$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: vGLQkxZINtoQ32p7MIbWvY1yaU9MfKwJfXf6W5XOPEk= Subject key identifier: 30:D4:FD:D1:0B:50:62:77:A4:34:A4:8D:E2:99:3B:25:0A:3D:7B:F0 Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 09D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 09D5 Signing time: Tue 04 Nov 2025 15:03:01 +0000 Manifest this update: Tue 04 Nov 2025 15:03:00 +0000 Manifest next update: Tue 11 Nov 2025 15:03:00 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: QFQ2TeqwAekO9jXb9JAsWQmE4NTBRO6PVWDKvrk1JQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2517 (0x9d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Nov 4 15:03:00 2025 GMT Not After : Nov 11 15:03:00 2025 GMT Subject: CN=690a15a4-b0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:bc:64:32:c8:60:55:51:b0:34:ab:52:f2: 62:9e:ec:ec:a0:4e:74:1d:07:bc:64:9e:64:fb:d3: 53:9e:cc:54:63:43:62:bd:69:26:55:b3:39:98:79: b7:91:98:e4:98:65:49:6a:2b:46:91:05:18:3a:bc: fe:f8:fc:97:f7:25:f8:a1:0c:8c:75:44:fd:95:3b: cb:ec:e4:80:6c:6e:d5:5b:c0:89:0e:47:40:4d:f6: 09:cd:81:6f:7a:44:90:21:e3:69:bc:6f:be:ad:59: f9:56:64:21:76:4c:bf:b2:df:6d:17:cb:e7:0b:82: fc:3b:4d:80:42:df:c4:df:a7:f7:2e:30:5b:34:c9: f7:27:f8:78:81:65:74:95:57:0b:ba:51:be:41:a6: e7:1e:9e:c4:12:45:a4:06:dd:4a:dd:c0:4a:fb:6a: 2c:f5:35:c8:1e:20:9d:65:5e:c0:a3:10:49:37:59: fd:01:0f:07:76:5e:e7:14:9c:63:7c:1c:10:da:59: 26:4b:d7:b3:31:62:a4:de:ed:51:41:37:a8:07:c7: 96:db:c3:cf:f8:13:b1:d4:e6:92:cc:d1:7f:94:c3: 87:65:2a:e5:55:d6:40:7e:3a:99:d0:6d:4f:21:82: 5f:37:2a:05:e5:99:12:e5:67:5a:7e:b4:84:8a:6c: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D4:FD:D1:0B:50:62:77:A4:34:A4:8D:E2:99:3B:25:0A:3D:7B:F0 X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:5f:b2:45:88:67:b2:92:9f:b3:ef:5a:2e:6d:82:51:00:51: 1a:bf:c9:a5:33:12:f5:5a:bf:ef:f2:3b:ef:bc:6a:d5:40:53: 09:46:55:ef:19:60:1c:ac:6a:5e:eb:82:f7:fc:80:29:ff:a8: 99:ac:0c:01:d4:72:63:70:d5:b6:e4:01:78:1e:0b:73:ba:cb: 6b:5b:f8:96:92:a3:38:cc:5a:28:20:d3:ff:48:be:72:d4:be: e7:06:c9:e3:41:72:21:ec:ac:76:e1:7f:56:08:58:af:18:49: 5b:e0:29:b0:ad:de:66:27:e0:86:fe:17:89:15:25:5e:fb:4f: 5f:09:f1:e1:a0:92:3e:9a:ae:50:34:01:0c:75:35:54:4d:8c: 31:d1:1f:48:f1:04:c7:c2:5a:0d:b0:42:2b:83:a8:4c:1c:0a: 4a:13:74:9e:16:05:ec:e8:2b:69:12:94:24:2a:39:48:7d:01: 4b:b9:7f:52:a9:3a:3f:3f:b9:79:ee:80:45:a9:6c:95:d8:dc: 4a:b5:79:87:5c:bd:bb:4f:08:b3:70:09:38:58:d1:4a:30:bd: db:06:b1:58:61:99:97:ae:7e:3c:10:18:2c:5a:79:3a:ed:e2: 01:28:3f:a1:32:28:2a:92:88:83:cb:43:4f:ac:f3:1e:8a:61: 7a:c8:fd:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjUxMTA0MTUwMzAwWhcNMjUxMTExMTUwMzAwWjAYMRYwFAYD VQQDEw02OTBhMTVhNC1iMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LW8ZDLIYFVRsDSrUvJinuzsoE50HQe8ZJ5k+9NTnsxUY0NivWkmVbM5mHm3 kZjkmGVJaitGkQUYOrz++PyX9yX4oQyMdUT9lTvL7OSAbG7VW8CJDkdATfYJzYFv ekSQIeNpvG++rVn5VmQhdky/st9tF8vnC4L8O02AQt/E36f3LjBbNMn3J/h4gWV0 lVcLulG+QabnHp7EEkWkBt1K3cBK+2os9TXIHiCdZV7AoxBJN1n9AQ8Hdl7nFJxj fBwQ2lkmS9ezMWKk3u1RQTeoB8eW28PP+BOx1OaSzNF/lMOHZSrlVdZAfjqZ0G1P IYJfNyoF5ZkS5WdafrSEimxjCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDU/dEL UGJ3pDSkjeKZOyUKPXvwMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuX7JFiGeykp+z71oubYJRAFEav8mlMxL1Wr/v8jvvvGrVQFMJRlXv GWAcrGpe64L3/IAp/6iZrAwB1HJjcNW25AF4HgtzustrW/iWkqM4zFooINP/SL5y 1L7nBsnjQXIh7Kx24X9WCFivGElb4Cmwrd5mJ+CG/heJFSVe+09fCfHhoJI+mq5Q NAEMdTVUTYwx0R9I8QTHwloNsEIrg6hMHApKE3SeFgXs6CtpEpQkKjlIfQFLuX9S qTo/P7l57oBFqWyV2NxKtXmHXL27TwizcAk4WNFKML3bBrFYYZmXrn48EBgsWnk6 7eIBKD+hMigqkoiDy0NPrPMeimF6yP1R -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:45 2025 by rpki-client