$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json) Hash identifier: quCQrtzaab9RJ8ULnS3vTkQ+GdlNh27opI8JUb8kzis= Subject key identifier: 20:A3:F3:8A:3B:D5:E8:87:93:21:E0:41:9E:2F:C1:70:5B:9C:8F:C9 Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft Manifest number: 0786 Signing time: Sun 02 Nov 2025 21:31:15 +0000 Manifest this update: Sun 02 Nov 2025 21:31:15 +0000 Manifest next update: Sun 09 Nov 2025 21:31:15 +0000 Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 6EYJFUWVKWOX7fMdJ3b2FJaAI7HBtZsadh5i8I3fT28=) 2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=) 3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=) 4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: Nov 2 21:31:15 2025 GMT Not After : Nov 9 21:31:15 2025 GMT Subject: CN=6907cda3-5e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:28:c8:a0:1f:07:ed:95:1d:9c:6a:f3:7b:97: 23:1a:60:d0:47:c7:5f:e9:15:0c:1b:ba:91:de:4d: e8:3a:91:68:ab:65:24:3a:69:36:e9:a4:a2:03:68: 3c:de:d2:14:2c:cf:c8:86:10:33:8c:0b:34:e8:71: 6a:6d:8d:07:59:5c:0d:fa:fe:17:59:cb:73:8f:82: f9:36:75:46:6c:c0:a3:21:47:47:56:02:9b:82:e3: 44:4d:23:bf:8d:9e:b4:cd:cf:fc:10:1c:29:15:d2: e0:03:f8:2d:8f:2c:93:ca:fd:43:c9:33:f7:83:95: 0d:68:52:62:47:b5:11:f8:05:d9:19:1d:02:98:36: 34:4b:02:99:a9:76:a4:98:63:24:2e:f0:34:19:58: 54:e2:47:8b:c3:60:3b:aa:98:07:6b:d6:24:fd:80: f5:42:df:36:4e:e1:f3:4f:c3:f4:13:70:52:3c:41: f3:64:5d:01:52:80:01:d3:74:91:bd:66:25:0a:30: 35:b3:e8:c1:41:47:55:37:8d:e4:f0:5a:06:64:78: 98:83:29:49:63:7f:dd:0c:6d:0f:27:ff:af:45:d2: c4:13:9e:02:9b:60:bf:d6:e4:79:c1:b9:de:60:7b: 10:ce:d3:a5:86:3b:bb:5d:fe:08:f3:63:35:b0:28: fc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A3:F3:8A:3B:D5:E8:87:93:21:E0:41:9E:2F:C1:70:5B:9C:8F:C9 X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:32:1f:c2:6c:65:32:04:d9:90:82:6d:fd:f6:e0:84:42:b5: ad:de:68:b5:62:2a:30:27:dd:3b:93:30:cd:09:8f:9f:b7:6f: 8a:8a:62:89:18:ac:63:ca:a6:78:85:a1:fb:a2:48:d2:ff:3e: 86:63:36:f5:62:4f:1c:62:32:f3:f4:bb:82:09:e8:6a:68:78: e1:14:91:dc:ff:09:88:de:31:1e:68:35:e7:d1:23:a7:0b:9a: 95:49:13:3c:b5:5c:fa:d0:d6:3f:6d:84:de:77:a4:0a:5c:3e: e2:b4:c6:6f:4a:b5:70:b9:f2:ef:20:62:a9:db:4b:82:54:6f: 17:bb:ee:de:fa:c1:d9:e5:b6:99:9e:d8:44:33:59:60:d2:43: 9a:ef:e9:50:50:22:f5:84:d7:ab:2c:ed:d4:c4:ab:04:57:8c: 74:8b:a4:a0:8a:7e:ce:38:bf:bd:62:b7:59:d2:a2:5e:31:3d: 1a:c8:a5:1d:c5:ce:2a:92:e5:3e:96:33:b5:12:97:ec:ee:6c: 21:46:ea:c1:de:58:85:0d:6f:1c:77:c4:b9:3e:c6:ac:86:6a: 16:02:97:21:01:aa:32:a4:48:cf:d4:f5:4e:cc:a3:59:90:fa: 0e:e4:20:e1:13:76:dd:78:16:52:8e:01:e2:c0:89:02:90:20: 39:ec:4c:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjUxMTAyMjEzMTE1WhcNMjUxMTA5MjEzMTE1WjAYMRYwFAYD VQQDEw02OTA3Y2RhMy01ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yjIoB8H7ZUdnGrze5cjGmDQR8df6RUMG7qR3k3oOpFoq2UkOmk26aSiA2g8 3tIULM/IhhAzjAs06HFqbY0HWVwN+v4XWctzj4L5NnVGbMCjIUdHVgKbguNETSO/ jZ60zc/8EBwpFdLgA/gtjyyTyv1DyTP3g5UNaFJiR7UR+AXZGR0CmDY0SwKZqXak mGMkLvA0GVhU4keLw2A7qpgHa9Yk/YD1Qt82TuHzT8P0E3BSPEHzZF0BUoAB03SR vWYlCjA1s+jBQUdVN43k8FoGZHiYgylJY3/dDG0PJ/+vRdLEE54Cm2C/1uR5wbne YHsQztOlhju7Xf4I82M1sCj8jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCj84o7 1eiHkyHgQZ4vwXBbnI/JMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5 TGllWUtXbHBlRm90ZDljMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Mh/CbGUyBNmQgm399uCEQrWt3mi1YiowJ907kzDNCY+ft2+KimKJ GKxjyqZ4haH7okjS/z6GYzb1Yk8cYjLz9LuCCehqaHjhFJHc/wmI3jEeaDXn0SOn C5qVSRM8tVz60NY/bYTed6QKXD7itMZvSrVwufLvIGKp20uCVG8Xu+7e+sHZ5baZ nthEM1lg0kOa7+lQUCL1hNerLO3UxKsEV4x0i6Sgin7OOL+9YrdZ0qJeMT0ayKUd xc4qkuU+ljO1Epfs7mwhRurB3liFDW8cd8S5PsashmoWApchAaoypEjP1PVOzKNZ kPoO5CDhE3bdeBZSjgHiwIkCkCA57Exi -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:04 2025 by rpki-client