$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: egL7Zl4u4pmfxbhYrwYuVW19kDuNP1xKEoNmAxt/HWI= Subject key identifier: AA:9C:D3:69:1A:A6:9A:E0:AC:5E:B7:2F:B4:FB:2E:4D:B6:CC:36:2D Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0F1F Signing time: Sun 02 Nov 2025 17:37:23 +0000 Manifest this update: Sun 02 Nov 2025 17:37:23 +0000 Manifest next update: Sun 09 Nov 2025 17:37:23 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: 6rqyuwzkI9/jhtxI6Rnrq2JIRCUNZi+5IwsOR3aGM1g=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3895 (0xf37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Nov 2 17:37:23 2025 GMT Not After : Nov 9 17:37:23 2025 GMT Subject: CN=690796d3-f9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:20:6d:1e:1b:12:55:63:65:4f:1b:ae:0c: 10:e8:0d:36:37:ac:03:2e:49:2b:24:8f:a1:55:2d: 7d:2b:56:0a:75:42:f7:7b:3c:7d:63:a4:9a:c7:44: 2e:61:6a:97:b1:dc:cd:9d:68:1b:b2:91:db:a1:03: 4f:53:3f:16:a6:01:cc:5f:cf:ed:4e:c0:32:44:fd: dc:17:ac:b2:3d:94:53:fe:59:df:fe:0d:8a:dc:8f: eb:e5:1d:52:ca:77:30:42:1c:c2:75:2b:1b:99:17: 61:2a:c3:eb:44:cb:58:26:4b:17:2a:6a:2e:97:80: 8f:fe:b6:6f:61:0a:fa:6f:c9:70:57:34:dc:6e:0c: ba:1c:49:a2:72:29:16:6d:42:c8:f7:22:14:49:e4: fb:8e:41:df:e4:45:ef:52:b4:03:e7:84:ea:80:e1: 09:7d:83:b2:8b:7b:42:0f:6f:28:42:72:55:b2:50: f4:50:9f:ee:0c:b1:fb:62:65:2e:35:43:b6:55:a7: 41:37:d6:4c:6b:1f:9c:2e:29:d8:cd:73:63:00:51: f1:41:ca:1a:54:5b:89:73:9e:8d:21:48:18:89:47: 38:86:53:6a:94:86:d8:02:82:84:54:ee:42:a3:37: ca:62:89:6e:f2:37:ac:08:b4:b8:a9:c3:5c:bf:e8: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9C:D3:69:1A:A6:9A:E0:AC:5E:B7:2F:B4:FB:2E:4D:B6:CC:36:2D X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:d2:f6:fe:e2:5b:db:37:7d:92:09:c2:50:3c:48:bf:35:5b: 17:64:8b:0d:b8:ee:2c:fb:de:91:37:40:14:9d:d4:67:fa:de: 66:5f:56:6a:0a:2b:82:a1:19:89:d4:93:1d:50:5a:c2:d4:f2: ab:f3:9e:ed:de:2c:68:05:e1:5d:fc:ec:67:e6:b7:2e:1f:93: 41:9e:e9:03:ff:82:f1:be:7d:22:24:e5:20:24:6b:e9:ba:89: f3:e2:d3:e8:82:38:5f:af:75:1d:36:25:a0:d4:72:dd:4c:4c: 47:ba:ab:4d:50:f7:16:06:83:b6:d4:60:d2:1a:70:40:1a:69: f5:61:3b:da:9f:b5:31:0c:c6:91:aa:0c:4a:88:e8:bd:a1:23: 36:9b:a7:22:5c:bb:cb:81:c0:24:0e:44:9c:3a:9e:c9:87:b6: 5c:cf:4f:bc:33:00:80:a5:4c:05:09:fa:d5:92:c1:80:34:af: 54:f4:01:80:87:88:51:aa:dd:ea:67:cd:0c:8a:02:f6:96:38: fa:6e:5b:e4:da:0a:ea:4a:2d:ad:17:11:90:43:cc:ec:c8:c0: 3e:f1:d8:d3:b6:bf:fd:9c:6a:32:a3:4c:1d:7e:19:c8:0f:4d: a0:bc:0d:23:ea:6b:da:fa:10:cf:3a:95:d2:ba:a8:4d:cb:97: 11:54:e4:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUxMTAyMTczNzIzWhcNMjUxMTA5MTczNzIzWjAYMRYwFAYD VQQDEw02OTA3OTZkMy1mOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6cgbR4bElVjZU8brgwQ6A02N6wDLkkrJI+hVS19K1YKdUL3ezx9Y6Sax0Qu YWqXsdzNnWgbspHboQNPUz8WpgHMX8/tTsAyRP3cF6yyPZRT/lnf/g2K3I/r5R1S yncwQhzCdSsbmRdhKsPrRMtYJksXKmoul4CP/rZvYQr6b8lwVzTcbgy6HEmicikW bULI9yIUSeT7jkHf5EXvUrQD54TqgOEJfYOyi3tCD28oQnJVslD0UJ/uDLH7YmUu NUO2VadBN9ZMax+cLinYzXNjAFHxQcoaVFuJc56NIUgYiUc4hlNqlIbYAoKEVO5C ozfKYolu8jesCLS4qcNcv+i0PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqc02ka pprgrF63L7T7Lk22zDYtMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/0vb+4lvbN32SCcJQPEi/NVsXZIsNuO4s+96RN0AUndRn+t5mX1Zq CiuCoRmJ1JMdUFrC1PKr857t3ixoBeFd/Oxn5rcuH5NBnukD/4Lxvn0iJOUgJGvp uonz4tPogjhfr3UdNiWg1HLdTExHuqtNUPcWBoO21GDSGnBAGmn1YTvan7UxDMaR qgxKiOi9oSM2m6ciXLvLgcAkDkScOp7Jh7Zcz0+8MwCApUwFCfrVksGANK9U9AGA h4hRqt3qZ80MigL2ljj6blvk2grqSi2tFxGQQ8zsyMA+8djTtr/9nGoyo0wdfhnI D02gvA0j6mva+hDPOpXSuqhNy5cRVOT3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:26 2025 by rpki-client