$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: 1OWnmBKKArTTriFVQG5fvs/VUBGxl66EKfoeMYuOCuM= Subject key identifier: 01:80:E5:F6:ED:37:7A:AD:89:33:7D:65:53:CB:8C:D2:50:B8:4C:EC Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 010C Signing time: Wed 05 Nov 2025 05:04:39 +0000 Manifest this update: Wed 05 Nov 2025 05:04:38 +0000 Manifest next update: Wed 12 Nov 2025 05:04:38 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: NENuHdq96eyK0c+lLWgMwO6r0nGFP9KeR1Uyeogc3fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Nov 5 05:04:38 2025 GMT Not After : Nov 12 05:04:38 2025 GMT Subject: CN=690adae7-fd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:32:af:2d:62:55:e4:77:aa:e4:a6:11:dd: 38:07:d5:6f:5a:7d:6d:f3:52:68:4c:c4:ec:83:aa: 4b:d6:e3:ae:3d:51:26:e3:02:35:b5:d5:19:16:f9: 58:5c:19:47:6f:65:6c:fb:30:30:2b:3d:14:6c:33: bd:ab:30:98:f5:be:94:8a:9a:bc:d9:c8:90:96:f0: 0c:9b:c9:5b:ae:ee:09:5a:d0:6d:fb:5d:83:c5:a9: 4f:76:ce:9a:5b:44:55:1c:33:b2:2b:79:14:c1:e4: 33:64:30:34:83:45:b2:8b:17:cd:fa:34:2d:38:b2: 09:49:5c:37:60:ea:39:68:c9:ed:aa:b5:6f:60:b6: 9d:30:e1:6b:ec:b4:54:50:d9:90:37:74:c7:a1:6d: 44:e4:21:00:36:9a:aa:0d:66:9f:35:59:95:d3:b1: 23:5e:48:87:9f:0f:46:5b:a5:0c:17:0b:cb:a1:d4: 87:d3:a5:a0:e9:df:00:23:cf:2a:c9:93:b9:2c:00: 95:c7:55:53:8c:55:8b:ac:67:09:1e:c1:cf:9a:d8: ae:8d:ef:be:7c:e0:cd:83:17:e3:8d:f6:63:9e:08: 27:eb:9a:13:38:ff:7b:69:a4:32:50:6e:21:d7:b7: d1:bd:b6:56:76:da:5e:9a:97:c5:d8:e4:2b:34:2d: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:80:E5:F6:ED:37:7A:AD:89:33:7D:65:53:CB:8C:D2:50:B8:4C:EC X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7f:8e:67:32:2e:f4:c9:2a:6e:5f:0e:57:d9:b0:50:a9:b9: f8:76:be:9f:33:57:eb:31:35:a1:ce:95:70:9a:d5:9e:95:c5: 3e:b7:87:81:ba:e3:c2:37:21:77:5d:e8:2d:4f:3c:4c:f5:f5: a7:69:0d:c4:28:5b:57:49:da:31:50:e2:49:4b:58:21:34:b4: a7:da:05:61:df:ce:6d:07:9b:2d:68:d8:3a:39:c2:df:5e:54: 0f:43:35:9a:46:ef:ee:7f:79:37:b3:3f:6f:d4:b2:f2:f3:b0: 36:85:19:59:bb:dc:3c:24:91:be:f1:02:67:96:d6:da:48:1b: 45:a2:8e:a1:55:7e:30:f1:fe:84:5c:77:8c:db:ab:16:dd:c7: 4c:76:ec:ae:c5:e9:ce:a6:35:e8:8a:aa:a6:ae:cf:e3:f7:46: 0f:d7:17:26:cc:36:9c:e0:f8:cf:12:eb:5e:64:92:e1:73:73: 77:30:90:79:b5:59:20:3f:21:7e:a0:74:bd:0f:78:a4:ac:23: a8:0a:5f:a5:b6:89:95:20:84:cc:e8:6e:4e:65:4e:da:cb:5f: ef:35:75:82:fe:c2:55:8b:77:c9:4d:41:9f:9a:f6:04:fb:ef: e7:cc:da:c6:31:d4:16:62:32:05:7a:cf:25:e1:4c:1b:4c:87: c4:9f:66:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUxMTA1MDUwNDM4WhcNMjUxMTEyMDUwNDM4WjAYMRYwFAYD VQQDEw02OTBhZGFlNy1mZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxAyry1iVeR3quSmEd04B9VvWn1t81JoTMTsg6pL1uOuPVEm4wI1tdUZFvlY XBlHb2Vs+zAwKz0UbDO9qzCY9b6Uipq82ciQlvAMm8lbru4JWtBt+12DxalPds6a W0RVHDOyK3kUweQzZDA0g0WyixfN+jQtOLIJSVw3YOo5aMntqrVvYLadMOFr7LRU UNmQN3THoW1E5CEANpqqDWafNVmV07EjXkiHnw9GW6UMFwvLodSH06Wg6d8AI88q yZO5LACVx1VTjFWLrGcJHsHPmtiuje++fODNgxfjjfZjnggn65oTOP97aaQyUG4h 17fRvbZWdtpempfF2OQrNC0dcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGA5fbt N3qtiTN9ZVPLjNJQuEzsMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtf45nMi70ySpuXw5X2bBQqbn4dr6fM1frMTWhzpVwmtWelcU+t4eB uuPCNyF3XegtTzxM9fWnaQ3EKFtXSdoxUOJJS1ghNLSn2gVh385tB5staNg6OcLf XlQPQzWaRu/uf3k3sz9v1LLy87A2hRlZu9w8JJG+8QJnltbaSBtFoo6hVX4w8f6E XHeM26sW3cdMduyuxenOpjXoiqqmrs/j90YP1xcmzDac4PjPEuteZJLhc3N3MJB5 tVkgPyF+oHS9D3ikrCOoCl+ltomVIITM6G5OZU7ay1/vNXWC/sJVi3fJTUGfmvYE ++/nzNrGMdQWYjIFes8l4UwbTIfEn2Y3 -----END CERTIFICATE-----Generated at Thu Nov 6 03:52:55 2025 by rpki-client