$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: Wt8WKdv8T6geSk3+vVs1ad3TfAEBKrI96ILxLUmw3S8= Subject key identifier: 8D:E0:5B:21:CB:D0:D2:4B:93:D3:26:BE:0C:5A:19:3A:72:96:A9:A8 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 0A29 Signing time: Sun 02 Nov 2025 19:44:00 +0000 Manifest this update: Sun 02 Nov 2025 19:43:59 +0000 Manifest next update: Sun 09 Nov 2025 19:43:59 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: WsjeEoihiDmpEnZAD5hqWyhhu2H14QfNiVcbk2oJwmg=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Nov 2 19:43:59 2025 GMT Not After : Nov 9 19:43:59 2025 GMT Subject: CN=6907b480-3a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:b1:f6:df:4b:d8:13:e7:33:cc:76:81:07: 70:30:6b:90:4f:ea:7f:8c:f4:a3:86:51:27:7b:6a: 6b:d5:5a:e4:96:b0:53:ff:3c:08:6f:e9:4a:9b:4d: 65:5d:63:02:8f:3d:73:05:a0:e6:c5:ba:31:7f:88: 79:84:4c:79:40:89:f4:59:4a:03:e2:8a:38:e7:31: f7:11:ea:36:54:ce:c3:d9:e6:af:51:52:7a:f3:b6: cc:c7:71:92:38:1a:6f:7a:c9:70:a0:c2:40:00:3c: 47:07:98:10:b5:b9:e3:38:4d:c2:c3:82:de:e9:af: ed:63:e2:1f:98:22:a1:e7:f9:cf:fe:33:1d:ac:2b: d3:cf:2d:90:0a:47:e5:3e:aa:23:9b:4c:9a:9d:d0: b6:ee:ce:a1:7d:fa:5d:40:8d:4a:c2:87:1a:c0:dc: 91:f1:e5:91:57:3d:dc:b3:7e:c2:be:0e:4b:a5:a1: ce:59:32:ce:b4:a9:8d:c5:be:e8:80:5d:96:73:29: 08:74:36:82:cf:aa:d8:8f:23:3d:7c:b4:28:e5:1d: 5d:cb:59:77:6a:96:2c:50:05:2f:66:5d:04:3d:28: b6:9a:c4:5a:39:0d:fd:10:f1:25:da:de:5c:1a:02: f2:41:ff:a0:4a:cd:d4:a4:24:78:4d:de:46:e4:7e: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E0:5B:21:CB:D0:D2:4B:93:D3:26:BE:0C:5A:19:3A:72:96:A9:A8 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:14:22:90:46:c4:32:41:e2:b9:67:fd:48:37:e2:20:33:ef: 8f:73:58:21:2a:a8:dd:fc:0e:de:ef:a4:c7:7b:5f:f8:86:af: 96:9b:e9:4f:83:89:9f:5a:20:4b:64:51:e4:cc:64:d3:79:38: 9e:68:32:59:af:9d:83:65:f2:d0:0f:20:f6:d5:c8:6e:44:ee: 23:29:4e:fb:53:f3:fc:1e:08:71:16:cf:98:37:c9:cd:c0:b4: 04:67:10:48:3b:9f:1d:3c:d0:fe:ed:b8:0f:21:66:63:5d:0a: f3:f2:6a:66:e8:5c:9e:a4:7a:8a:7e:ff:f6:cb:5f:9c:b3:57: d5:f4:f9:86:42:5a:19:8f:f1:e1:a0:08:26:1f:df:0e:af:d2: 70:d5:47:07:d7:46:8f:82:87:65:21:4c:3c:5e:48:b3:00:75: 31:e1:0a:2d:d6:ff:62:b2:fb:85:ff:3c:65:f1:18:31:1c:1b: 54:ff:03:9a:81:24:ec:f8:b3:db:2c:1f:82:15:93:f1:f3:ce: 69:96:63:d9:91:f4:29:77:01:5f:ea:7d:97:66:b0:14:e1:dd: 54:83:9a:3b:e7:87:00:a4:d1:89:1a:c5:4c:25:e4:1d:eb:de: ff:e0:fe:05:2e:18:8a:5c:5a:27:a4:43:69:10:73:e4:5a:cf: 89:d9:91:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUxMTAyMTk0MzU5WhcNMjUxMTA5MTk0MzU5WjAYMRYwFAYD VQQDEw02OTA3YjQ4MC0zYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbqx9t9L2BPnM8x2gQdwMGuQT+p/jPSjhlEne2pr1VrklrBT/zwIb+lKm01l XWMCjz1zBaDmxboxf4h5hEx5QIn0WUoD4oo45zH3Eeo2VM7D2eavUVJ687bMx3GS OBpveslwoMJAADxHB5gQtbnjOE3Cw4Le6a/tY+IfmCKh5/nP/jMdrCvTzy2QCkfl Pqojm0yandC27s6hffpdQI1KwocawNyR8eWRVz3cs37Cvg5LpaHOWTLOtKmNxb7o gF2WcykIdDaCz6rYjyM9fLQo5R1dy1l3apYsUAUvZl0EPSi2msRaOQ39EPEl2t5c GgLyQf+gSs3UpCR4Td5G5H7qOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3gWyHL 0NJLk9MmvgxaGTpylqmoMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLFCKQRsQyQeK5Z/1IN+IgM++Pc1ghKqjd/A7e76THe1/4hq+Wm+lP g4mfWiBLZFHkzGTTeTieaDJZr52DZfLQDyD21chuRO4jKU77U/P8HghxFs+YN8nN wLQEZxBIO58dPND+7bgPIWZjXQrz8mpm6FyepHqKfv/2y1+cs1fV9PmGQloZj/Hh oAgmH98Or9Jw1UcH10aPgodlIUw8XkizAHUx4Qot1v9isvuF/zxl8RgxHBtU/wOa gSTs+LPbLB+CFZPx885plmPZkfQpdwFf6n2XZrAU4d1Ug5o754cApNGJGsVMJeQd 697/4P4FLhiKXFonpENpEHPkWs+J2ZFB -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:24 2025 by rpki-client