$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: 97BY7i2HGqxUKD1WHBg0nA0SXViUALgSOrxSybOQeaM= Subject key identifier: 17:EF:2C:BA:01:1E:00:6A:40:4C:2C:00:06:A2:FF:C6:8C:4C:65:5C Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0DAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0DA7 Signing time: Sun 02 Nov 2025 17:55:10 +0000 Manifest this update: Sun 02 Nov 2025 17:55:09 +0000 Manifest next update: Sun 09 Nov 2025 17:55:09 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: Y1+gyx+2YmPRRp4pwiTOzJghrns19m46COdYVvki6vs=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3502 (0xdae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Nov 2 17:55:09 2025 GMT Not After : Nov 9 17:55:09 2025 GMT Subject: CN=69079afe-2741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:28:7e:f6:ab:c9:5e:cf:34:c7:a9:fe:c7: f0:5d:3a:e6:dc:24:77:e6:b7:ad:8b:c6:20:a9:b1: b4:76:76:ce:16:d8:ec:5f:05:d3:60:d4:ae:b6:51: c9:2f:ae:3d:c6:3c:bd:db:71:bd:9f:9e:c6:53:f4: 7d:08:e1:c4:e3:65:0e:dc:d4:6b:c7:85:10:58:9d: 63:ce:37:2b:29:03:9a:ad:c4:ab:ab:86:5b:33:17: c2:4d:84:04:95:e2:85:9c:6f:ac:3f:1c:12:41:06: 46:a6:b8:17:c9:d9:5b:b5:de:b2:52:33:77:52:94: 96:44:0e:5e:b4:b8:07:22:cc:2b:20:a6:1d:fa:a4: 0c:9e:98:38:3b:7d:88:1f:71:41:9b:16:44:29:40: df:07:0f:cf:ad:a4:88:0a:c6:60:33:30:14:8f:c7: f4:bd:e0:85:65:f3:5d:ce:a9:fb:05:f6:c9:12:23: 0b:99:c6:df:43:60:92:a3:31:03:c1:8b:eb:03:d3: ab:9a:1d:d6:fc:16:d5:39:d0:52:46:e8:60:1e:b8: 7e:20:92:d8:c3:1f:cd:c0:9f:01:ca:c5:1f:d9:32: a1:4c:e9:62:85:12:8a:4e:82:0f:e5:37:77:9b:44: a6:80:d1:1c:90:85:74:b0:31:66:f8:11:a6:c8:6d: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EF:2C:BA:01:1E:00:6A:40:4C:2C:00:06:A2:FF:C6:8C:4C:65:5C X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b6:e9:56:b9:f0:45:ff:7b:56:01:7e:2a:5a:7d:e0:ec:a4: a8:b9:c3:59:f6:96:2c:1c:c3:86:57:d7:e3:ec:79:e4:d6:02: e9:29:91:19:4f:fe:38:6a:dc:e8:0e:04:b4:b3:5f:b9:5f:cf: 4b:fe:3d:e1:69:0c:67:34:ae:bd:a9:9b:31:fd:3c:11:2c:f0: df:5b:f7:ca:ab:93:19:e4:d7:00:75:bb:c5:3c:9a:e4:a7:82: f3:df:3a:1d:eb:0e:36:49:b3:be:65:d1:d7:05:d7:49:ae:21: 7e:0a:81:d6:cd:f9:b8:78:93:0f:a4:0e:c8:21:40:cb:93:2a: 3d:c2:85:b8:7f:00:15:ef:7c:df:67:1e:70:7b:53:97:9a:d1: 31:0d:08:25:f7:f4:b5:53:4a:e4:56:a7:25:c0:a2:fb:8d:1e: 99:08:df:50:a7:9b:f7:4e:7f:54:c2:91:48:19:d6:0e:62:5d: c0:4d:41:bc:26:f3:c4:2e:d6:b5:d5:e0:02:69:13:64:5d:3b: 10:af:95:32:8c:4b:9a:8c:a5:95:d1:5a:67:69:19:19:9a:27: 48:a0:89:a2:a9:42:e9:67:ce:85:57:18:5e:95:48:55:3a:df: f2:02:cd:73:d5:38:f4:3c:7e:b3:29:7b:93:c4:b1:00:5e:2b: 08:51:5c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUxMTAyMTc1NTA5WhcNMjUxMTA5MTc1NTA5WjAYMRYwFAYD VQQDEw02OTA3OWFmZS0yNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWQofvaryV7PNMep/sfwXTrm3CR35reti8YgqbG0dnbOFtjsXwXTYNSutlHJ L649xjy923G9n57GU/R9COHE42UO3NRrx4UQWJ1jzjcrKQOarcSrq4ZbMxfCTYQE leKFnG+sPxwSQQZGprgXydlbtd6yUjN3UpSWRA5etLgHIswrIKYd+qQMnpg4O32I H3FBmxZEKUDfBw/PraSICsZgMzAUj8f0veCFZfNdzqn7BfbJEiMLmcbfQ2CSozED wYvrA9Ormh3W/BbVOdBSRuhgHrh+IJLYwx/NwJ8BysUf2TKhTOlihRKKToIP5Td3 m0SmgNEckIV0sDFm+BGmyG0sswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfvLLoB HgBqQEwsAAai/8aMTGVcMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHtulWufBF/3tWAX4qWn3g7KSoucNZ9pYsHMOGV9fj7Hnk1gLpKZEZ T/44atzoDgS0s1+5X89L/j3haQxnNK69qZsx/TwRLPDfW/fKq5MZ5NcAdbvFPJrk p4Lz3zod6w42SbO+ZdHXBddJriF+CoHWzfm4eJMPpA7IIUDLkyo9woW4fwAV73zf Zx5we1OXmtExDQgl9/S1U0rkVqclwKL7jR6ZCN9Qp5v3Tn9UwpFIGdYOYl3ATUG8 JvPELta11eACaRNkXTsQr5UyjEuajKWV0VpnaRkZmidIoImiqULpZ86FVxhelUhV Ot/yAs1z1Tj0PH6zKXuTxLEAXisIUVzI -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:28 2025 by rpki-client