$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: ocFtx+VOkQf6XbHMts7fyodo/dVDAnkXwtz/ge9AH9c= Subject key identifier: 81:6D:50:08:5E:93:72:3B:C5:27:49:BF:05:7E:B0:DF:D6:3A:94:C8 Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0E07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0DFF Signing time: Sun 02 Nov 2025 17:51:33 +0000 Manifest this update: Sun 02 Nov 2025 17:51:32 +0000 Manifest next update: Sun 09 Nov 2025 17:51:32 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: PiKWUqIo04tDOyjOdA26YRivddyhuVhfvn2E17RO4ms=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3591 (0xe07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Nov 2 17:51:32 2025 GMT Not After : Nov 9 17:51:32 2025 GMT Subject: CN=69079a24-f1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:d6:6e:bc:57:e4:a6:3b:1a:2c:2e:b9:4e: 6a:c3:7e:8a:25:6d:8f:27:3b:b8:02:52:f9:36:cf: 3c:0e:0c:ee:77:b1:bc:84:89:46:a5:52:ca:48:c9: 62:4f:d6:75:2c:9d:d4:9d:a4:8f:64:7c:31:7e:e9: c7:00:51:ea:44:16:ae:38:ef:a5:30:43:59:bf:a2: 98:16:42:30:2d:89:58:33:91:c8:ad:ba:56:d0:63: 87:a9:66:fa:a3:5d:78:a3:df:e6:bd:f4:7d:59:5f: 23:9a:d7:57:2b:c5:61:4d:c3:3d:42:78:15:52:25: 46:41:d7:73:79:5e:50:79:b7:3d:04:a8:65:85:4f: 94:c2:d9:bf:fb:48:cd:d6:3f:2b:05:8b:e8:04:e3: 2c:2e:44:f7:cd:d7:35:3f:4d:a0:c5:39:75:bf:a3: 10:3b:00:6b:53:df:f8:77:0e:0a:6d:e6:0c:6d:4b: cf:d7:c9:1e:73:8d:7c:d5:cd:ea:b2:04:9d:d2:dd: 29:13:fb:33:f1:86:a6:ef:bc:23:e3:13:16:9f:77: 41:8f:dd:da:7a:2d:07:84:6d:99:25:e6:b4:6c:3c: c0:a9:83:5a:a7:a7:e8:21:af:fe:8f:2a:62:4f:f0: 97:5e:cd:10:a4:28:89:37:6b:b5:f2:30:82:0b:2c: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6D:50:08:5E:93:72:3B:C5:27:49:BF:05:7E:B0:DF:D6:3A:94:C8 X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:37:e4:60:c6:f3:5b:a5:3f:9f:85:63:3a:b3:e9:6f:13:41: 1d:ea:a8:96:42:6a:20:79:97:a7:17:10:65:73:5d:cb:93:02: 68:26:36:be:10:27:b1:a9:df:d3:82:fb:a8:5c:e2:34:0d:c2: 06:17:da:76:a7:21:97:2b:a8:85:91:9b:bf:c1:b8:fb:68:0f: 21:90:07:e8:0b:3e:fe:ce:45:d2:03:c8:52:9e:aa:42:00:f7: f6:2a:39:7e:67:ae:de:38:93:10:9c:4a:a5:87:9e:e1:b6:e1: cf:bd:b7:65:37:d2:fb:f1:00:3d:cf:0f:cc:72:70:8b:ad:d4: 3b:8b:75:2a:84:4c:0a:e4:bd:f5:c1:8c:9c:15:43:db:b5:2a: ee:3a:50:4d:53:0e:75:f7:5a:03:85:3a:bf:5d:00:84:72:b8: 82:6b:56:8a:35:c1:c1:24:c8:73:bc:98:18:79:6d:ec:21:05: 40:9c:77:e4:f2:c4:92:ee:a4:bf:70:5f:f5:22:a0:fc:96:47: 74:b1:fc:bd:d3:5b:c4:ab:24:83:bd:1f:93:ec:a2:ee:02:6b: d9:c3:ef:2b:e8:6f:13:e9:35:1e:de:2b:1d:c7:61:9e:dc:18: 9e:f1:cd:09:cc:dc:cb:de:f5:7c:e0:a7:3c:fb:f1:da:0d:14: 4d:a1:3d:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUxMTAyMTc1MTMyWhcNMjUxMTA5MTc1MTMyWjAYMRYwFAYD VQQDEw02OTA3OWEyNC1mMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tzWbrxX5KY7GiwuuU5qw36KJW2PJzu4AlL5Ns88Dgzud7G8hIlGpVLKSMli T9Z1LJ3UnaSPZHwxfunHAFHqRBauOO+lMENZv6KYFkIwLYlYM5HIrbpW0GOHqWb6 o114o9/mvfR9WV8jmtdXK8VhTcM9QngVUiVGQddzeV5Qebc9BKhlhU+Uwtm/+0jN 1j8rBYvoBOMsLkT3zdc1P02gxTl1v6MQOwBrU9/4dw4KbeYMbUvP18kec4181c3q sgSd0t0pE/sz8Yam77wj4xMWn3dBj93aei0HhG2ZJea0bDzAqYNap6foIa/+jypi T/CXXs0QpCiJN2u18jCCCyxihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFtUAhe k3I7xSdJvwV+sN/WOpTIMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzN+RgxvNbpT+fhWM6s+lvE0Ed6qiWQmogeZenFxBlc13LkwJoJja+ ECexqd/TgvuoXOI0DcIGF9p2pyGXK6iFkZu/wbj7aA8hkAfoCz7+zkXSA8hSnqpC APf2Kjl+Z67eOJMQnEqlh57htuHPvbdlN9L78QA9zw/McnCLrdQ7i3UqhEwK5L31 wYycFUPbtSruOlBNUw5191oDhTq/XQCEcriCa1aKNcHBJMhzvJgYeW3sIQVAnHfk 8sSS7qS/cF/1IqD8lkd0sfy901vEqySDvR+T7KLuAmvZw+8r6G8T6TUe3isdx2Ge 3Bie8c0JzNzL3vV84Kc8+/HaDRRNoT2S -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:16 2025 by rpki-client