$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: xNcKtUIBh8no7J2f/5YaAxylbFqYAt8l5IT63XYBboU= Subject key identifier: 7B:94:C1:36:33:C9:B2:2B:87:6D:6B:68:9F:F6:78:11:83:02:81:D3 Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 0503 Signing time: Tue 04 Nov 2025 23:44:16 +0000 Manifest this update: Tue 04 Nov 2025 23:44:15 +0000 Manifest next update: Tue 11 Nov 2025 23:44:15 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: 5JavXM+DqfFDOnPXca8w8AYw2IQEJ+r3bqkr7snEMK0=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: prBekR9LUayidaAK9GSYWyVHKMLahKIDTDQ64hhVlAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Nov 4 23:44:15 2025 GMT Not After : Nov 11 23:44:15 2025 GMT Subject: CN=690a8fd0-67a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:c5:b2:42:dd:3c:22:00:13:a7:2b:bd:0a: 5c:37:e9:5e:d1:c7:a1:a1:cf:b0:db:26:e4:e5:4b: 1d:4b:04:16:9c:61:14:28:4d:44:0a:a6:e4:dc:c0: 84:34:8a:d3:8a:3e:36:96:8a:d9:4c:82:f2:e9:15: 26:8a:1f:75:25:bc:32:c5:06:02:50:9c:be:74:f3: cb:d9:a7:62:8d:4e:e6:e9:1f:f7:fd:34:8c:21:6a: 88:47:c0:fa:bb:11:5c:f1:93:68:4e:2b:98:3f:ba: bd:06:c5:b3:78:e5:61:04:f5:1d:58:5d:cf:07:f4: d2:dd:07:c4:4b:be:a7:ba:5f:2e:a6:5d:df:cc:38: ce:5d:c2:2d:47:3f:90:86:dc:f2:4d:fd:2a:aa:cb: 4f:de:89:52:e0:e1:51:29:a9:4a:90:48:46:bb:04: ce:8f:2d:02:8d:84:06:ca:24:3a:03:a2:24:12:85: 8e:6c:ec:38:82:f4:52:9e:91:c8:90:ec:45:dc:2c: e3:d1:d3:14:d5:ea:73:92:4c:07:6b:ec:3e:9c:82: 95:f1:90:7c:a2:a7:dd:3b:85:63:93:bc:dd:eb:d1: d8:61:62:27:68:4b:b9:45:23:3e:a3:0f:a9:51:9f: 0c:34:8b:d3:5d:71:a2:e7:86:67:9d:91:30:12:39: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:C1:36:33:C9:B2:2B:87:6D:6B:68:9F:F6:78:11:83:02:81:D3 X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c5:ad:85:fd:8a:44:4c:7a:73:18:9e:af:3e:34:38:ae:99: 10:f5:1d:4a:5b:01:29:15:66:20:aa:af:57:f8:5c:4f:5e:16: 14:97:e0:7e:8d:14:3e:3e:34:62:70:51:a3:d6:51:ce:38:e8: bd:98:d3:59:f2:f9:24:01:a5:a6:93:f3:6a:ef:13:37:55:63: 62:5c:86:ae:0d:72:e0:f2:26:3b:01:d2:40:6a:ad:69:ae:d3: 71:34:13:03:89:1d:58:43:0a:2c:09:d7:4a:f7:5d:89:e5:26: 5a:a5:2c:2c:0a:f7:7d:7b:b7:74:5b:e7:89:a6:3a:4f:b9:35: 27:b9:57:79:80:65:d9:6e:c5:bd:09:d1:7c:1b:43:5c:77:53: 07:cd:e9:f3:37:88:af:e0:4b:d9:35:e1:54:20:69:a4:d0:a3: 3c:5f:dc:72:06:03:ec:07:49:78:2c:3d:a6:75:b3:70:a7:bc: 53:e8:c4:76:fc:57:9a:b9:53:71:8b:ad:64:50:ba:cd:5f:fe: fa:c6:9d:b8:de:90:4b:e2:71:19:eb:59:50:61:7a:16:25:cc: 92:7a:c2:5f:79:60:f1:b9:7c:5f:72:82:b5:18:73:05:1e:57: e9:35:16:c3:21:38:a4:7a:44:d9:6c:e3:f9:38:8f:77:c9:aa: 46:11:8f:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUxMTA0MjM0NDE1WhcNMjUxMTExMjM0NDE1WjAYMRYwFAYD VQQDEw02OTBhOGZkMC02N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtrFskLdPCIAE6crvQpcN+le0cehoc+w2ybk5UsdSwQWnGEUKE1ECqbk3MCE NIrTij42lorZTILy6RUmih91JbwyxQYCUJy+dPPL2adijU7m6R/3/TSMIWqIR8D6 uxFc8ZNoTiuYP7q9BsWzeOVhBPUdWF3PB/TS3QfES76nul8upl3fzDjOXcItRz+Q htzyTf0qqstP3olS4OFRKalKkEhGuwTOjy0CjYQGyiQ6A6IkEoWObOw4gvRSnpHI kOxF3Czj0dMU1epzkkwHa+w+nIKV8ZB8oqfdO4Vjk7zd69HYYWInaEu5RSM+ow+p UZ8MNIvTXXGi54ZnnZEwEjnV9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuUwTYz ybIrh21raJ/2eBGDAoHTMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJxa2F/YpETHpzGJ6vPjQ4rpkQ9R1KWwEpFWYgqq9X+FxPXhYUl+B+ jRQ+PjRicFGj1lHOOOi9mNNZ8vkkAaWmk/Nq7xM3VWNiXIauDXLg8iY7AdJAaq1p rtNxNBMDiR1YQwosCddK912J5SZapSwsCvd9e7d0W+eJpjpPuTUnuVd5gGXZbsW9 CdF8G0Ncd1MHzenzN4iv4EvZNeFUIGmk0KM8X9xyBgPsB0l4LD2mdbNwp7xT6MR2 /FeauVNxi61kULrNX/76xp243pBL4nEZ61lQYXoWJcySesJfeWDxuXxfcoK1GHMF HlfpNRbDITikekTZbOP5OI93yapGEY8c -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:25 2025 by rpki-client