$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json) Hash identifier: 7E4qPkYAyQ78rnkQOtvwuvCppkx1A1W4QSmQ/aZMfso= Subject key identifier: 92:E2:3D:94:54:9E:5F:8F:7C:35:1B:04:4C:93:BB:32:48:CB:10:58 Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Certificate serial: 117C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft Manifest number: 0F4E Signing time: Tue 04 Nov 2025 18:09:59 +0000 Manifest this update: Tue 04 Nov 2025 18:09:59 +0000 Manifest next update: Tue 11 Nov 2025 18:09:59 +0000 Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: 9VWPt9zywyadwumYMnvATl+PIKy9NAPkqcI0AAYOiAw=) 2: C86D24E8AE5811F0B124FE4CC4F9AE02.roa (hash: QZXFWljY5GCj8HSHEPj2lchbGWCr50EzJeHd0XyLG9M=) 3: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: b8s2ThBnbSgoYAd42Ay1GF1XUjihNTCPa3X7+yVmdCk=) 4: F13EB484826311F092F0144AC4F9AE02.roa (hash: CO87lXYWPbNe6K7Erg9JOzsLmDHDJMj3+ca4f0k/Ah8=) 5: 161D8022A24611EF966F6286C4F9AE02.roa (hash: TBlZiuTwGUAL/S4SWJ+uMXyA9TxQ/N4TkgdjoflSU1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4476 (0x117c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Validity Not Before: Nov 4 18:09:59 2025 GMT Not After : Nov 11 18:09:59 2025 GMT Subject: CN=690a4177-7688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:7c:cc:b3:b7:22:54:8e:4b:76:40:d6:b3: 62:42:d0:fe:9f:50:a8:ea:d0:4a:66:88:ff:87:87: 00:a0:87:eb:c7:05:6b:d2:16:41:9e:5a:89:a0:f6: bc:3a:38:96:5c:ff:ec:c6:82:03:16:02:f0:15:2a: 5f:cc:38:1a:ec:77:2a:9c:c0:c9:da:85:f7:25:57: 66:d3:f3:3c:72:e0:76:24:e0:e7:e6:dd:b4:02:f7: 96:68:ee:d9:cb:c2:04:75:2b:80:74:1b:d9:f6:f9: f6:4f:80:40:cd:6d:6d:3c:61:c7:92:9b:4c:bd:19: f0:21:4c:ef:26:c6:80:b1:e6:35:6e:dc:ab:68:ba: 9f:6b:ca:5d:16:14:4a:ee:d8:bb:c5:e2:21:e1:9a: be:0b:06:94:70:1d:ae:31:31:78:01:86:01:f1:b4: 35:61:af:44:2f:53:a2:4b:d3:63:74:06:88:78:b8: 26:8d:d1:9d:dd:7b:3e:8e:49:27:5f:a3:53:43:6a: 04:e7:ee:c0:7d:a5:9d:b4:33:47:00:f4:0b:72:c9: 67:98:3c:55:fb:74:20:8d:4f:f9:2f:7a:9d:aa:be: d5:1b:03:11:52:60:0b:07:aa:66:8a:0a:87:e7:9d: 8f:0a:6a:32:aa:bf:aa:cc:a4:8b:72:a9:af:75:63: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E2:3D:94:54:9E:5F:8F:7C:35:1B:04:4C:93:BB:32:48:CB:10:58 X509v3 Authority Key Identifier: keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1b:89:1f:f6:40:3d:da:e0:8e:8f:3c:a1:87:e7:61:ce:d6: 13:ff:ea:15:7e:8b:f8:db:ad:cd:49:f6:a9:4d:89:2e:61:f9: 03:dd:a1:91:1f:da:ab:7e:5e:6e:9e:d0:7c:eb:ae:73:1f:6c: fd:d3:c2:ac:32:85:d6:97:55:00:f6:d9:60:91:0a:1e:e1:e6: d8:bd:05:ab:e8:4f:ec:52:fb:c2:43:f0:fa:54:0b:f8:01:62: 49:44:1c:48:cc:df:e3:70:bb:c3:fd:e7:aa:8a:08:ad:6d:e4: ed:cc:a9:68:ba:0e:d8:35:a7:c2:fb:36:d4:11:5d:5a:ef:a3: 94:e4:f1:d8:be:8c:ed:d2:d6:dc:b2:f7:5e:9a:db:08:ab:b9: 95:63:de:69:5d:e6:a7:b4:14:4a:c4:1c:7b:51:de:f7:8d:1c: ea:cd:cb:fd:18:35:89:ea:8f:bf:e7:63:e3:b7:8d:46:d5:fc: 57:d8:f3:48:a3:ff:5c:70:95:29:bb:15:9b:b9:21:59:a7:01: a0:93:26:1c:b6:a0:a4:38:7a:aa:52:43:b5:88:80:6f:73:fd: 34:c7:47:36:ca:19:40:26:ed:ec:97:e2:73:c7:f6:c2:37:63: 54:40:e8:0f:fb:e8:b2:5c:b1:5d:44:2c:8a:46:0b:07:0f:39: 38:a4:50:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxNTYxMTAvBgNVBAUTKDAzNDZCNjM0RjI2M0Y2MzY4NDIzOURCNkRGNjRCQkJB Q0RGN0Y4QTQwHhcNMjUxMTA0MTgwOTU5WhcNMjUxMTExMTgwOTU5WjAYMRYwFAYD VQQDEw02OTBhNDE3Ny03Njg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl18zLO3IlSOS3ZA1rNiQtD+n1Co6tBKZoj/h4cAoIfrxwVr0hZBnlqJoPa8 OjiWXP/sxoIDFgLwFSpfzDga7HcqnMDJ2oX3JVdm0/M8cuB2JODn5t20AveWaO7Z y8IEdSuAdBvZ9vn2T4BAzW1tPGHHkptMvRnwIUzvJsaAseY1btyraLqfa8pdFhRK 7ti7xeIh4Zq+CwaUcB2uMTF4AYYB8bQ1Ya9EL1OiS9NjdAaIeLgmjdGd3Xs+jkkn X6NTQ2oE5+7AfaWdtDNHAPQLcslnmDxV+3QgjU/5L3qdqr7VGwMRUmALB6pmigqH 552PCmoyqr+qzKSLcqmvdWP03QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLiPZRU nl+PfDUbBEyTuzJIyxBYMB8GA1UdIwQYMBaAFANGtjTyY/Y2hCOdtt9ku7rN9/ik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzE1Ni9COUYwODQ0Q0Yy M0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlqYUVJNTIyMzJTN3VzMzMt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwYTJOUEpqOWphRUk1MjIzMlM3dXMzMy1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzE1Ni9COUYwODQ0Q0YyM0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlq YUVJNTIyMzJTN3VzMzMtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCG4kf9kA92uCOjzyhh+dhztYT/+oVfov4263NSfapTYkuYfkD3aGR H9qrfl5untB8665zH2z908KsMoXWl1UA9tlgkQoe4ebYvQWr6E/sUvvCQ/D6VAv4 AWJJRBxIzN/jcLvD/eeqigitbeTtzKloug7YNafC+zbUEV1a76OU5PHYvozt0tbc svdemtsIq7mVY95pXeantBRKxBx7Ud73jRzqzcv9GDWJ6o+/52Pjt41G1fxX2PNI o/9ccJUpuxWbuSFZpwGgkyYctqCkOHqqUkO1iIBvc/00x0c2yhlAJu3sl+Jzx/bC N2NUQOgP++iyXLFdRCyKRgsHDzk4pFDw -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:17 2025 by rpki-client