$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft File: t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json) Hash identifier: Jz3Az+VsKGYw6Qpuln2O2uTGiK9Z8GYt4b/6itBgBtU= Subject key identifier: 48:84:2A:B6:3C:51:1E:5B:D8:49:07:02:CE:D9:70:7B:82:27:85:BF Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Certificate serial: 1B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft Manifest number: 1B2C Signing time: Tue 04 Nov 2025 16:23:45 +0000 Manifest this update: Tue 04 Nov 2025 16:23:45 +0000 Manifest next update: Tue 11 Nov 2025 16:23:45 +0000 Files and hashes: 1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: z8K8ihuKuYxiO3gkNyDKsFTkbfqYRu7zEwFa9NrOvKQ=) 2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: 2FdeFk6BkACA2x84QQhSx1d4f7hfVmpEG3T9lZ0KKs8=) 3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0=) 4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA=) 5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: EBfpSajs+p8kmDGMcsROIkdAjLRuCAc9bxp8aA0ImwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7030 (0x1b76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Validity Not Before: Nov 4 16:23:45 2025 GMT Not After : Nov 11 16:23:45 2025 GMT Subject: CN=690a2891-368e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:51:d5:b4:6d:46:ff:f8:8a:11:de:b5:dd: 6d:00:a5:0d:ac:fa:ea:fb:b2:e4:ab:93:a2:d5:98: fd:27:25:7a:77:c3:6a:cc:f4:40:7c:b9:dc:0f:e8: d3:65:fc:23:14:2d:f7:63:18:9c:47:4b:08:c2:3f: ff:a1:06:77:8e:99:9e:a8:72:15:43:0a:35:3d:90: 2c:15:d0:9f:4f:4c:92:1a:b7:65:3b:82:ee:60:56: e5:3f:e0:fc:3c:c2:03:c4:b0:c4:63:89:8a:a3:ad: e4:d0:83:b2:a7:14:ad:39:de:5c:d7:c4:56:73:b8: f3:32:15:a8:9e:6d:f2:78:40:11:be:08:46:a1:17: a0:e1:ef:80:aa:6f:f0:b2:6a:0d:6c:41:01:55:d4: 17:c3:62:da:2b:e4:01:35:2d:31:73:3d:93:b7:df: f9:6f:2e:75:a0:b3:b1:ee:df:43:00:16:f1:5a:de: 27:c2:99:24:82:d1:21:0f:b4:58:1c:d1:33:a5:3f: 13:dd:f4:11:14:70:62:4b:c0:a0:c3:1d:03:f1:22: bb:cd:53:ce:ab:9f:20:d7:3d:bb:c2:7e:10:62:15: ff:90:8f:01:ab:2b:d5:6f:e2:d4:8c:48:fe:e7:2c: 2f:7f:6c:e7:93:9a:77:4c:b9:19:5e:35:ec:58:53: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:84:2A:B6:3C:51:1E:5B:D8:49:07:02:CE:D9:70:7B:82:27:85:BF X509v3 Authority Key Identifier: keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0c:23:04:01:c7:74:85:14:65:f1:96:19:22:84:cb:65:75: 4f:fd:ac:a6:a5:5d:1c:ef:34:b4:0d:2b:e4:aa:ac:7f:23:cd: 11:bb:2b:db:6f:11:9c:7b:0e:5f:de:2c:3f:cd:87:9d:b8:89: 2b:b2:d6:69:01:38:24:1a:e5:c1:87:fd:0d:a6:66:9e:61:c6: 8f:0b:0f:39:e5:b6:f3:d6:9c:7b:42:4f:eb:e3:5a:f1:08:18: 81:2c:43:25:31:9c:7d:fe:42:76:6d:1f:19:f5:9c:6c:d8:27: 27:f2:9f:0c:15:30:93:23:93:24:f6:31:5f:a4:36:7d:93:fb: 77:ed:6d:a0:27:32:1c:f6:c2:86:78:68:ce:86:2c:69:f5:c1: 37:ea:82:33:f9:48:1b:2a:4c:2a:89:74:a5:fe:71:fc:a0:10: f7:8a:25:68:30:54:9b:86:97:13:ac:78:60:71:b1:b6:6c:fb: 2b:35:07:20:b5:9d:42:87:67:27:9c:c4:e8:44:cd:54:0c:83: 3d:7d:b4:95:21:0d:ba:95:7b:d2:01:70:b7:93:9b:66:ed:86: ba:f5:c8:e8:eb:15:5f:e8:23:73:5c:bc:89:9a:c4:32:59:71: 65:32:ca:9e:8e:49:c9:39:8b:fc:49:ed:ab:29:f3:47:a7:b9: 09:8c:25:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2 ODYxNjc4RkQwHhcNMjUxMTA0MTYyMzQ1WhcNMjUxMTExMTYyMzQ1WjAYMRYwFAYD VQQDEw02OTBhMjg5MS0zNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XRR1bRtRv/4ihHetd1tAKUNrPrq+7Lkq5Oi1Zj9JyV6d8NqzPRAfLncD+jT ZfwjFC33YxicR0sIwj//oQZ3jpmeqHIVQwo1PZAsFdCfT0ySGrdlO4LuYFblP+D8 PMIDxLDEY4mKo63k0IOypxStOd5c18RWc7jzMhWonm3yeEARvghGoReg4e+Aqm/w smoNbEEBVdQXw2LaK+QBNS0xcz2Tt9/5by51oLOx7t9DABbxWt4nwpkkgtEhD7RY HNEzpT8T3fQRFHBiS8Cgwx0D8SK7zVPOq58g1z27wn4QYhX/kI8BqyvVb+LUjEj+ 5ywvf2znk5p3TLkZXjXsWFNf2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiEKrY8 UR5b2EkHAs7ZcHuCJ4W/MB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA4My9BMENGMDU5QTJFNjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRX U09ZenZNUWcwNzFvWVdlUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlDCMEAcd0hRRl8ZYZIoTLZXVP/aympV0c7zS0DSvkqqx/I80Ruyvb bxGcew5f3iw/zYeduIkrstZpATgkGuXBh/0NpmaeYcaPCw855bbz1px7Qk/r41rx CBiBLEMlMZx9/kJ2bR8Z9Zxs2Ccn8p8MFTCTI5Mk9jFfpDZ9k/t37W2gJzIc9sKG eGjOhixp9cE36oIz+UgbKkwqiXSl/nH8oBD3iiVoMFSbhpcTrHhgcbG2bPsrNQcg tZ1Ch2cnnMToRM1UDIM9fbSVIQ26lXvSAXC3k5tm7Ya69cjo6xVf6CNzXLyJmsQy WXFlMsqejknJOYv8Se2rKfNHp7kJjCVZ -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:55 2025 by rpki-client