$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: ZyoMjtNe6F2CD7x+ZAbmK187EKp4GEZH9gKbTIg0GEk= Subject key identifier: 09:FA:D4:DA:7F:30:41:16:85:06:B6:4F:F6:2D:96:56:D2:E5:D5:52 Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 06AF Signing time: Sun 02 Nov 2025 22:12:27 +0000 Manifest this update: Sun 02 Nov 2025 22:12:27 +0000 Manifest next update: Sun 09 Nov 2025 22:12:27 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: zoXdiyXLmHP6VXsXMYNv6dc5hqRyU4tuU5U77BgbGtw=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: pKScxQMxg1WdvXI6uB4aKpZXfYDWDJw+VDC0QK45Pf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: Nov 2 22:12:27 2025 GMT Not After : Nov 9 22:12:27 2025 GMT Subject: CN=6907d74b-887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:a5:58:6e:07:a2:3b:a5:01:29:b7:3e:0d: ce:cb:5e:0f:a9:37:20:9c:97:a8:c5:c3:48:b6:78: 27:1d:7a:cc:48:e1:84:92:08:d1:e4:b3:fe:f2:6e: 6d:7c:3c:a0:fa:88:0e:eb:fe:06:bc:74:e2:5a:dc: 1d:7f:9d:bb:61:1c:93:3f:08:56:73:42:ff:89:38: f5:a6:97:2b:90:e8:aa:b8:9b:a9:3d:5a:d9:9d:41: 25:02:92:27:53:29:f1:1d:de:66:c3:7a:0a:08:9a: 3e:40:a0:1d:f6:95:95:4e:e5:b8:a1:73:f4:84:70: 27:68:07:b7:88:10:e1:3e:d9:1f:d5:8c:37:c1:9f: 5b:8f:43:8d:ad:34:c2:a8:c8:4e:5b:6c:2b:4a:6d: 10:96:cf:6b:b0:8a:31:2e:d2:bb:ab:a3:9b:78:d1: 9e:d3:2d:77:41:35:96:41:19:cf:44:9d:32:9c:bd: e9:49:47:3e:d6:8a:d7:57:2a:4c:6a:2f:9b:58:5b: f8:ca:5d:36:1c:fc:af:e4:5f:c4:3f:0d:1d:ce:52: 4e:aa:1f:92:d5:aa:b4:24:92:fc:5d:61:78:cc:2c: 7d:3a:a7:77:d9:4e:62:b6:99:4a:74:d0:cd:18:2f: fc:f0:c5:aa:da:95:ae:23:8c:80:71:d8:27:02:34: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FA:D4:DA:7F:30:41:16:85:06:B6:4F:F6:2D:96:56:D2:E5:D5:52 X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e5:a5:82:14:38:39:9b:ef:6b:29:c0:f2:c8:6b:25:e5:ef: 84:3c:74:33:50:cb:cc:00:f7:d6:37:47:2a:9b:0e:db:ec:88: 80:2a:77:a2:f9:9f:42:c2:d5:e7:b6:7c:27:fc:44:2b:f3:30: a8:40:ed:2e:d5:8a:6e:69:78:4e:25:e1:ab:a1:70:db:c9:c6: a0:6e:45:77:04:07:c7:b6:0c:ba:68:4b:2e:b4:80:19:de:93: 69:b2:ee:b1:e8:cf:28:82:aa:e4:ff:a3:8f:18:57:f4:6f:e0: a4:de:e4:f6:3b:cf:4d:64:3d:7e:40:76:ae:d9:7d:a5:04:51: 81:3f:2d:21:3e:52:bd:6b:15:30:0c:a0:69:eb:98:0d:c7:ba: 07:ef:af:f1:d0:c7:1d:17:d2:f6:93:15:2b:f3:cb:f9:02:f1: f6:cf:ae:02:92:8e:93:a1:24:a3:2c:7b:19:f0:c8:c0:b9:fd: a2:81:2d:02:5e:3b:a5:20:c5:6c:85:b8:bc:ac:f9:25:94:be: d4:ed:40:cf:4d:8b:de:66:b0:28:f6:6f:05:ee:37:f2:9f:29: 80:71:bf:86:25:88:92:c1:2d:79:97:a7:02:6b:5d:bf:40:a8: 7e:54:ae:d2:d7:26:65:0c:07:7f:7f:56:59:ef:aa:c7:cb:ef: 68:4b:54:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjUxMTAyMjIxMjI3WhcNMjUxMTA5MjIxMjI3WjAYMRYwFAYD VQQDEw02OTA3ZDc0Yi04ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtulWG4HojulASm3Pg3Oy14PqTcgnJeoxcNItngnHXrMSOGEkgjR5LP+8m5t fDyg+ogO6/4GvHTiWtwdf527YRyTPwhWc0L/iTj1ppcrkOiquJupPVrZnUElApIn UynxHd5mw3oKCJo+QKAd9pWVTuW4oXP0hHAnaAe3iBDhPtkf1Yw3wZ9bj0ONrTTC qMhOW2wrSm0Qls9rsIoxLtK7q6ObeNGe0y13QTWWQRnPRJ0ynL3pSUc+1orXVypM ai+bWFv4yl02HPyv5F/EPw0dzlJOqh+S1aq0JJL8XWF4zCx9Oqd32U5itplKdNDN GC/88MWq2pWuI4yAcdgnAjQKvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAn61Np/ MEEWhQa2T/YtllbS5dVSMB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN5aWCFDg5m+9rKcDyyGsl5e+EPHQzUMvMAPfWN0cqmw7b7IiAKnei +Z9CwtXntnwn/EQr8zCoQO0u1YpuaXhOJeGroXDbycagbkV3BAfHtgy6aEsutIAZ 3pNpsu6x6M8ogqrk/6OPGFf0b+Ck3uT2O89NZD1+QHau2X2lBFGBPy0hPlK9axUw DKBp65gNx7oH76/x0McdF9L2kxUr88v5AvH2z64Cko6ToSSjLHsZ8MjAuf2igS0C XjulIMVshbi8rPkllL7U7UDPTYveZrAo9m8F7jfynymAcb+GJYiSwS15l6cCa12/ QKh+VK7S1yZlDAd/f1ZZ76rHy+9oS1Qg -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:01 2025 by rpki-client