc:48:0d:9c:3d:6f:2d:01: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:F6:BD:E3:57:8D:20:2D:AF:7B:8A:BB:4E:27:C2:B0:51:81:2B X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c5:44:6a:08:5f:6d:8f:21:65:07:e3:f8:ef:d5:e7:13:26: 6f:53:2e:bf:84:e6:35:54:bb:a5:6a:52:8a:7c:3e:57:5d:0c: 17:72:e4:3f:8e:f8:a4:1a:74:41:70:e7:00:e6:38:14:93:20: 77:f0:3b:bb:d9:7f:71:2e:e5:13:26:bd:7b:bd:17:07:9e:2b: e6:ce:a0:c5:bb:f3:ac:4c:2e:d0:c1:f5:c2:7f:4b:bf:aa:2f: 3f:f4:b9:2d:df:ad:a8:df:48:bb:98:54:47:68:ff:70:ee:01: 29:4a:0a:01:ca:3a:75:df:20:14:ef:ba:8b:f9:b0:80:d2:ec: b2:1a:d2:6b:d1:19:b1:fb:de:bd:d4:cc:e0:dd:6c:b2:4b:8e: fb:2e:0f:b3:eb:d6:93:45:90:c3:9f:ea:c5:f3:43:8c:e6:5d: 54:ca:f9:01:d7:bf:d7:f4:f6:a4:bd:0f:d8:ac:5f:8c:1a:5c: 9a:a8:49:23:64:c0:11:f6:4c:56:95:80:85:67:05:6d:d7:b2: 66:ec:6e:59:21:3e:16:97:a0:c9:1c:ce:58:6a:81:be:5c:d7: 5d:c2:b3:4d:2e:a3:04:16:74:f8:d3:1b:a8:97:8d:ef:7e:52: c6:5c:f0:8c:e2:29:27:4f:85:b5:8d:c0:21:0f:c8:df:9d:24: 66:1b:e0:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUxMTAzMDA0MTMzWhcNMjUxMTEwMDA0MTMzWjAYMRYwFAYD VQQDEw02OTA3ZmEzZC1lZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MhAPmoo8zMBOeKOBkFrU59unb9OFRlVyjQTj5RLc9c4BLQZo/G4UiJ72hzP ne2xaAzFvMKgNGBgnDIbebXUDV+7b8Q9aKcOu49WCaVPR/JP7Dtq/46/k1ZielyS FfQfuMpkStXJotpBAMQHoXrX3D6hWyXQ1CdBv0c4C1fl0kal+iz0VvvBv9XuJe+R nce18804QwJL+wpROxXpu8yc/hlo+b70EFXV/VnA3LoTl/B0TgdLGq9QCaE33s1Q iQVeHYaS4DpJ2dtMOHmt71HoKDIRq/RRtvqSka/zj8uXUr/XBZBaQWCSzDfKzVx2 Bq9YVfOh2Mkd3EgNnD1vLQHy7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUP9r3j V40gLa97irtOJ8KwUYErMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbxURqCF9tjyFlB+P479XnEyZvUy6/hOY1VLulalKKfD5XXQwXcuQ/ jvikGnRBcOcA5jgUkyB38Du72X9xLuUTJr17vRcHnivmzqDFu/OsTC7QwfXCf0u/ qi8/9Lkt362o30i7mFRHaP9w7gEpSgoByjp13yAU77qL+bCA0uyyGtJr0Rmx+969 1Mzg3WyyS477Lg+z69aTRZDDn+rF80OM5l1UyvkB17/X9PakvQ/YrF+MGlyaqEkj ZMAR9kxWlYCFZwVt17Jm7G5ZIT4Wl6DJHM5YaoG+XNddwrNNLqMEFnT40xuol43v flLGXPCM4iknT4W1jcAhD8jfnSRmG+Dt -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:25 2025 by rpki-client