$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: Nun+5IKyUKpCiXNropn92kYTH5Zq02CUeCr7AZ6refU= Subject key identifier: 19:E2:5E:F9:5D:F6:5B:26:B7:4D:09:FE:AC:01:98:9D:C9:70:42:7A Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: 01F2 Signing time: Tue 04 Nov 2025 16:00:42 +0000 Manifest this update: Tue 04 Nov 2025 16:00:42 +0000 Manifest next update: Tue 11 Nov 2025 16:00:42 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: tFxa/r71QGV/gDABHTauqHdGDxbDyPw5bpKilahvncE=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Validity Not Before: Nov 4 16:00:42 2025 GMT Not After : Nov 11 16:00:42 2025 GMT Subject: CN=690a232a-1979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:0f:0b:ad:92:a7:d1:ae:18:da:bd:b3:d0: 3a:61:5c:fc:42:6d:5e:9a:a4:75:ea:94:31:15:52: 1e:6e:41:c2:a2:d9:0c:31:23:4b:96:cc:6e:b9:4b: 8d:4a:f1:dc:b3:4c:a5:da:c1:c7:e9:21:23:f5:6c: 8d:53:55:30:7b:0c:91:10:49:32:96:7d:88:ef:e1: 9f:9c:e3:50:34:9e:2e:80:08:a6:0c:10:83:31:1a: 36:1b:99:4f:6b:13:86:8a:71:b4:38:9e:29:ce:79: c9:23:49:0b:6b:86:14:5a:d1:90:e4:64:10:32:d1: 2d:8e:c6:02:25:72:a2:c7:67:d5:15:81:ba:21:54: fe:ad:b7:17:8a:4c:dc:21:f6:0c:d2:7f:51:79:0c: 6f:1e:e3:34:9a:22:09:af:d6:8b:6e:68:a9:bc:3b: 80:98:72:d8:66:74:83:e8:62:a1:76:95:49:de:a7: b0:b2:c6:a5:20:c3:30:27:a7:56:8c:67:b1:7f:ab: 45:bb:17:27:14:44:89:7a:63:a0:91:78:c1:bb:1a: c3:58:18:86:f4:a6:6d:6d:cb:41:8e:d4:c7:60:63: c5:02:0e:01:6c:93:22:f8:b2:c2:ef:6b:49:47:fc: 39:5e:4d:bd:29:f5:a7:de:bb:aa:02:a7:7a:a7:10: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E2:5E:F9:5D:F6:5B:26:B7:4D:09:FE:AC:01:98:9D:C9:70:42:7A X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:89:23:28:23:fd:1d:6c:e8:b2:21:ca:03:4a:e9:3c:d8:38: 07:b0:9a:d6:4d:db:ba:12:90:aa:0d:0a:55:59:9b:46:81:43: c8:a1:d6:88:c4:37:eb:f0:9f:31:13:6f:40:e8:cf:ee:55:cb: c5:24:04:9e:07:92:72:18:62:35:40:da:6e:d1:2d:27:4a:6a: b1:f7:df:1c:00:63:5f:20:f7:06:c6:63:76:75:52:5e:4b:cd: 2a:ae:dd:f7:0b:3e:1e:bf:da:7a:be:6d:6a:4f:b7:d0:01:84: 1d:aa:0f:42:63:cd:4c:4c:08:68:13:2a:7c:cc:35:11:87:64: 97:7b:ae:70:db:1d:a0:d8:7c:57:51:37:df:bb:6d:21:6c:e2: f9:1e:75:4d:2a:76:b3:4c:0b:cb:61:a3:c3:8b:4a:29:2a:25: 15:41:ad:98:c3:c1:b9:35:b7:fb:43:73:ab:0f:b6:72:5f:97: 40:93:90:82:7a:9d:ac:47:61:99:14:45:67:f3:95:7b:e2:d6: d3:b2:d6:61:b2:4b:79:0a:44:b3:a2:af:91:93:2c:0a:fb:90: d6:1a:86:fa:8c:97:2a:4f:f4:df:55:6b:60:6f:62:34:f9:73: f3:3c:c9:5a:d2:66:e4:9d:f8:b5:04:1a:ea:72:7d:a8:1a:ac: ea:be:ba:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjUxMTA0MTYwMDQyWhcNMjUxMTExMTYwMDQyWjAYMRYwFAYD VQQDEw02OTBhMjMyYS0xOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz60PC62Sp9GuGNq9s9A6YVz8Qm1emqR16pQxFVIebkHCotkMMSNLlsxuuUuN SvHcs0yl2sHH6SEj9WyNU1UwewyREEkyln2I7+GfnONQNJ4ugAimDBCDMRo2G5lP axOGinG0OJ4pznnJI0kLa4YUWtGQ5GQQMtEtjsYCJXKix2fVFYG6IVT+rbcXikzc IfYM0n9ReQxvHuM0miIJr9aLbmipvDuAmHLYZnSD6GKhdpVJ3qewssalIMMwJ6dW jGexf6tFuxcnFESJemOgkXjBuxrDWBiG9KZtbctBjtTHYGPFAg4BbJMi+LLC72tJ R/w5Xk29KfWn3ruqAqd6pxBetQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBniXvld 9lsmt00J/qwBmJ3JcEJ6MB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByiSMoI/0dbOiyIcoDSuk82DgHsJrWTdu6EpCqDQpVWZtGgUPIodaI xDfr8J8xE29A6M/uVcvFJASeB5JyGGI1QNpu0S0nSmqx998cAGNfIPcGxmN2dVJe S80qrt33Cz4ev9p6vm1qT7fQAYQdqg9CY81MTAhoEyp8zDURh2SXe65w2x2g2HxX UTffu20hbOL5HnVNKnazTAvLYaPDi0opKiUVQa2Yw8G5Nbf7Q3OrD7ZyX5dAk5CC ep2sR2GZFEVn85V74tbTstZhskt5CkSzoq+RkywK+5DWGob6jJcqT/TfVWtgb2I0 +XPzPMla0mbknfi1BBrqcn2oGqzqvrqz -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:30 2025 by rpki-client