$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft File: PQaSnY1eH2juI-yj-UjP96LklbM.mft (raw, json) Hash identifier: m7QjENq4oX8o0qp6rGgG4veW/F/GvftwWXC/Dr8Rb9w= Subject key identifier: D4:54:79:B2:E1:D5:4A:2B:C2:F4:A7:BA:E2:60:E7:6A:E0:DF:76:25 Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft Manifest number: 0B35 Signing time: Sun 02 Nov 2025 19:16:36 +0000 Manifest this update: Sun 02 Nov 2025 19:16:35 +0000 Manifest next update: Sun 09 Nov 2025 19:16:35 +0000 Files and hashes: 1: PQaSnY1eH2juI-yj-UjP96LklbM.crl (hash: FEMirc2e3sxO5fU0JJPygeDopFpWi21YwiynxXkxv1c=) 2: 4140D222AB0511F0AD64C814C4F9AE02.roa (hash: OQA1xcKI/hiAbUi76rdd20yEjY2R6araSSWLUXcKQG8=) 3: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (hash: rmQtPBzLnmMnKWqEbpn/ZFyPKybx/x0dYiK1HD1kfdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Validity Not Before: Nov 2 19:16:35 2025 GMT Not After : Nov 9 19:16:35 2025 GMT Subject: CN=6907ae13-b39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:88:8c:4c:0e:a7:d2:62:19:9b:52:aa:7b: 53:3d:0f:f2:c8:8c:19:9d:14:8f:93:08:d4:23:12: cc:7d:84:db:f3:6b:59:94:c1:e5:5a:64:48:74:47: 3f:6a:1c:dd:72:f5:2b:ba:9a:d8:43:90:a7:b5:72: 89:6a:2d:d8:f8:ba:c3:e6:12:40:81:2f:0b:0a:3e: f3:09:01:4b:eb:9f:9a:f1:b8:78:d2:c9:54:fb:82: c1:78:17:07:26:06:40:23:43:e2:9b:bf:de:e5:41: 58:e1:50:29:f8:d9:14:10:fe:5d:6e:53:7f:a6:0f: e6:0c:f6:f9:29:ba:d9:45:67:ec:24:f1:d5:8b:15: ae:7c:ac:fd:e9:94:eb:49:32:62:df:32:93:de:a3: 06:1c:1b:5b:a8:cd:16:78:a1:eb:41:c2:79:7c:bf: 1e:93:ff:4d:22:29:84:25:e0:cf:b2:c5:ae:e3:8a: 05:f1:13:82:f7:38:79:7b:11:3e:52:11:20:af:d9: 44:04:ad:73:0a:3c:f8:9e:47:ea:91:51:fa:6f:5b: 04:f5:b1:88:d3:09:54:76:a9:d8:c1:9c:b1:2f:56: 4e:4f:65:bb:d2:af:4a:e8:0f:0c:37:2f:66:7c:44: 36:44:1d:c2:4b:f6:2e:b7:51:9c:2d:94:59:12:91: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:54:79:B2:E1:D5:4A:2B:C2:F4:A7:BA:E2:60:E7:6A:E0:DF:76:25 X509v3 Authority Key Identifier: keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:38:a9:0b:df:9f:8d:42:74:a8:ae:30:68:f4:17:aa:3e:f3: 4d:db:e5:b3:0f:6c:bc:79:cd:2e:20:e4:ab:b9:0f:e4:bb:6a: f5:61:64:6b:ff:d9:37:62:9d:f8:c1:d1:39:c5:c5:b3:ef:02: 28:82:49:c2:09:c5:f7:af:46:aa:79:9a:7d:66:c1:96:39:a2: 31:07:f7:ca:57:f5:03:1d:67:c9:ca:7a:a6:0a:86:c0:98:3e: 96:34:9d:ca:d5:11:f5:9c:37:8b:88:34:2d:b5:96:5f:33:9e: 81:6a:a3:2b:c9:de:c2:f9:cf:ce:82:86:7e:12:cd:79:52:d0: a7:ea:d1:c0:c0:7c:f2:60:aa:61:50:b3:00:25:75:2a:ed:6b: 5f:5e:75:6b:e6:35:2d:41:df:d9:a3:50:2f:02:62:f9:73:ad: 47:91:00:cb:f7:64:1e:6f:f8:e4:0d:ce:77:91:24:e6:2c:7d: 22:e2:b5:24:83:10:34:52:e4:ab:fb:c6:a3:fe:7b:30:2a:0a: 10:8f:01:21:4f:04:85:95:55:28:fe:c2:ac:f5:e6:7b:6f:c0: 41:36:30:14:9e:d7:75:37:78:6d:fa:a1:cc:c1:ec:17:62:0d: fe:19:4b:7f:4d:67:f6:66:be:3b:f2:5c:f5:2b:21:e0:56:f8: b9:e0:84:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RENEOTExMC8GA1UEBRMoM0QwNjkyOUQ4RDVFMUY2OEVFMjNFQ0EzRjk0OENGRjdB MkU0OTVCMzAeFw0yNTExMDIxOTE2MzVaFw0yNTExMDkxOTE2MzVaMBgxFjAUBgNV BAMTDTY5MDdhZTEzLWIzOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6ToiMTA6n0mIZm1Kqe1M9D/LIjBmdFI+TCNQjEsx9hNvza1mUweVaZEh0Rz9q HN1y9Su6mthDkKe1colqLdj4usPmEkCBLwsKPvMJAUvrn5rxuHjSyVT7gsF4Fwcm BkAjQ+Kbv97lQVjhUCn42RQQ/l1uU3+mD+YM9vkputlFZ+wk8dWLFa58rP3plOtJ MmLfMpPeowYcG1uozRZ4oetBwnl8vx6T/00iKYQl4M+yxa7jigXxE4L3OHl7ET5S ESCv2UQErXMKPPieR+qRUfpvWwT1sYjTCVR2qdjBnLEvVk5PZbvSr0roDww3L2Z8 RDZEHcJL9i63UZwtlFkSkQFHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1FR5suHV SivC9Ke64mDnauDfdiUwHwYDVR0jBBgwFoAUPQaSnY1eH2juI+yj+UjP96LklbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQ0Q5LzQxMEJCQzE0NEU2 QzExRUE4OTA0OTc0N0M0RjlBRTAyL1BRYVNuWTFlSDJqdUkteWotVWpQOTZMa2xi TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFFhU25ZMWVIMmp1SS15ai1ValA5NkxrbGJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Q0Q5LzQxMEJCQzE0NEU2QzExRUE4OTA0OTc0N0M0RjlBRTAyL1BRYVNuWTFlSDJq dUkteWotVWpQOTZMa2xiTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJw4qQvfn41CdKiuMGj0F6o+803b5bMPbLx5zS4g5Ku5D+S7avVhZGv/ 2TdinfjB0TnFxbPvAiiCScIJxfevRqp5mn1mwZY5ojEH98pX9QMdZ8nKeqYKhsCY PpY0ncrVEfWcN4uINC21ll8znoFqoyvJ3sL5z86Chn4SzXlS0Kfq0cDAfPJgqmFQ swAldSrta19edWvmNS1B39mjUC8CYvlzrUeRAMv3ZB5v+OQNzneRJOYsfSLitSSD EDRS5Kv7xqP+ezAqChCPASFPBIWVVSj+wqz15ntvwEE2MBSe13U3eG36oczB7Bdi Df4ZS39NZ/ZmvjvyXPUrIeBW+LnghOY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:53 2025 by rpki-client