$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: fnOwtQ2SVfndWfltxCdXGtsIPh8mLP3AX9owQAdit6I= Subject key identifier: 7A:4A:0A:E2:9E:C3:FB:FA:7C:35:76:36:FA:D2:E1:A3:0C:D1:66:9C Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 0201 Signing time: Mon 03 Nov 2025 02:24:07 +0000 Manifest this update: Mon 03 Nov 2025 02:24:06 +0000 Manifest next update: Mon 10 Nov 2025 02:24:06 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: wUJ8p2Mv5lCGP+rGDWKOMmfkRzeLa7SvJLOK5iiAZAQ=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: sZLM9dSUcucufQMax9H1Edh8mrh+cYvOCFePwEcH86c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Nov 3 02:24:06 2025 GMT Not After : Nov 10 02:24:06 2025 GMT Subject: CN=69081246-85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:7c:e5:cb:5c:0c:c7:6c:6c:8f:3e:b0:d7: 5b:b8:81:ff:34:50:1c:82:3c:ce:5a:89:36:b1:be: d9:e0:fc:e0:4d:6a:fc:d8:52:71:71:85:04:67:84: 3c:72:68:79:68:3e:1d:d8:87:14:81:bc:02:80:9b: 3c:17:a2:47:e9:45:ba:da:b1:e4:4b:ec:34:1b:f6: 7a:4d:46:1d:c6:11:ec:ca:4f:0c:d3:40:53:68:c1: c5:0c:a0:11:96:44:55:1e:ad:8f:df:2e:3b:bc:53: e3:24:e2:d1:f4:b7:bc:1f:1c:9c:6f:8b:36:c6:3f: c6:4f:2b:43:1c:ce:dc:40:0a:18:36:05:75:d1:29: 9e:ff:60:b1:4e:54:6d:c8:a4:07:54:c1:40:ff:35: 09:c7:e4:ec:dc:c5:ca:97:59:36:18:9b:5a:21:00: 81:5d:40:62:b3:00:98:76:f0:63:95:b1:b8:59:30: 9e:f4:11:64:4d:07:7a:d0:87:7e:b8:4e:2b:bf:5e: a4:af:ce:8d:d6:4d:61:35:64:90:e8:3f:ea:94:57: 80:30:55:f1:b0:ab:ec:c6:dc:f6:ca:bc:66:18:45: 27:05:ec:6e:2e:86:48:1a:6e:c9:78:60:bf:46:2c: b9:b3:97:78:36:24:3e:8f:88:c8:ed:76:aa:88:04: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4A:0A:E2:9E:C3:FB:FA:7C:35:76:36:FA:D2:E1:A3:0C:D1:66:9C X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2c:0e:26:7e:4a:03:fd:48:de:cc:fe:b4:ac:a1:0c:a4:a3: 76:f6:76:30:84:8b:ef:3d:cb:04:72:a6:32:a3:5b:be:8d:f7: f5:01:82:e8:5f:47:33:3a:48:09:46:70:11:df:58:4e:12:0e: 33:4a:52:60:ee:b0:ba:a1:e2:4f:16:2a:f8:d9:80:3d:48:d9: 68:cc:b0:94:51:b4:d5:71:4d:b2:2e:01:49:27:87:ed:0c:a4: c3:78:78:ff:2f:77:9d:62:89:a0:1b:09:b8:21:9c:aa:7a:0e: 25:90:a0:00:d8:54:82:81:6b:59:61:1e:4f:b3:0e:af:c4:b9: fb:ac:23:74:b5:b4:11:39:a7:47:ae:a0:c5:6d:24:77:74:c3: 43:8b:f7:f0:20:40:c2:6a:dd:6c:da:82:11:9b:be:6d:ed:05: d7:47:e9:dc:78:b2:ca:77:7c:6a:0c:a4:6b:5a:e2:59:a4:49: 40:9e:fe:ff:19:80:42:e3:bb:b1:c6:f3:10:a8:70:e2:60:b4: 43:76:42:df:7a:8c:6e:f1:17:d1:df:4c:8c:21:56:0f:b2:67: c6:07:32:0c:d0:87:10:9f:2e:84:fe:c6:79:b9:11:8c:55:0e: 50:d8:ee:14:78:fe:69:a9:1a:0f:a0:28:a5:64:df:13:8e:8d: 73:12:17:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjUxMTAzMDIyNDA2WhcNMjUxMTEwMDIyNDA2WjAYMRYwFAYD VQQDEw02OTA4MTI0Ni04NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAZ85ctcDMdsbI8+sNdbuIH/NFAcgjzOWok2sb7Z4PzgTWr82FJxcYUEZ4Q8 cmh5aD4d2IcUgbwCgJs8F6JH6UW62rHkS+w0G/Z6TUYdxhHsyk8M00BTaMHFDKAR lkRVHq2P3y47vFPjJOLR9Le8Hxycb4s2xj/GTytDHM7cQAoYNgV10Sme/2CxTlRt yKQHVMFA/zUJx+Ts3MXKl1k2GJtaIQCBXUBiswCYdvBjlbG4WTCe9BFkTQd60Id+ uE4rv16kr86N1k1hNWSQ6D/qlFeAMFXxsKvsxtz2yrxmGEUnBexuLoZIGm7JeGC/ Riy5s5d4NiQ+j4jI7XaqiAT/wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpKCuKe w/v6fDV2NvrS4aMM0WacMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaLA4mfkoD/UjezP60rKEMpKN29nYwhIvvPcsEcqYyo1u+jff1AYLo X0czOkgJRnAR31hOEg4zSlJg7rC6oeJPFir42YA9SNlozLCUUbTVcU2yLgFJJ4ft DKTDeHj/L3edYomgGwm4IZyqeg4lkKAA2FSCgWtZYR5Psw6vxLn7rCN0tbQROadH rqDFbSR3dMNDi/fwIEDCat1s2oIRm75t7QXXR+nceLLKd3xqDKRrWuJZpElAnv7/ GYBC47uxxvMQqHDiYLRDdkLfeoxu8RfR30yMIVYPsmfGBzIM0IcQny6E/sZ5uRGM VQ5Q2O4UeP5pqRoPoCilZN8Tjo1zEhfH -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:35 2025 by rpki-client