$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: VjQJPW49lVeI8UypXuHeUnGk1O/mD2wuO0eGZg1qVXo= Subject key identifier: 5A:34:50:F9:0F:5E:E0:AE:58:B9:FC:7A:83:E2:0D:A4:35:9E:AF:3A Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0969 Signing time: Tue 04 Nov 2025 20:12:28 +0000 Manifest this update: Tue 04 Nov 2025 20:12:27 +0000 Manifest next update: Tue 11 Nov 2025 20:12:27 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: +hSlFRc70s7w13beEm7w65ZyGMX6mw5/1pilsS8bnd4=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Nov 4 20:12:27 2025 GMT Not After : Nov 11 20:12:27 2025 GMT Subject: CN=690a5e2c-5bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:95:22:df:73:fe:73:bf:cd:74:ab:ea:b3: 8d:ba:0f:ba:cf:13:bb:51:ee:c1:04:ad:56:26:4b: ce:3d:72:7f:8c:11:29:8f:52:9d:26:45:80:bd:2b: db:35:85:26:a5:1d:d5:21:c9:9b:4c:39:2f:32:9c: e9:b5:ff:63:22:ca:88:1e:53:c3:fc:ad:ce:f8:9b: ca:e9:c9:37:a6:56:f5:a0:23:bc:a1:f1:31:6b:37: 88:ae:89:cc:f7:bc:18:66:2b:00:2c:67:75:3b:4d: 40:10:6d:a5:0a:58:cd:61:7c:a6:98:8a:f8:0b:a0: 2e:8b:c0:5b:9e:04:38:83:e5:fa:b1:29:3d:55:c4: 6e:a6:ae:55:c3:32:39:df:20:17:65:88:7e:f8:e1: 35:d1:f4:dc:4b:f9:64:be:3c:b1:2e:5e:bf:c4:76: bf:a3:16:6a:10:f1:94:ae:9a:84:d5:d0:fe:7e:96: 9c:9b:3e:7b:4f:9f:be:91:7d:47:38:92:14:15:54: 5f:9f:cd:d6:44:f6:a7:d4:b8:08:c8:c8:c2:ff:d5: f1:52:41:34:61:98:c2:1f:55:03:09:99:78:65:8c: b8:ca:71:69:cb:4c:16:54:5f:bd:06:ae:97:8f:51: d2:88:fd:5a:08:31:53:d9:f9:47:26:9a:45:24:41: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:34:50:F9:0F:5E:E0:AE:58:B9:FC:7A:83:E2:0D:A4:35:9E:AF:3A X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:50:68:1a:09:19:52:8c:ed:2d:35:ff:b9:4b:cb:d1:90:4c: b1:17:fc:ef:2d:54:36:75:de:d1:88:41:ef:94:08:cb:33:bc: 1a:c8:c7:ba:4f:be:8c:4f:71:82:23:d2:84:9c:f8:52:58:4c: 11:f6:f2:12:d8:38:b2:0c:41:85:90:55:95:47:7b:f0:6e:f1: 00:88:72:db:b9:8b:2a:1a:8e:66:ee:6d:ab:1e:88:17:80:44: 2a:61:12:fb:2b:cd:81:c2:1d:0c:3b:9f:d8:18:64:6e:11:91: bd:4c:c5:7d:7e:27:63:de:45:d4:34:2a:d8:12:26:b1:7a:1f: 4b:d4:e2:6c:e7:5d:77:06:4f:f4:b4:a8:c2:20:87:78:93:d4: 59:b9:fa:49:66:b2:8a:dd:d3:24:f8:58:3c:03:41:0b:64:dc: fd:50:d8:ce:7b:83:3e:e2:35:51:df:5f:ec:ad:c0:4c:d1:2e: ac:0d:59:68:9b:d3:37:3e:a4:6d:9f:c5:34:72:49:07:57:da: 8e:4d:da:ef:d2:ec:c3:e9:f9:53:1f:db:b1:24:a4:05:ec:40: 41:2d:bc:bc:27:af:60:72:1d:fa:f9:40:4a:c6:66:8f:4c:05: e3:a2:22:a9:2c:6d:4d:85:8b:c7:4d:04:5b:f4:a5:1a:ed:8d: 28:76:32:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUxMTA0MjAxMjI3WhcNMjUxMTExMjAxMjI3WjAYMRYwFAYD VQQDEw02OTBhNWUyYy01YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7aVIt9z/nO/zXSr6rONug+6zxO7Ue7BBK1WJkvOPXJ/jBEpj1KdJkWAvSvb NYUmpR3VIcmbTDkvMpzptf9jIsqIHlPD/K3O+JvK6ck3plb1oCO8ofExazeIronM 97wYZisALGd1O01AEG2lCljNYXymmIr4C6Aui8BbngQ4g+X6sSk9VcRupq5VwzI5 3yAXZYh++OE10fTcS/lkvjyxLl6/xHa/oxZqEPGUrpqE1dD+fpacmz57T5++kX1H OJIUFVRfn83WRPan1LgIyMjC/9XxUkE0YZjCH1UDCZl4ZYy4ynFpy0wWVF+9Bq6X j1HSiP1aCDFT2flHJppFJEFmIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo0UPkP XuCuWLn8eoPiDaQ1nq86MB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbUGgaCRlSjO0tNf+5S8vRkEyxF/zvLVQ2dd7RiEHvlAjLM7wayMe6 T76MT3GCI9KEnPhSWEwR9vIS2DiyDEGFkFWVR3vwbvEAiHLbuYsqGo5m7m2rHogX gEQqYRL7K82Bwh0MO5/YGGRuEZG9TMV9fidj3kXUNCrYEiaxeh9L1OJs5113Bk/0 tKjCIId4k9RZufpJZrKK3dMk+Fg8A0ELZNz9UNjOe4M+4jVR31/srcBM0S6sDVlo m9M3PqRtn8U0ckkHV9qOTdrv0uzD6flTH9uxJKQF7EBBLby8J69gch36+UBKxmaP TAXjoiKpLG1NhYvHTQRb9KUa7Y0odjKn -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:59 2025 by rpki-client