$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: LRT324gfgHrHgGVRt5GPYmyoUup1daGpLAjfDI4gjEA= Subject key identifier: C0:CA:14:A2:EA:3A:6D:30:41:33:EC:28:98:61:64:5D:AA:2A:3B:89 Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2D96 Signing time: Sun 02 Nov 2025 15:30:27 +0000 Manifest this update: Sun 02 Nov 2025 15:30:26 +0000 Manifest next update: Sun 09 Nov 2025 15:30:26 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: fQrKexEswwNXaOR4piC3SXYYVd1Wm6Z6wNYtc9vnDcA=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: CwjqOoJS53tpi81tzFuwu956lUr2HE8GT6aAkGCmQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11707 (0x2dbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: Nov 2 15:30:26 2025 GMT Not After : Nov 9 15:30:26 2025 GMT Subject: CN=69077912-97fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:c8:3b:60:b6:10:90:01:20:c5:92:77:53: 1c:49:fb:97:0e:20:c3:aa:35:6b:b9:08:db:a6:66: 31:9e:be:7e:7a:d9:af:81:79:2c:b9:7c:f6:ed:8a: 2b:02:9d:66:d5:7a:da:ef:ed:fd:66:5e:39:e4:4e: 85:6c:68:01:f1:32:f7:61:8b:b4:b6:84:62:0e:18: ae:05:ce:27:74:09:48:72:15:dc:90:48:ab:56:47: 67:a2:bf:4b:97:e5:de:32:23:1e:b4:7e:1f:f6:93: 61:29:a0:6f:d9:a7:9f:ac:49:18:7e:88:b6:22:aa: 2b:85:f7:3b:4a:55:72:6b:38:1e:28:d7:29:78:56: 49:66:4f:40:3a:bf:bc:59:36:53:a2:94:14:47:43: 67:c4:f7:75:a8:25:ee:2e:1e:b1:2b:55:a2:fb:a1: dc:ec:1a:3e:8c:39:1b:95:d9:b6:a3:d4:57:f6:a6: 98:f9:3f:12:81:80:ef:de:58:5b:73:bc:99:f0:cd: 37:75:cd:a6:59:1e:89:c2:27:34:f9:da:75:58:f5: 4b:57:71:98:b9:41:22:69:69:60:6c:6f:86:f2:b9: d3:fa:a0:32:11:31:08:5a:c3:af:86:44:b0:c8:82: 3f:40:3f:dc:f7:71:06:83:36:89:5d:47:2c:3e:60: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:14:A2:EA:3A:6D:30:41:33:EC:28:98:61:64:5D:AA:2A:3B:89 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:15:61:d2:06:63:ab:00:cc:a3:fc:a9:45:19:1a:c0:c0:54: 13:6c:fe:2f:2e:e9:69:6e:b8:91:fd:19:b8:be:0f:cf:f8:d6: 3e:bc:ef:02:91:c9:0b:64:29:8a:cf:f9:38:2b:a4:e9:f4:b5: 80:27:07:48:5e:08:fa:6c:7f:fb:8e:27:4f:91:af:7c:dd:c2: 3d:2c:53:cd:09:4a:18:4d:5b:92:32:79:a3:2f:8e:7d:b3:17: c2:20:87:14:09:61:3d:3e:a3:6b:ae:bc:d7:26:a3:5d:a1:66: 6d:27:93:20:aa:50:a9:a7:50:f0:26:8d:87:93:9f:2a:39:5f: 0e:94:72:0e:25:8b:26:85:3d:0e:40:e2:95:21:61:5f:6a:ab: f1:5d:8e:4c:cb:61:54:d4:5a:9e:58:ca:50:d8:d0:05:62:95: 75:3f:7a:c3:18:2e:17:35:17:07:1e:2a:5b:80:51:1b:05:e3: 03:db:ba:09:5f:ca:e4:21:3e:27:f2:bc:dd:1d:42:e4:dc:7f: b3:07:91:6c:05:8e:15:5d:e6:ad:8e:c7:3b:a9:31:58:0a:f1: e3:6a:dc:ae:da:d0:f6:4e:bb:bc:84:97:6f:ec:f1:49:b7:3f: 56:40:e9:02:f0:4a:5d:ff:96:b0:0d:12:11:8c:c1:5c:3a:cd: a2:dc:a0:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjUxMTAyMTUzMDI2WhcNMjUxMTA5MTUzMDI2WjAYMRYwFAYD VQQDEw02OTA3NzkxMi05N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeHIO2C2EJABIMWSd1McSfuXDiDDqjVruQjbpmYxnr5+etmvgXksuXz27Yor Ap1m1Xra7+39Zl455E6FbGgB8TL3YYu0toRiDhiuBc4ndAlIchXckEirVkdnor9L l+XeMiMetH4f9pNhKaBv2aefrEkYfoi2Iqorhfc7SlVyazgeKNcpeFZJZk9AOr+8 WTZTopQUR0NnxPd1qCXuLh6xK1Wi+6Hc7Bo+jDkbldm2o9RX9qaY+T8SgYDv3lhb c7yZ8M03dc2mWR6Jwic0+dp1WPVLV3GYuUEiaWlgbG+G8rnT+qAyETEIWsOvhkSw yII/QD/c93EGgzaJXUcsPmDgHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDKFKLq Om0wQTPsKJhhZF2qKjuJMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvFWHSBmOrAMyj/KlFGRrAwFQTbP4vLulpbriR/Rm4vg/P+NY+vO8C kckLZCmKz/k4K6Tp9LWAJwdIXgj6bH/7jidPka983cI9LFPNCUoYTVuSMnmjL459 sxfCIIcUCWE9PqNrrrzXJqNdoWZtJ5MgqlCpp1DwJo2Hk58qOV8OlHIOJYsmhT0O QOKVIWFfaqvxXY5My2FU1FqeWMpQ2NAFYpV1P3rDGC4XNRcHHipbgFEbBeMD27oJ X8rkIT4n8rzdHULk3H+zB5FsBY4VXeatjsc7qTFYCvHjatyu2tD2Tru8hJdv7PFJ tz9WQOkC8Epd/5awDRIRjMFcOs2i3KDr -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:38 2025 by rpki-client