$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json) Hash identifier: 9Oekb6FhAfTSx4UihZdqbz3BqN66rRRh89Roa4EcFbY= Subject key identifier: 8A:DE:45:BC:0E:8C:1B:D2:83:48:B6:F5:09:C9:A3:3A:C5:A1:F9:2B Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft Manifest number: 085E Signing time: Sun 02 Nov 2025 20:36:11 +0000 Manifest this update: Sun 02 Nov 2025 20:36:11 +0000 Manifest next update: Sun 09 Nov 2025 20:36:11 +0000 Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: CvUR59izXY02FUDV3H7VztBLXcFXTEqZ3RSrJ6xJLeo=) 2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Uilk1jJBfDMGY2sckuokao9InqlSOEodf+Dfn/tc4QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Validity Not Before: Nov 2 20:36:11 2025 GMT Not After : Nov 9 20:36:11 2025 GMT Subject: CN=6907c0bb-fae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:03:59:1a:14:8f:af:4c:e7:68:6c:f1:75: 4b:ab:77:b3:3f:17:cf:d2:58:a5:fd:50:0a:4d:61: df:78:5c:dc:80:90:f5:0b:32:3e:d1:4b:1d:30:d3: 01:79:ff:75:92:9e:10:41:73:a3:26:ad:b3:d3:d4: a7:a1:f6:30:9d:1f:a0:9d:eb:e7:59:32:e4:2f:e7: 7a:e8:90:3d:ed:80:ca:56:fe:ba:03:43:13:b9:95: 42:65:7c:65:e5:23:6c:6b:98:68:d0:0c:18:e1:b5: 97:f8:9e:14:0d:a5:58:b1:04:49:4d:72:99:7f:9f: c2:97:1f:05:6f:4e:b0:4a:3e:0b:dc:b8:71:04:24: 68:d8:0a:5a:0d:52:e6:2d:ff:a2:4a:86:6c:d8:62: e2:db:19:31:4f:ac:54:80:c2:c9:b0:77:1d:1d:1c: 92:d1:52:53:40:27:ae:74:6c:ee:47:6f:1a:75:2a: 4a:b7:c0:06:f9:ad:70:ab:98:6d:f5:e2:0f:ac:be: 94:38:15:83:f2:90:0a:5c:44:6f:ad:39:94:c5:9e: 17:3c:5c:56:45:8a:b3:c0:0b:8b:7e:74:8b:ce:d6: fc:bb:af:cb:57:46:87:ba:73:04:73:29:65:8f:41: 7a:e8:a8:9f:26:b2:3a:b7:b1:f0:1b:01:f9:a3:97: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DE:45:BC:0E:8C:1B:D2:83:48:B6:F5:09:C9:A3:3A:C5:A1:F9:2B X509v3 Authority Key Identifier: keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b5:cd:75:91:62:63:8b:c2:13:fb:68:3d:61:52:6e:8f:a8: eb:7d:0b:69:26:f9:46:67:c8:41:9f:12:48:c4:a1:98:fd:ec: 30:cc:37:96:aa:8d:9b:a4:82:bb:e7:10:8c:bf:90:82:41:39: f8:37:2b:46:9e:38:f5:1c:3f:7d:4e:a8:64:87:fc:6a:e3:2a: eb:55:7a:79:92:a2:16:99:af:35:fa:00:5b:9b:f5:8d:58:3b: c1:d2:80:af:52:1f:57:e5:38:48:76:ba:c8:5d:6e:39:df:a7: 55:cc:ef:0c:63:3f:37:35:0b:e0:a4:18:67:f3:90:21:18:9b: f5:9e:90:ab:11:44:40:fd:cd:88:8d:77:5d:4e:32:47:0e:f8: bf:5e:77:66:d5:23:59:90:38:67:9f:97:cd:1b:91:8b:79:7c: 55:a2:93:69:51:b7:99:2d:bb:a7:06:3d:bd:c3:5a:83:12:32: 4b:08:27:8f:07:7a:18:72:e2:e3:ff:82:e6:2f:84:4c:16:91: 40:a8:58:77:86:5b:0c:78:89:ca:c4:63:04:47:af:11:de:51: 03:6f:e0:0c:fa:4c:b2:2a:2e:5a:6e:88:e0:f6:00:51:d8:a7: 9a:92:69:81:5e:b1:a4:50:c5:29:18:f3:d0:6f:e9:2c:40:27: eb:39:bb:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ3NTAxMTAvBgNVBAUTKDY4NzYzRTkyQTJDMTc4NTMxNjc1NzY2NTExMDNGODFG NTlBQ0RDMUEwHhcNMjUxMTAyMjAzNjExWhcNMjUxMTA5MjAzNjExWjAYMRYwFAYD VQQDEw02OTA3YzBiYi1mYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/0DWRoUj69M52hs8XVLq3ezPxfP0lil/VAKTWHfeFzcgJD1CzI+0UsdMNMB ef91kp4QQXOjJq2z09SnofYwnR+gnevnWTLkL+d66JA97YDKVv66A0MTuZVCZXxl 5SNsa5ho0AwY4bWX+J4UDaVYsQRJTXKZf5/Clx8Fb06wSj4L3LhxBCRo2ApaDVLm Lf+iSoZs2GLi2xkxT6xUgMLJsHcdHRyS0VJTQCeudGzuR28adSpKt8AG+a1wq5ht 9eIPrL6UOBWD8pAKXERvrTmUxZ4XPFxWRYqzwAuLfnSLztb8u6/LV0aHunMEcyll j0F66KifJrI6t7HwGwH5o5dpGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIreRbwO jBvSg0i29QnJozrFofkrMB8GA1UdIwQYMBaAFGh2PpKiwXhTFnV2ZRED+B9ZrNwa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDc1MC85MEQ1RUM1QURB QkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVGTVdkWFpsRVFQNEgxbXMz Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIWS1rcUxCZUZNV2RYWmxFUVA0SDFtczNCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDc1MC85MEQ1RUM1QURBQkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVG TVdkWFpsRVFQNEgxbXMzQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1tc11kWJji8IT+2g9YVJuj6jrfQtpJvlGZ8hBnxJIxKGY/ewwzDeW qo2bpIK75xCMv5CCQTn4NytGnjj1HD99Tqhkh/xq4yrrVXp5kqIWma81+gBbm/WN WDvB0oCvUh9X5ThIdrrIXW4536dVzO8MYz83NQvgpBhn85AhGJv1npCrEURA/c2I jXddTjJHDvi/Xndm1SNZkDhnn5fNG5GLeXxVopNpUbeZLbunBj29w1qDEjJLCCeP B3oYcuLj/4LmL4RMFpFAqFh3hlsMeInKxGMER68R3lEDb+AM+kyyKi5abojg9gBR 2KeakmmBXrGkUMUpGPPQb+ksQCfrObtG -----END CERTIFICATE-----Generated at Tue Nov 4 01:08:19 2025 by rpki-client