$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: 1PyDkTx1vXZxalJc1PLOSPSwGm1+ARLyveVXpmdoz74= Subject key identifier: BA:E9:4F:74:E7:3B:EC:B0:9C:C7:2B:A9:1A:17:F5:97:70:AD:3C:11 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1ABA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1AAF Signing time: Sun 02 Nov 2025 16:19:51 +0000 Manifest this update: Sun 02 Nov 2025 16:19:51 +0000 Manifest next update: Sun 09 Nov 2025 16:19:51 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: pEig4bXTqVOFzl5FPhSWx3xRfj7LV97m9iCR3VXtHNI=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: JDbo72SPqBZERT5W0ydUMhl3jfbjfWwgaMjrsH1k1kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6842 (0x1aba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Nov 2 16:19:51 2025 GMT Not After : Nov 9 16:19:51 2025 GMT Subject: CN=690784a7-4e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:54:44:d1:05:7f:32:f1:5a:c4:78:d3:63:c2: 9b:68:b1:d8:2a:70:63:4d:cf:de:c0:56:e0:09:17: ec:e8:f2:1a:06:0d:27:88:ff:77:90:24:96:6d:cc: fb:1f:c9:a9:10:b7:ea:61:e3:f2:92:2b:8f:ec:88: 24:88:05:43:d4:c3:7d:c7:e4:86:5e:1a:93:e1:7c: c2:01:5e:21:30:6f:09:7e:2a:88:91:2c:1b:09:08: 1a:e1:73:4b:0a:fe:65:90:e6:a6:ea:60:d5:1e:46: 83:57:fb:f2:6c:6b:ec:2a:65:5a:6c:23:50:9b:e0: 1f:f2:75:87:23:50:c6:48:0f:a2:c9:94:01:f8:4e: b6:ae:22:9e:ab:15:cb:3a:c7:79:d5:10:1b:26:a5: c0:d6:e6:16:59:8e:86:21:c6:55:36:a1:73:57:08: a8:bf:e0:22:ae:6f:08:be:a1:a8:71:1c:60:c8:66: 6b:2b:42:cd:ef:73:2d:0f:da:ba:08:e9:36:fc:aa: e7:37:d5:94:03:80:ec:05:e3:b2:7d:ff:10:b9:bf: 49:aa:08:2c:aa:37:33:f7:10:51:67:a0:5c:6c:3c: c0:7d:f7:fd:8d:51:a0:9c:c3:42:03:dd:91:41:4b: 71:96:26:60:56:e5:64:bc:8d:5e:33:97:18:a3:90: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:4F:74:E7:3B:EC:B0:9C:C7:2B:A9:1A:17:F5:97:70:AD:3C:11 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:45:2c:8d:f1:1c:93:65:a5:2e:35:7a:7f:7b:c4:9c:2e:b4: 4d:35:f4:af:7f:59:f3:85:f9:65:c7:07:e0:cb:03:08:2d:38: 59:84:d8:bd:89:d0:df:03:e0:04:13:26:42:e2:cc:2b:60:5a: 6d:23:8f:27:10:3a:b0:9c:b6:78:77:0e:a9:02:67:4d:07:44: 70:14:f5:a4:94:4a:53:1c:d7:c4:20:a2:d1:51:0c:30:ad:04: 41:2c:2a:69:cf:e7:d2:fb:5e:88:95:c1:d3:36:ea:35:ce:69: 7d:cf:d5:28:41:d3:09:b2:72:ec:78:14:c2:5e:aa:37:51:dc: a9:76:f1:54:c2:0b:15:ae:ce:43:61:77:3f:5c:f7:8f:a3:6e: 0c:3d:78:bd:af:9c:13:f8:74:90:64:55:5c:90:e6:96:56:a2: 70:8e:1d:6e:05:55:f4:2d:88:15:b8:a1:97:11:3a:11:be:2e: 0f:c2:3c:9b:90:69:73:2f:1e:aa:27:cc:52:0e:c5:5e:89:1f: 82:46:25:34:35:a1:e2:80:f7:80:13:31:23:18:83:3c:06:d0: f2:81:6d:5f:9e:a1:4c:21:10:2f:bc:b6:e5:0b:1d:1e:49:a7: 6b:ac:d9:8b:db:57:e8:ad:88:e1:a0:c2:96:e0:64:6c:8d:ff: 2e:b9:4b:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUxMTAyMTYxOTUxWhcNMjUxMTA5MTYxOTUxWjAYMRYwFAYD VQQDEw02OTA3ODRhNy00ZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FRE0QV/MvFaxHjTY8KbaLHYKnBjTc/ewFbgCRfs6PIaBg0niP93kCSWbcz7 H8mpELfqYePykiuP7IgkiAVD1MN9x+SGXhqT4XzCAV4hMG8JfiqIkSwbCQga4XNL Cv5lkOam6mDVHkaDV/vybGvsKmVabCNQm+Af8nWHI1DGSA+iyZQB+E62riKeqxXL Osd51RAbJqXA1uYWWY6GIcZVNqFzVwiov+Airm8IvqGocRxgyGZrK0LN73MtD9q6 COk2/KrnN9WUA4DsBeOyff8Qub9Jqggsqjcz9xBRZ6BcbDzAfff9jVGgnMNCA92R QUtxliZgVuVkvI1eM5cYo5CtiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrpT3Tn O+ywnMcrqRoX9ZdwrTwRMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZRSyN8RyTZaUuNXp/e8ScLrRNNfSvf1nzhfllxwfgywMILThZhNi9 idDfA+AEEyZC4swrYFptI48nEDqwnLZ4dw6pAmdNB0RwFPWklEpTHNfEIKLRUQww rQRBLCppz+fS+16IlcHTNuo1zml9z9UoQdMJsnLseBTCXqo3UdypdvFUwgsVrs5D YXc/XPePo24MPXi9r5wT+HSQZFVckOaWVqJwjh1uBVX0LYgVuKGXEToRvi4Pwjyb kGlzLx6qJ8xSDsVeiR+CRiU0NaHigPeAEzEjGIM8BtDygW1fnqFMIRAvvLblCx0e SadrrNmL21forYjhoMKW4GRsjf8uuUvW -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:24 2025 by rpki-client