$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json) Hash identifier: WSWlrCizzK96NMO0rd4kFai0+z05XTrkhC0iQcV6gpc= Subject key identifier: AA:B7:C0:85:2F:D2:BD:AD:50:99:68:1F:C1:EB:CC:C7:E3:4A:9B:C2 Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft Manifest number: 031A Signing time: Mon 03 Nov 2025 01:04:19 +0000 Manifest this update: Mon 03 Nov 2025 01:04:19 +0000 Manifest next update: Mon 10 Nov 2025 01:04:19 +0000 Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: gSRGRBrohWREMYZdfyKrpgF2adN20TRCB9j3Qk+6vmk=) 2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: X6/WL2Fb6NLT/TbbuE2SKgksYwkJEDYC9NLRzws0bWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Validity Not Before: Nov 3 01:04:19 2025 GMT Not After : Nov 10 01:04:19 2025 GMT Subject: CN=6907ff93-2b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:94:50:6e:c1:5f:df:fa:5e:91:2b:49:47: 63:b6:1e:d5:4f:8c:9b:f5:ac:2c:af:67:57:65:3f: 6b:7a:53:8f:fb:19:a2:7f:0e:94:d1:aa:91:ed:6d: 52:e1:22:81:dc:02:43:87:54:30:0c:15:08:b3:79: 80:5e:7d:b6:08:26:fd:7e:cb:39:58:79:31:0d:2d: f5:bd:18:f1:2d:26:c3:03:03:4a:75:9b:a8:c2:19: 1e:49:7c:4d:72:fc:7c:34:9f:91:73:cd:96:05:37: f4:3c:a5:54:aa:7b:4b:46:a0:83:25:bf:0e:b5:46: 10:39:8d:94:af:f3:98:4b:ee:a3:23:7f:d7:76:a9: 93:c8:68:64:39:c1:1a:fe:3f:d9:d5:bb:d3:3d:52: cb:b0:1a:e8:76:ba:37:fb:5c:08:fa:e3:a6:74:6c: e7:43:54:dd:14:bf:67:14:15:9f:ae:0a:10:e0:f5: a9:0b:bf:28:f1:1c:36:f6:fb:c9:7a:26:84:56:c3: c4:d9:10:49:6d:24:52:4e:e7:a1:e4:5b:05:2e:72: 3f:3b:a9:e3:0d:e8:80:b1:1d:8f:7e:0f:ea:4d:27: 3e:99:e5:79:88:7b:5a:a7:b6:8c:4c:34:8d:1f:73: 74:f4:a2:71:51:95:4c:8a:b0:61:f2:c9:a4:35:21: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B7:C0:85:2F:D2:BD:AD:50:99:68:1F:C1:EB:CC:C7:E3:4A:9B:C2 X509v3 Authority Key Identifier: keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ab:b4:e8:b9:c5:a8:85:c4:7f:b7:04:05:14:ba:a1:6e:8f: 96:36:07:3f:b7:b9:df:97:19:1f:9f:e0:d7:77:4b:bd:87:3a: bd:a1:9d:ea:7d:9c:fd:c2:f8:37:a0:47:a9:1d:28:e3:36:9a: 20:c2:57:4e:6a:eb:37:b5:39:fb:eb:3c:15:6a:80:c4:6e:c3: 3c:a5:d1:94:e9:a5:ec:63:6c:41:30:02:8f:b3:45:85:10:89: 34:8e:14:96:49:ed:68:30:5e:68:5b:b7:bb:b2:cc:c7:db:a1: 2c:a3:5b:1b:6a:39:a5:ef:0f:cc:21:41:81:b8:fd:2c:34:eb: 76:66:8e:ab:05:cb:93:03:a8:3a:cc:56:fd:88:2c:e4:4d:f0: 99:be:1b:65:81:dc:79:b2:3f:68:dd:1f:71:40:9a:fc:39:db: 02:be:eb:19:f9:25:4a:59:f9:c6:98:68:2e:70:08:ab:cf:d5: c6:0c:6e:35:2f:19:d5:09:2c:20:4e:ad:9d:a5:78:c8:de:40: a7:af:7c:a0:31:71:79:38:33:6e:02:fb:66:9b:bb:79:67:71: 09:d7:f4:e1:a8:7a:e3:10:10:fc:34:98:bf:b7:d2:3f:5e:c4: a3:f8:6f:ef:38:cb:24:8e:34:b0:d3:3a:9b:aa:37:1e:45:db: 3a:a8:b7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RTYxMTAvBgNVBAUTKDgxNUJGMEVFMjBBNURDQkEzMDU3QzNEMzVCNThFQzE0 NzcyRThGRUYwHhcNMjUxMTAzMDEwNDE5WhcNMjUxMTEwMDEwNDE5WjAYMRYwFAYD VQQDEw02OTA3ZmY5My0yYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkmUUG7BX9/6XpErSUdjth7VT4yb9awsr2dXZT9relOP+xmifw6U0aqR7W1S 4SKB3AJDh1QwDBUIs3mAXn22CCb9fss5WHkxDS31vRjxLSbDAwNKdZuowhkeSXxN cvx8NJ+Rc82WBTf0PKVUqntLRqCDJb8OtUYQOY2Ur/OYS+6jI3/XdqmTyGhkOcEa /j/Z1bvTPVLLsBrodro3+1wI+uOmdGznQ1TdFL9nFBWfrgoQ4PWpC78o8Rw29vvJ eiaEVsPE2RBJbSRSTueh5FsFLnI/O6njDeiAsR2Pfg/qTSc+meV5iHtap7aMTDSN H3N09KJxUZVMirBh8smkNSFUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq3wIUv 0r2tUJloH8HrzMfjSpvCMB8GA1UdIwQYMBaAFIFb8O4gpdy6MFfD01tY7BR3Lo/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFNi8zMjQ2RkU2RUVE NDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNMb3dWOFBUVzFqc0ZIY3Vq LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dWdnc3aUNsM0xvd1Y4UFRXMWpzRkhjdWotOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFNi8zMjQ2RkU2RUVENDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNM b3dWOFBUVzFqc0ZIY3VqLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgq7ToucWohcR/twQFFLqhbo+WNgc/t7nflxkfn+DXd0u9hzq9oZ3q fZz9wvg3oEepHSjjNpogwldOaus3tTn76zwVaoDEbsM8pdGU6aXsY2xBMAKPs0WF EIk0jhSWSe1oMF5oW7e7sszH26Eso1sbajml7w/MIUGBuP0sNOt2Zo6rBcuTA6g6 zFb9iCzkTfCZvhtlgdx5sj9o3R9xQJr8OdsCvusZ+SVKWfnGmGgucAirz9XGDG41 LxnVCSwgTq2dpXjI3kCnr3ygMXF5ODNuAvtmm7t5Z3EJ1/ThqHrjEBD8NJi/t9I/ XsSj+G/vOMskjjSw0zqbqjceRds6qLeP -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:56 2025 by rpki-client