$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json) Hash identifier: I7MNxAiVKJb+Fa/eT4V2OFNIK7AvjOmTJoOU52iJ2dI= Subject key identifier: 7E:94:F7:E5:36:D3:DE:CE:8D:D7:70:AE:75:C5:17:DE:60:1E:99:28 Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft Manifest number: 0500 Signing time: Tue 04 Nov 2025 23:45:02 +0000 Manifest this update: Tue 04 Nov 2025 23:45:02 +0000 Manifest next update: Tue 11 Nov 2025 23:45:02 +0000 Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: lkfWATSm42WnSldpNno7+eH5x/PvkOaIsepT2ugrrb8=) 2: 2110795ED38E11EDADA86381C4F9AE02.roa (hash: kfgv/CCm5KsfUw5mtsQvw5sXTiV/YHp3OtA6KI8aNkw=) 3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: 9tJ/pt8L/gxVmpVNxOtZ9pIC/aw1tdXK8msH8pvZQPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: Nov 4 23:45:02 2025 GMT Not After : Nov 11 23:45:02 2025 GMT Subject: CN=690a8ffe-6496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:7a:ef:a9:a6:21:d7:71:e8:99:4c:e1:db: 0e:60:ed:4f:de:cf:69:98:c9:7a:0f:a5:33:95:42: 79:92:84:a4:71:9d:75:30:6f:ae:32:be:51:9c:a0: 6f:36:3c:4c:7a:a2:98:9b:3a:9b:23:8d:fa:bb:d6: 0c:5e:64:d2:96:e0:9f:85:29:13:20:ef:d3:37:8f: 65:65:88:8e:20:cb:3e:2a:ac:d5:8a:8f:c5:57:3e: e0:f6:e2:11:ad:66:a5:3f:82:3b:d5:46:7f:c8:d4: 1a:84:4a:ea:36:b6:59:39:7b:23:0d:fc:01:72:ba: bc:9e:d4:42:6b:ae:62:e9:49:53:e6:48:4f:71:0e: df:5d:4c:68:6c:23:c9:a3:ef:b1:9c:64:e8:9c:af: 4b:5a:bd:a2:ac:05:64:f9:31:04:d2:e0:43:8e:28: 4a:62:7f:3a:d5:90:e2:5c:70:8f:f7:1f:d0:81:e8: 27:2d:00:5a:78:d3:7e:70:0e:7f:66:90:94:b1:58: 9d:79:9e:4e:b4:93:59:b3:2b:9b:8b:cf:37:0d:0a: 0b:b0:d9:c4:3b:b6:38:55:67:42:bb:30:b9:a5:dd: 0a:69:69:78:b2:82:fd:a0:c2:89:85:b1:4a:c6:c1: 09:ad:5e:6c:01:21:2c:c1:58:f0:1c:8b:96:bd:d1: 00:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:94:F7:E5:36:D3:DE:CE:8D:D7:70:AE:75:C5:17:DE:60:1E:99:28 X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b8:5b:af:b3:a7:d5:93:0d:7a:ff:a7:11:3f:7a:16:33:38: 39:b9:55:f3:bd:b1:50:e4:3f:1d:1e:86:0a:b2:9c:fa:b7:33: 14:ef:3f:f8:a2:61:90:a6:c6:df:fb:f0:f7:33:99:de:30:83: 47:fc:24:6d:99:a5:b9:05:91:56:59:5c:33:8e:74:30:cf:34: b4:0e:4a:57:6a:1d:42:3a:c8:22:f7:cb:28:1e:48:a0:64:17: 8f:2d:e9:57:28:d8:fc:66:80:29:88:51:73:39:28:2a:bd:ad: 5a:a6:1d:c7:f8:29:7e:3b:ba:99:99:d7:fc:a8:64:2d:de:07: 01:a1:87:60:0a:97:16:60:94:96:73:c8:09:4f:6f:3c:af:c4: 69:0e:1a:b2:f3:55:11:ff:e4:42:c0:e2:6f:bb:85:df:d6:65: 2f:eb:c4:f0:5f:54:05:e2:5e:e2:f3:29:7c:77:f7:34:ca:fd: d2:2a:be:e8:a6:dc:9d:6f:3c:73:a5:30:d5:a4:42:13:76:63: 17:25:bd:d8:30:e5:c8:e0:12:2a:fd:a3:a8:9c:35:8f:77:5c: 12:68:4b:15:99:27:0a:f4:49:08:26:f4:f8:df:5a:51:d0:5f: a7:5d:7f:5c:21:af:84:97:42:17:40:17:76:bd:94:a9:84:fc: 9d:15:37:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjUxMTA0MjM0NTAyWhcNMjUxMTExMjM0NTAyWjAYMRYwFAYD VQQDEw02OTBhOGZmZS02NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q1676mmIddx6JlM4dsOYO1P3s9pmMl6D6UzlUJ5koSkcZ11MG+uMr5RnKBv NjxMeqKYmzqbI436u9YMXmTSluCfhSkTIO/TN49lZYiOIMs+KqzVio/FVz7g9uIR rWalP4I71UZ/yNQahErqNrZZOXsjDfwBcrq8ntRCa65i6UlT5khPcQ7fXUxobCPJ o++xnGTonK9LWr2irAVk+TEE0uBDjihKYn861ZDiXHCP9x/QgegnLQBaeNN+cA5/ ZpCUsVideZ5OtJNZsyubi883DQoLsNnEO7Y4VWdCuzC5pd0KaWl4soL9oMKJhbFK xsEJrV5sASEswVjwHIuWvdEAbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6U9+U2 097OjddwrnXFF95gHpkoMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf MFhXLUF2U1VsbWlpRkRjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGuFuvs6fVkw16/6cRP3oWMzg5uVXzvbFQ5D8dHoYKspz6tzMU7z/4 omGQpsbf+/D3M5neMINH/CRtmaW5BZFWWVwzjnQwzzS0DkpXah1COsgi98soHkig ZBePLelXKNj8ZoApiFFzOSgqva1aph3H+Cl+O7qZmdf8qGQt3gcBoYdgCpcWYJSW c8gJT288r8RpDhqy81UR/+RCwOJvu4Xf1mUv68TwX1QF4l7i8yl8d/c0yv3SKr7o ptydbzxzpTDVpEITdmMXJb3YMOXI4BIq/aOonDWPd1wSaEsVmScK9EkIJvT431pR 0F+nXX9cIa+El0IXQBd2vZSphPydFTet -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:32 2025 by rpki-client