$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: r6gSPSb9PV78OpnzBwfiJktmbPqh8Hkdl8RshOwzWWs= Subject key identifier: 85:3E:AE:62:D1:A3:9F:34:A5:15:90:61:6A:C5:96:25:35:FF:7F:4E Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 5B Signing time: Fri 07 Nov 2025 02:26:55 +0000 Manifest this update: Fri 07 Nov 2025 02:26:54 +0000 Manifest next update: Fri 14 Nov 2025 02:26:54 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: CSyKmwzD06dR1W/08HDS8Tnjkr9IO7reaqj7D0vjRF0=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 02:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Nov 7 02:26:54 2025 GMT Not After : Nov 14 02:26:54 2025 GMT Subject: CN=690d58ef-a0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:c7:a6:1c:c3:1a:d3:46:33:7b:2b:1f:5a: 9b:49:37:55:ef:39:95:c1:81:21:02:b7:81:bf:dd: ab:02:72:aa:60:09:7d:ed:66:f1:8e:97:d2:ef:0d: 12:9d:cc:c0:4e:28:a7:04:a8:68:15:2d:9e:14:1d: 1f:79:60:db:d0:1c:60:b3:12:bb:bc:4f:57:9a:75: 63:86:a4:48:df:8b:82:34:db:e4:dc:fe:54:9d:86: 72:94:72:3e:b2:0d:eb:ec:27:a2:b5:70:2d:15:72: d3:7f:8e:02:45:cc:63:96:13:71:67:39:03:b5:85: 11:cd:96:ef:af:3e:32:8a:41:c1:1e:a4:48:b6:c1: 98:d4:c3:d0:13:da:2a:c2:b3:71:c7:d0:53:15:3c: 50:0d:0d:3f:fc:29:f5:d6:ae:71:3c:31:76:37:2b: fe:54:a2:bb:12:16:c3:77:c7:35:7c:ab:f6:8c:a5: 06:3b:18:63:34:f0:e5:60:af:43:7f:dc:02:02:5b: 13:d4:86:e4:cf:b4:ac:18:ea:a4:1e:fb:73:08:4e: 23:75:44:35:2e:63:91:39:14:7e:ca:f2:4e:02:ff: 4f:f9:79:a3:7d:91:2e:65:ca:6a:ca:ab:5c:b6:88: a8:0b:93:a7:b3:1a:2d:bc:59:c9:20:42:6c:11:a8: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:AE:62:D1:A3:9F:34:A5:15:90:61:6A:C5:96:25:35:FF:7F:4E X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d1:b7:86:a1:70:fe:42:1a:e6:7d:1c:0d:25:31:e1:f3:d4: 50:0c:6b:af:5f:0f:ae:cd:d9:1f:40:7d:1e:84:f8:84:89:4c: bc:b0:6c:8e:23:ad:91:53:8f:a4:11:a7:ec:47:08:08:e9:b1: 28:5f:80:fa:3d:cd:d2:15:75:56:c8:75:65:65:c9:5d:26:df: a0:89:66:43:17:bf:0c:f2:35:9e:8b:02:ec:13:f1:6c:97:64: 92:da:11:9b:e0:c6:ab:b6:8f:ff:97:ee:8a:7c:9e:64:c9:74: 3b:51:d0:f8:2f:e4:80:a2:25:a8:ba:e0:f9:4e:f1:7b:e1:7b: 97:cb:2f:13:00:3e:54:e1:06:81:16:eb:ba:35:ed:6b:c3:3f: 06:19:95:6f:ea:2c:ef:b4:ce:e9:3a:19:49:b5:79:86:a0:ec: c5:5d:a3:0c:e3:7a:e1:c6:28:cc:11:21:8e:75:41:b4:75:c2: 1b:b1:97:2a:b6:c8:c7:69:90:d0:22:13:69:4f:ee:22:48:b0: b4:1b:f1:8c:27:7b:df:89:f3:78:a9:5b:e4:49:4b:d0:8a:2a: 9d:3b:67:93:1d:f5:6e:2f:1b:68:78:10:d1:be:46:b0:49:ef: 26:81:bc:08:cc:ef:35:99:74:1e:d7:22:bd:a7:4d:d0:10:62: 94:4b:79:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTExMDcwMjI2NTRaFw0yNTExMTQwMjI2NTRaMBgxFjAUBgNV BAMTDTY5MGQ1OGVmLWEwYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7MsemHMMa00YzeysfWptJN1XvOZXBgSECt4G/3asCcqpgCX3tZvGOl9LvDRKd zMBOKKcEqGgVLZ4UHR95YNvQHGCzEru8T1eadWOGpEjfi4I02+Tc/lSdhnKUcj6y DevsJ6K1cC0VctN/jgJFzGOWE3FnOQO1hRHNlu+vPjKKQcEepEi2wZjUw9AT2irC s3HH0FMVPFANDT/8KfXWrnE8MXY3K/5UorsSFsN3xzV8q/aMpQY7GGM08OVgr0N/ 3AICWxPUhuTPtKwY6qQe+3MITiN1RDUuY5E5FH7K8k4C/0/5eaN9kS5lymrKq1y2 iKgLk6ezGi28WckgQmwRqD3xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhT6uYtGj nzSlFZBhasWWJTX/f04wHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLRt4ahcP5CGuZ9HA0lMeHz1FAMa69fD67N2R9AfR6E+ISJTLywbI4j rZFTj6QRp+xHCAjpsShfgPo9zdIVdVbIdWVlyV0m36CJZkMXvwzyNZ6LAuwT8WyX ZJLaEZvgxqu2j/+X7op8nmTJdDtR0Pgv5ICiJai64PlO8Xvhe5fLLxMAPlThBoEW 67o17WvDPwYZlW/qLO+0zuk6GUm1eYag7MVdowzjeuHGKMwRIY51QbR1whuxlyq2 yMdpkNAiE2lP7iJIsLQb8Ywne9+J83ipW+RJS9CKKp07Z5Md9W4vG2h4ENG+RrBJ 7yaBvAjM7zWZdB7XIr2nTdAQYpRLeZw= -----END CERTIFICATE-----Generated at Fri Nov 7 16:36:10 2025 by rpki-client