$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: eIFmSJQjYmTpbGkhhaY+zj8b0tLSydINYUUB+e6yDfY= Subject key identifier: 23:40:61:C6:0A:14:B4:40:2A:B7:52:7B:CB:49:6E:09:DD:0C:07:43 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 0132 Signing time: Wed 05 Nov 2025 04:42:17 +0000 Manifest this update: Wed 05 Nov 2025 04:42:17 +0000 Manifest next update: Wed 12 Nov 2025 04:42:17 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: 244Fuv3RJcntvHlQ7vlmAEjbTQ8/xmK12gmZwMom8tg=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Nov 5 04:42:17 2025 GMT Not After : Nov 12 04:42:17 2025 GMT Subject: CN=690ad5a9-a9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:b2:a4:30:87:39:2b:b4:65:b6:1f:a4:65: 08:cd:5c:3d:91:00:eb:f2:51:71:08:50:9e:65:9b: c4:ed:b1:a4:8d:34:ad:c6:0d:61:3c:50:c2:fa:5e: 3a:af:aa:7c:52:27:1a:4b:db:e8:5f:0d:63:ed:ae: cd:1a:2a:fa:20:34:42:87:86:77:f3:de:82:ae:33: 72:1b:fc:f7:0b:96:de:bb:79:67:55:86:c4:88:7d: 40:2d:40:48:bb:8b:d6:ef:e2:15:82:18:66:2c:41: aa:64:c5:ef:2f:29:19:c6:96:ff:9d:6d:ca:ff:17: b0:1b:fc:66:1f:ae:27:63:9a:b4:34:9a:f4:8f:e3: 61:e1:44:db:0b:aa:3f:d5:30:21:d8:cc:7b:a5:5b: 6e:3b:40:3f:a3:66:15:50:02:6c:ab:34:a4:fa:57: e8:8d:80:99:c5:e9:a8:5a:0b:a6:c0:1c:bc:1e:e1: 51:63:63:d8:50:8d:03:84:2f:9a:c6:ea:fc:1a:c0: d8:a9:fc:48:fe:08:04:66:9c:d1:f5:9a:cb:42:31: 70:c2:98:85:a3:2c:8d:4a:48:ed:9f:05:12:e5:91: 72:56:2e:52:21:66:c0:d2:84:b0:b6:10:1a:81:3c: 21:9b:56:6f:38:39:41:64:af:b4:68:a4:56:2a:87: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:61:C6:0A:14:B4:40:2A:B7:52:7B:CB:49:6E:09:DD:0C:07:43 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a5:76:23:af:17:fa:e7:f4:8a:06:71:30:48:5f:b8:53:21: b3:3c:5a:55:63:f2:a2:fd:d3:ea:55:21:09:30:cb:31:e8:59: 0c:01:8f:d3:06:c8:95:9c:82:8e:af:45:c3:b2:92:e5:c9:91: ea:6b:ca:01:f6:0f:08:7c:b2:65:33:2b:02:23:60:8d:e3:8a: ad:69:aa:d7:94:01:3d:b1:ae:88:8c:d5:1f:bd:be:14:57:10: 1a:ac:ae:b8:4e:7a:89:7d:94:db:4b:95:54:1c:50:3b:c3:74: 38:4b:5c:21:22:a6:d1:c0:f4:5c:94:1d:c3:7a:ff:89:ca:89: 19:f3:aa:77:db:c3:2b:00:d8:6c:39:ca:4f:7a:f7:51:90:8e: 28:c8:a2:b5:20:6e:7f:92:bb:a0:01:87:d1:26:c0:94:ef:15: 92:e7:b7:9f:a7:d0:49:73:e9:04:34:57:ac:30:1b:ba:a6:16: 41:6f:b3:1e:1e:a1:84:50:f4:d7:e4:42:91:76:2f:bb:8e:18: 1a:5a:43:6f:ed:cf:01:0a:38:46:e7:9c:d6:1d:03:32:48:3b: e1:9b:da:76:ec:04:60:d1:1b:5f:43:e5:cc:50:88:53:6b:44: 25:04:f6:96:12:1a:4f:f4:d4:1a:01:11:1b:ae:c3:ce:8c:10: 2f:45:1a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUxMTA1MDQ0MjE3WhcNMjUxMTEyMDQ0MjE3WjAYMRYwFAYD VQQDEw02OTBhZDVhOS1hOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg6ypDCHOSu0ZbYfpGUIzVw9kQDr8lFxCFCeZZvE7bGkjTStxg1hPFDC+l46 r6p8UicaS9voXw1j7a7NGir6IDRCh4Z3896CrjNyG/z3C5beu3lnVYbEiH1ALUBI u4vW7+IVghhmLEGqZMXvLykZxpb/nW3K/xewG/xmH64nY5q0NJr0j+Nh4UTbC6o/ 1TAh2Mx7pVtuO0A/o2YVUAJsqzSk+lfojYCZxemoWgumwBy8HuFRY2PYUI0DhC+a xur8GsDYqfxI/ggEZpzR9ZrLQjFwwpiFoyyNSkjtnwUS5ZFyVi5SIWbA0oSwthAa gTwhm1ZvODlBZK+0aKRWKoftEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNAYcYK FLRAKrdSe8tJbgndDAdDMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnpXYjrxf65/SKBnEwSF+4UyGzPFpVY/Ki/dPqVSEJMMsx6FkMAY/T BsiVnIKOr0XDspLlyZHqa8oB9g8IfLJlMysCI2CN44qtaarXlAE9sa6IjNUfvb4U VxAarK64TnqJfZTbS5VUHFA7w3Q4S1whIqbRwPRclB3Dev+JyokZ86p328MrANhs OcpPevdRkI4oyKK1IG5/krugAYfRJsCU7xWS57efp9BJc+kENFesMBu6phZBb7Me HqGEUPTX5EKRdi+7jhgaWkNv7c8BCjhG55zWHQMySDvhm9p27ARg0RtfQ+XMUIhT a0QlBPaWEhpP9NQaAREbrsPOjBAvRRr2 -----END CERTIFICATE-----Generated at Wed Nov 5 22:12:20 2025 by rpki-client