$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json) Hash identifier: PsZ9MnQo7Cci9X5NRUXmNY793Zq+Jm7Z0LlhlUWNMdg= Subject key identifier: 26:EA:78:B2:BC:FD:C1:89:39:D2:00:21:82:DA:7B:87:26:1D:39:1F Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft Manifest number: 082C Signing time: Sun 02 Nov 2025 20:46:33 +0000 Manifest this update: Sun 02 Nov 2025 20:46:33 +0000 Manifest next update: Sun 09 Nov 2025 20:46:33 +0000 Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: v+AcU797eai5ki9yt32JY5VOACI/4ug8w4GZhgjuJBc=) 2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: OLDN/ETZEgU2Ia5DmtJOCvYxeDvefwm7Ut9VsY92Tg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Validity Not Before: Nov 2 20:46:33 2025 GMT Not After : Nov 9 20:46:33 2025 GMT Subject: CN=6907c329-34bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:30:9c:2f:32:3e:38:2a:49:df:6c:32:c5: c7:ad:53:28:6c:87:ab:ff:72:12:86:52:f8:7a:6c: 5e:d6:b2:14:f5:6b:cb:0a:19:04:33:b9:09:b7:4d: d0:21:9b:fc:87:bd:41:f0:30:9f:b0:05:bc:5d:c4: 14:b8:24:fc:c8:04:c5:80:0d:52:cc:5a:87:5a:5e: c8:54:9f:4f:1c:52:4f:d0:ec:ec:af:97:bf:cf:7c: c9:33:bd:56:e6:72:b0:38:77:60:f1:85:ce:e9:2d: 83:d7:d9:56:75:97:26:19:4b:26:c0:e3:b5:27:00: 4e:30:46:50:6b:74:30:34:90:ca:1a:7d:db:c9:0d: b5:3a:ec:8c:4d:b3:73:ec:30:a0:4e:1c:df:b3:06: 07:ec:49:08:23:21:f7:6b:8e:b2:73:bf:81:37:dd: 9c:a1:f3:d7:e1:bd:ba:1b:56:29:2b:e4:94:e4:b7: ae:1d:f8:a4:91:f3:59:a4:6a:a6:fd:25:cb:c8:9e: af:fa:f3:2c:c6:69:51:01:36:0d:46:5c:1d:f0:ce: 06:64:f5:f1:d5:6d:2d:4f:b2:51:b8:5b:14:c0:25: 71:02:14:cc:69:13:9c:d9:7a:e1:f8:f2:82:0d:30: fd:b6:5d:d4:28:85:61:37:2a:d1:44:93:d3:ea:91: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:78:B2:BC:FD:C1:89:39:D2:00:21:82:DA:7B:87:26:1D:39:1F X509v3 Authority Key Identifier: keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4c:c1:64:c3:c7:ca:eb:cc:68:fe:e2:1c:d5:5b:e9:6d:14: 26:cc:3a:34:4f:86:ca:36:74:b4:70:d9:53:cd:2d:24:12:c9: 58:4e:f5:a4:11:31:b6:80:8a:75:bb:ed:2c:7f:8a:00:4b:a6: 25:d6:e5:57:39:f2:ca:99:3c:8d:70:90:5d:07:4c:c1:c7:21: ac:31:10:4b:6b:b3:ce:bd:c3:77:df:6e:71:74:1e:f3:a1:bb: fb:c2:95:d1:9b:d0:d7:01:58:70:75:4e:1a:c5:a1:36:4f:14: 61:c9:b5:f9:44:c0:59:45:c5:4f:4a:48:56:28:a1:2c:8c:71: 8a:ff:ef:23:6c:53:64:af:db:65:4f:c3:c3:8d:68:1a:6c:eb: 8d:0e:67:cb:9b:41:6d:95:c5:cd:e9:4b:c2:40:79:46:b1:08: 2d:e8:c3:9e:b7:bb:eb:c0:d4:06:c0:86:45:b4:3a:dc:82:fb: 66:2a:ba:17:4c:12:84:7b:16:50:14:21:3b:1a:83:0b:3f:16: ae:3c:44:3d:5b:6d:9c:7a:3f:48:68:a9:5c:fa:5f:ff:10:9f: 98:63:d1:74:11:7d:3a:b4:8d:93:a3:fb:aa:19:8c:ec:be:52: 0c:aa:44:a6:ff:64:e0:17:81:35:8e:84:ef:10:d7:96:d3:de: 43:80:e3:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw Q0FGNTU1QkEwHhcNMjUxMTAyMjA0NjMzWhcNMjUxMTA5MjA0NjMzWjAYMRYwFAYD VQQDEw02OTA3YzMyOS0zNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVswnC8yPjgqSd9sMsXHrVMobIer/3IShlL4emxe1rIU9WvLChkEM7kJt03Q IZv8h71B8DCfsAW8XcQUuCT8yATFgA1SzFqHWl7IVJ9PHFJP0Ozsr5e/z3zJM71W 5nKwOHdg8YXO6S2D19lWdZcmGUsmwOO1JwBOMEZQa3QwNJDKGn3byQ21OuyMTbNz 7DCgThzfswYH7EkIIyH3a46yc7+BN92cofPX4b26G1YpK+SU5LeuHfikkfNZpGqm /SXLyJ6v+vMsxmlRATYNRlwd8M4GZPXx1W0tT7JRuFsUwCVxAhTMaROc2Xrh+PKC DTD9tl3UKIVhNyrRRJPT6pGTNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbqeLK8 /cGJOdIAIYLae4cmHTkfMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCATMFkw8fK68xo/uIc1VvpbRQmzDo0T4bKNnS0cNlTzS0kEslYTvWk ETG2gIp1u+0sf4oAS6Yl1uVXOfLKmTyNcJBdB0zBxyGsMRBLa7POvcN3325xdB7z obv7wpXRm9DXAVhwdU4axaE2TxRhybX5RMBZRcVPSkhWKKEsjHGK/+8jbFNkr9tl T8PDjWgabOuNDmfLm0FtlcXN6UvCQHlGsQgt6MOet7vrwNQGwIZFtDrcgvtmKroX TBKEexZQFCE7GoMLPxauPEQ9W22cej9IaKlc+l//EJ+YY9F0EX06tI2To/uqGYzs vlIMqkSm/2TgF4E1joTvENeW095DgOMH -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:41 2025 by rpki-client