$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json) Hash identifier: FYdYI3k+ureWTNgBwgQnyMf8Gp+FOJ4wWtX0iAK2kBM= Subject key identifier: BC:A6:C5:58:B8:DD:E5:5A:FB:C7:40:84:DD:E3:E0:84:5D:A0:52:DA Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft Manifest number: 0153 Signing time: Mon 03 Nov 2025 04:10:49 +0000 Manifest this update: Mon 03 Nov 2025 04:10:48 +0000 Manifest next update: Mon 10 Nov 2025 04:10:48 +0000 Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: JlHQfo+uwX78AM61k3yR7GA8uZOFr1RFrg9sg/HzMeI=) 2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: uxPFrv/qJkuVD9/YdePXL9+7rk2TcQQl1VlKRTfOD/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Nov 3 04:10:48 2025 GMT Not After : Nov 10 04:10:48 2025 GMT Subject: CN=69082b49-c2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:88:6c:3a:51:c7:63:da:25:f3:ff:6b:7b: 27:30:76:12:45:66:11:f4:06:7c:73:09:c9:24:5e: a4:f0:68:86:ec:e5:98:df:19:7b:6b:69:1f:10:cd: f4:80:5a:20:cc:1a:62:af:e0:7a:8a:b4:f5:3c:86: 58:50:b3:11:89:18:51:23:74:46:81:f6:0c:3f:2e: 12:17:d9:76:81:d9:4c:38:85:71:e1:66:bb:1d:13: 36:e3:9f:61:dc:95:d3:a0:96:0b:56:9d:18:ce:ac: 3d:4e:ef:56:92:1b:cf:f3:18:47:cb:65:6b:e8:86: 26:b1:02:78:7f:48:74:ac:5e:df:5f:8c:53:32:f9: 2d:9b:94:94:46:35:01:85:d5:e4:56:4c:5c:b7:8e: 26:d9:fd:07:1e:10:50:22:8d:01:b9:af:ee:48:3c: b8:89:e6:60:03:20:83:11:15:65:73:ec:4b:af:e9: b4:49:53:71:5f:8e:36:4f:2a:ff:5f:f2:8d:53:32: 45:f7:a6:5d:e3:59:a6:e2:7c:12:24:9b:1b:5b:5b: 5d:07:a5:37:76:3e:21:94:4c:3b:be:d2:05:a5:b4: fd:8a:53:62:d0:f2:c7:73:bf:8d:1c:ec:10:3f:d1: 4a:9c:93:80:d9:4e:21:d3:a6:35:6c:0d:79:88:2a: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A6:C5:58:B8:DD:E5:5A:FB:C7:40:84:DD:E3:E0:84:5D:A0:52:DA X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:48:01:fc:3e:23:a9:07:eb:92:06:a7:c9:60:ef:6e:3a:99: a2:19:83:ea:cc:72:2c:3e:c1:d8:e7:67:4f:24:d1:47:df:49: bf:3d:5b:de:c6:55:4a:ca:f0:62:67:de:d5:6f:70:69:cc:95: 3a:8d:24:69:d6:52:f9:45:ff:73:86:27:24:71:3e:e6:38:29: 8a:d6:45:af:61:c0:15:01:5a:e1:c7:0f:a6:cd:67:ee:8e:a9: d2:58:e1:e3:44:53:e2:03:13:67:f6:3b:18:c2:55:2c:b4:62: 6c:26:97:6b:7a:07:e3:44:47:7e:ca:9b:f0:f9:ce:4e:75:55: c6:34:22:1e:6d:2a:45:32:f1:e5:77:f7:fb:4a:7d:c4:70:b6: ad:20:b8:f6:e4:d7:86:e3:0a:2b:0d:20:87:ae:c3:e3:3c:f0: 0a:35:53:bd:5b:cc:49:b9:b2:2d:e7:e1:3b:33:a9:86:a3:55: 07:17:16:be:37:c6:5c:2e:6a:6a:31:e4:e7:92:e0:fa:d5:8f: df:8f:10:11:8c:68:a1:03:e1:72:8b:cd:55:2e:50:70:07:99: c9:09:f7:7d:0c:38:4a:f4:d3:ac:9e:78:48:d5:d5:aa:a6:f2: 19:1a:20:12:e9:a9:b6:7c:95:e5:cc:de:d1:83:c5:b3:d6:2c: 0b:a8:b3:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjUxMTAzMDQxMDQ4WhcNMjUxMTEwMDQxMDQ4WjAYMRYwFAYD VQQDEw02OTA4MmI0OS1jMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooeIbDpRx2PaJfP/a3snMHYSRWYR9AZ8cwnJJF6k8GiG7OWY3xl7a2kfEM30 gFogzBpir+B6irT1PIZYULMRiRhRI3RGgfYMPy4SF9l2gdlMOIVx4Wa7HRM2459h 3JXToJYLVp0Yzqw9Tu9WkhvP8xhHy2Vr6IYmsQJ4f0h0rF7fX4xTMvktm5SURjUB hdXkVkxct44m2f0HHhBQIo0Bua/uSDy4ieZgAyCDERVlc+xLr+m0SVNxX442Tyr/ X/KNUzJF96Zd41mm4nwSJJsbW1tdB6U3dj4hlEw7vtIFpbT9ilNi0PLHc7+NHOwQ P9FKnJOA2U4h06Y1bA15iCp1VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLymxVi4 3eVa+8dAhN3j4IRdoFLaMB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE2Ny81NTExQUY2OEIzNTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1l R1VYaWNuUzZMMkEtdHFGNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwSAH8PiOpB+uSBqfJYO9uOpmiGYPqzHIsPsHY52dPJNFH30m/PVve xlVKyvBiZ97Vb3BpzJU6jSRp1lL5Rf9zhickcT7mOCmK1kWvYcAVAVrhxw+mzWfu jqnSWOHjRFPiAxNn9jsYwlUstGJsJpdregfjREd+ypvw+c5OdVXGNCIebSpFMvHl d/f7Sn3EcLatILj25NeG4worDSCHrsPjPPAKNVO9W8xJubIt5+E7M6mGo1UHFxa+ N8ZcLmpqMeTnkuD61Y/fjxARjGihA+Fyi81VLlBwB5nJCfd9DDhK9NOsnnhI1dWq pvIZGiAS6am2fJXlzN7Rg8Wz1iwLqLPl -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:13 2025 by rpki-client