$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: rFUH3gfK+Z8QmKK4ZV8CPZ51/oDp0MEWD4L6OacL9GY= Subject key identifier: 2D:E9:39:EE:A5:FB:19:06:1B:E1:F6:D3:8A:E5:DC:60:55:B0:BE:E6 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 0853 Signing time: Sun 02 Nov 2025 20:40:09 +0000 Manifest this update: Sun 02 Nov 2025 20:40:08 +0000 Manifest next update: Sun 09 Nov 2025 20:40:08 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: ZOts8EWXbdav5FI0vykEZypq3FA35+OswK3QMVYYOsc=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: y//kTgBCu8ds1cgaGUUv5fTwfVuBn5T3llDXWqV3GRs=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: Koez5aai5hyPFgaFmxx5YzeOBoMBdmjCYKXC5XMX7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Nov 2 20:40:08 2025 GMT Not After : Nov 9 20:40:08 2025 GMT Subject: CN=6907c1a8-33f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:56:0c:54:ca:c3:5a:b5:06:00:31:e9:c7: 65:37:db:ec:61:1e:0e:25:a5:09:03:8e:69:a1:5c: 9e:12:06:1b:df:18:fe:b8:03:18:6b:22:01:c1:73: 35:1c:6b:0c:b6:06:f4:95:e8:61:18:6d:83:3f:c7: 73:65:97:d3:db:c9:7f:67:79:85:83:8e:64:bd:56: fe:49:de:d5:1a:54:76:c0:0b:f0:27:91:b8:06:e8: 0f:1f:18:d0:be:5d:4b:6c:91:d3:b2:9b:1d:80:89: 6d:47:88:09:ea:59:07:08:44:1f:20:cc:48:78:77: b2:94:9d:6d:49:42:52:9f:4a:09:f7:c4:31:f6:07: b4:d1:9b:4a:a9:a4:7e:0e:da:75:65:19:d1:17:97: 94:9a:01:0e:0d:20:b5:0b:af:1e:8c:53:9c:9e:1f: c3:e7:7c:d3:d4:ee:bf:51:b7:8c:32:64:62:c7:91: 71:cb:f7:9b:89:4b:24:b4:ea:bd:75:04:7f:10:73: 57:28:b0:61:4e:52:2c:ce:d1:08:0d:a5:84:2d:da: 50:3d:b0:d9:67:da:97:2c:18:aa:d1:0e:51:c2:6d: ca:5c:66:09:75:2c:06:48:8a:12:b6:30:c7:9c:07: ac:92:07:68:df:03:ea:94:db:94:41:4e:a2:76:ac: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E9:39:EE:A5:FB:19:06:1B:E1:F6:D3:8A:E5:DC:60:55:B0:BE:E6 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ad:25:11:59:e0:05:38:0c:90:04:20:27:c2:e3:99:ca:b6: 24:a5:a5:a7:ce:8f:0a:eb:f6:fc:ab:18:e3:3e:83:fd:7c:1e: 6b:5f:22:4e:64:d0:68:02:78:53:7c:32:ae:29:e1:85:60:a3: e0:d7:96:f6:04:1d:a4:d6:71:b3:e7:95:75:85:b4:d8:2d:61: c6:bb:97:3c:0b:65:98:d9:8c:a0:a6:01:c9:34:9a:07:4c:4e: b4:fe:3d:79:43:83:6b:aa:55:4a:4b:8c:30:73:52:1d:65:ee: e8:07:05:85:da:85:7c:90:78:15:75:00:60:83:b7:5d:d4:03: cd:4e:d9:61:30:e0:e0:16:b2:65:7d:05:bb:97:c2:3b:1d:68: ac:01:fc:00:43:28:ae:3d:bb:32:02:07:cb:7e:8a:c5:22:f0: 3b:f1:6f:93:79:30:29:99:41:10:13:bd:53:ef:e1:4c:e2:c1: 57:e2:19:d9:37:1e:c6:cf:15:dc:3f:e2:9d:a3:5c:42:34:45: 92:6d:2b:3e:5b:c2:1d:db:1c:f1:38:40:f7:da:8a:2e:02:67: e9:0d:f5:0d:25:77:ef:2e:c3:d4:6f:23:7a:6c:d9:1a:a8:c9: 5b:54:78:fd:76:82:d2:b9:6d:bb:36:6e:4a:d1:90:b6:fd:ea: 28:aa:a2:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjUxMTAyMjA0MDA4WhcNMjUxMTA5MjA0MDA4WjAYMRYwFAYD VQQDEw02OTA3YzFhOC0zM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlZWDFTKw1q1BgAx6cdlN9vsYR4OJaUJA45poVyeEgYb3xj+uAMYayIBwXM1 HGsMtgb0lehhGG2DP8dzZZfT28l/Z3mFg45kvVb+Sd7VGlR2wAvwJ5G4BugPHxjQ vl1LbJHTspsdgIltR4gJ6lkHCEQfIMxIeHeylJ1tSUJSn0oJ98Qx9ge00ZtKqaR+ Dtp1ZRnRF5eUmgEODSC1C68ejFOcnh/D53zT1O6/UbeMMmRix5Fxy/ebiUsktOq9 dQR/EHNXKLBhTlIsztEIDaWELdpQPbDZZ9qXLBiq0Q5Rwm3KXGYJdSwGSIoStjDH nAeskgdo3wPqlNuUQU6idqxahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3pOe6l +xkGG+H204rl3GBVsL7mMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3rSURWeAFOAyQBCAnwuOZyrYkpaWnzo8K6/b8qxjjPoP9fB5rXyJO ZNBoAnhTfDKuKeGFYKPg15b2BB2k1nGz55V1hbTYLWHGu5c8C2WY2YygpgHJNJoH TE60/j15Q4NrqlVKS4wwc1IdZe7oBwWF2oV8kHgVdQBgg7dd1APNTtlhMODgFrJl fQW7l8I7HWisAfwAQyiuPbsyAgfLforFIvA78W+TeTApmUEQE71T7+FM4sFX4hnZ Nx7GzxXcP+Kdo1xCNEWSbSs+W8Id2xzxOED32oouAmfpDfUNJXfvLsPUbyN6bNka qMlbVHj9doLSuW27Nm5K0ZC2/eooqqLZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:27 2025 by rpki-client