$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: u5cs2Z2XUzu3lDyuG71keI6ou2PNzsJoD+370K13wfA= Subject key identifier: 69:7A:D8:FC:A8:32:AA:C4:D0:EE:F0:CF:85:94:F5:52:C9:75:5A:F1 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 06F2 Signing time: Sun 02 Nov 2025 22:02:14 +0000 Manifest this update: Sun 02 Nov 2025 22:02:13 +0000 Manifest next update: Sun 09 Nov 2025 22:02:13 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: XWf37r6PjWypeca43Ul+MzzSbdkV1Yykk5m5P1dGqYg=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: Y3wS66fd5YHhzaA4qhuEKsiBBLTblPlxdtXJBZSBnBU=) 3: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (hash: obljP3RXfrVGEpE3yYP91fJo6xaTDVgNzc+FKAwytnw=) 4: E959541EB28511ED8893C51CC4F9AE02.roa (hash: tDIvvxPbUPRWOTPf8MK/oVddDXGtUARS3nkFkQGylVE=) 5: DFBF8CDC6AF911F08AB48F35C4F9AE02.roa (hash: LvOncBacp+KNSMfj7m7RG6y+20TTs0UeSnhzak3/ObY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Nov 2 22:02:13 2025 GMT Not After : Nov 9 22:02:13 2025 GMT Subject: CN=6907d4e6-db98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:43:58:24:06:d3:bb:22:e4:82:f2:58:4f: 86:eb:85:23:bd:71:ac:74:b8:25:e9:c1:69:44:9f: 5c:19:5c:2f:51:27:d3:df:cf:fb:f3:7f:de:00:e2: d4:69:02:a3:01:a7:c6:0e:bc:c7:54:0e:62:ea:c6: fc:9f:1e:1b:74:4d:8c:9b:5f:37:00:6c:38:b3:f1: 8e:30:b5:cf:92:2d:c7:5a:ff:fa:73:ca:fe:47:59: ec:31:08:07:f5:ee:1c:8b:f5:0e:79:d0:e0:75:d0: e0:36:c6:15:93:ff:6b:53:87:cb:ab:57:01:7f:40: 7b:91:20:bd:ca:5e:28:1a:97:88:4e:21:de:15:cf: 6a:21:4a:58:cd:83:46:6c:68:03:3a:0e:b7:ef:ac: 4e:74:f9:8c:54:9b:8d:5e:d2:63:5f:7e:10:f5:ef: a0:4d:69:f9:de:2c:a7:61:e4:1e:8f:aa:dd:6f:0b: d9:2f:0a:94:44:a2:49:7f:c6:68:ad:8f:cb:c5:2b: 02:24:2e:64:cc:61:dd:33:f9:36:67:25:17:6a:c0: 82:3f:be:45:1f:32:78:ca:35:5d:5e:d4:67:29:20: b3:19:a3:d7:6b:d5:e2:34:7e:db:2c:4a:5d:fe:b0: 7e:ec:14:36:9c:cd:fc:a2:b4:4e:3d:14:dc:d0:99: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7A:D8:FC:A8:32:AA:C4:D0:EE:F0:CF:85:94:F5:52:C9:75:5A:F1 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:91:59:cf:59:2c:de:ae:e2:4b:42:b3:28:5f:0f:4d:fa:46: 5a:c6:a3:18:41:f6:e2:a0:67:91:db:9c:b0:93:19:52:85:89: 62:b1:4c:8e:36:cd:05:9f:01:18:cf:a9:50:bf:7b:ef:d2:4d: df:49:8e:2c:5d:b6:1e:f1:b2:c1:b8:0f:de:c5:de:15:c8:f3: 78:c2:21:3c:aa:0d:42:d9:23:53:9c:55:af:6a:2b:67:9a:5c: 11:1b:c6:13:92:1c:46:5e:b0:80:71:a5:2b:25:66:90:54:8f: 93:3a:05:b0:90:7d:1b:30:fa:03:ea:d1:05:12:a0:cc:dc:e9: a7:d1:f8:da:ac:cd:03:81:e1:0f:2c:36:9b:78:85:82:eb:ec: db:2f:74:ac:9c:bd:ea:8d:ff:4f:cd:2d:ab:d5:ea:12:1e:f3: fe:72:76:f6:3a:51:22:26:25:77:f9:ca:3e:ff:0e:bd:7d:53: 55:2d:22:6d:a3:01:75:ff:b8:02:b3:83:0f:e4:ef:0c:ea:f5: de:15:f8:90:2c:40:c8:7d:c5:01:27:3e:e2:dc:2b:b3:16:87: e0:ca:ed:7f:d0:e7:13:df:88:fc:26:66:65:f8:12:76:ce:1e: 17:f6:ec:fa:ea:ef:f6:e3:77:c2:3b:18:ab:74:d8:01:21:4b: 46:fd:21:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUxMTAyMjIwMjEzWhcNMjUxMTA5MjIwMjEzWjAYMRYwFAYD VQQDEw02OTA3ZDRlNi1kYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dlDWCQG07si5ILyWE+G64UjvXGsdLgl6cFpRJ9cGVwvUSfT38/783/eAOLU aQKjAafGDrzHVA5i6sb8nx4bdE2Mm183AGw4s/GOMLXPki3HWv/6c8r+R1nsMQgH 9e4ci/UOedDgddDgNsYVk/9rU4fLq1cBf0B7kSC9yl4oGpeITiHeFc9qIUpYzYNG bGgDOg6376xOdPmMVJuNXtJjX34Q9e+gTWn53iynYeQej6rdbwvZLwqURKJJf8Zo rY/LxSsCJC5kzGHdM/k2ZyUXasCCP75FHzJ4yjVdXtRnKSCzGaPXa9XiNH7bLEpd /rB+7BQ2nM38orROPRTc0JmcHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl62Pyo MqrE0O7wz4WU9VLJdVrxMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvkVnPWSzeruJLQrMoXw9N+kZaxqMYQfbioGeR25ywkxlShYlisUyO Ns0FnwEYz6lQv3vv0k3fSY4sXbYe8bLBuA/exd4VyPN4wiE8qg1C2SNTnFWvaitn mlwRG8YTkhxGXrCAcaUrJWaQVI+TOgWwkH0bMPoD6tEFEqDM3Omn0fjarM0DgeEP LDabeIWC6+zbL3SsnL3qjf9PzS2r1eoSHvP+cnb2OlEiJiV3+co+/w69fVNVLSJt owF1/7gCs4MP5O8M6vXeFfiQLEDIfcUBJz7i3CuzFofgyu1/0OcT34j8JmZl+BJ2 zh4X9uz66u/243fCOxirdNgBIUtG/SED -----END CERTIFICATE-----Generated at Mon Nov 3 16:11:50 2025 by rpki-client