$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: CPj+jF4FgI6Wgw3LY91GpQiSfV9RQB+McTDbN6GuE+c= Subject key identifier: 98:66:9D:49:7A:06:14:8F:3F:F7:FD:8C:28:FE:42:31:70:6D:6F:44 Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 02B1 Signing time: Wed 05 Nov 2025 01:34:26 +0000 Manifest this update: Wed 05 Nov 2025 01:34:25 +0000 Manifest next update: Wed 12 Nov 2025 01:34:25 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: gmSXsymyRusHPINH/wY5hN0vklAgPhTDRh03B34yzI8=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Nov 5 01:34:25 2025 GMT Not After : Nov 12 01:34:25 2025 GMT Subject: CN=690aa9a1-76d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:27:dd:81:6b:1f:88:c2:d3:7a:21:a8:55: 02:6b:7c:c3:b4:8e:b7:35:2e:b8:36:7d:e8:fc:6f: 1c:af:23:f0:b2:68:cc:9e:cd:76:44:97:5e:91:e3: 17:b1:56:e0:fd:53:20:8c:bb:6e:93:f9:88:58:f9: 48:51:0e:a7:17:6c:e7:c9:88:bc:58:fd:c7:c6:90: db:c4:3e:b3:2b:bb:be:c8:4c:89:dc:a2:49:5d:a6: 5b:b4:ac:e4:2f:6b:ba:13:a1:84:5b:ba:f5:b0:26: fb:26:83:53:1b:a2:8f:0a:fd:d6:70:d9:e6:ef:32: 62:e3:57:10:d3:7b:3a:92:c6:36:2a:56:26:de:c4: 7a:82:95:47:62:76:1b:f5:31:6b:bb:a6:d3:38:70: 3b:4b:52:7d:75:4e:86:fd:d4:40:aa:98:b0:aa:05: bb:2c:c3:5e:07:bf:9a:6d:61:bf:86:47:55:5f:cb: a9:00:bb:67:9b:5c:fc:ca:c6:f3:8e:3b:e1:d5:bc: 52:bc:f7:ee:df:82:cd:5d:36:83:70:76:00:4a:5f: c5:f6:61:88:8c:7c:a1:98:4f:81:2e:e1:1a:c4:f8: e3:7c:5d:7c:c3:d3:98:c3:82:c3:f6:0e:e0:ac:ae: 50:32:2e:0a:42:5d:d2:9e:05:e5:3d:83:c6:cd:5f: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:66:9D:49:7A:06:14:8F:3F:F7:FD:8C:28:FE:42:31:70:6D:6F:44 X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6e:86:1e:57:e4:3f:c3:2c:bb:81:c7:26:19:8d:9b:6a:2a: 64:e0:8b:cc:fd:8f:b9:66:32:dd:a9:ec:df:a4:24:de:29:84: f4:98:ca:93:0f:e4:f6:dc:d0:98:f5:2f:c3:c8:75:35:11:3c: e5:af:54:c4:b3:16:ca:f3:a8:ea:d7:ae:1e:b7:3f:f2:71:61: 83:8c:7c:33:1e:af:d7:54:a0:18:cc:f9:75:72:62:f0:ca:5e: 84:1a:26:93:1c:25:55:fb:2d:b6:16:09:a4:86:f8:79:39:81: da:44:43:5a:12:6a:21:58:eb:cf:aa:4b:a0:85:00:8c:21:44: 6c:8e:ad:c2:7c:92:c0:9d:40:45:bf:3b:a3:05:99:dd:98:ea: b8:b3:1d:36:c5:dd:1b:d9:48:57:d9:6b:cc:1c:77:c6:e3:a9: 8f:ba:ba:c5:53:47:4d:20:ab:8b:be:80:10:70:29:eb:8f:90: 62:46:bf:b7:58:50:f2:38:24:ec:98:a1:26:eb:de:70:5a:69: 79:50:de:8d:ca:e7:f4:1a:c0:cd:e8:bf:bf:7c:a6:03:61:3f: 83:f3:61:d9:c7:9a:54:45:e7:c9:a6:61:54:62:8a:e1:6c:4e: 24:95:ba:b8:5f:f8:4b:ac:02:b6:2f:53:f0:86:7d:8c:19:64: ee:67:90:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUxMTA1MDEzNDI1WhcNMjUxMTEyMDEzNDI1WjAYMRYwFAYD VQQDEw02OTBhYTlhMS03NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gEn3YFrH4jC03ohqFUCa3zDtI63NS64Nn3o/G8cryPwsmjMns12RJdekeMX sVbg/VMgjLtuk/mIWPlIUQ6nF2znyYi8WP3HxpDbxD6zK7u+yEyJ3KJJXaZbtKzk L2u6E6GEW7r1sCb7JoNTG6KPCv3WcNnm7zJi41cQ03s6ksY2KlYm3sR6gpVHYnYb 9TFru6bTOHA7S1J9dU6G/dRAqpiwqgW7LMNeB7+abWG/hkdVX8upALtnm1z8ysbz jjvh1bxSvPfu34LNXTaDcHYASl/F9mGIjHyhmE+BLuEaxPjjfF18w9OYw4LD9g7g rK5QMi4KQl3SngXlPYPGzV/oSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhmnUl6 BhSPP/f9jCj+QjFwbW9EMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaboYeV+Q/wyy7gccmGY2baipk4IvM/Y+5ZjLdqezfpCTeKYT0mMqT D+T23NCY9S/DyHU1ETzlr1TEsxbK86jq164etz/ycWGDjHwzHq/XVKAYzPl1cmLw yl6EGiaTHCVV+y22Fgmkhvh5OYHaRENaEmohWOvPqkughQCMIURsjq3CfJLAnUBF vzujBZndmOq4sx02xd0b2UhX2WvMHHfG46mPurrFU0dNIKuLvoAQcCnrj5BiRr+3 WFDyOCTsmKEm695wWml5UN6Nyuf0GsDN6L+/fKYDYT+D82HZx5pURefJpmFUYorh bE4klbq4X/hLrAK2L1Pwhn2MGWTuZ5DK -----END CERTIFICATE-----Generated at Wed Nov 5 20:56:38 2025 by rpki-client