$ rpki-client -vvf rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft File: F_RkaDqcrP_uOS3atV7AQQwpaqE.mft (raw, json) Hash identifier: jKp07xr5pwzqDlKVYjOneZ6xVU6fIu2CwKtnYkbcYWk= Subject key identifier: 11:6B:1D:D9:2E:6E:CC:8E:EA:D6:54:3C:B4:50:FE:E3:B2:E1:92:D6 Authority key identifier: 17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1 Certificate issuer: /CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft Manifest number: 0220 Signing time: Wed 05 Nov 2025 02:15:35 +0000 Manifest this update: Wed 05 Nov 2025 02:15:35 +0000 Manifest next update: Wed 12 Nov 2025 02:15:35 +0000 Files and hashes: 1: F_RkaDqcrP_uOS3atV7AQQwpaqE.crl (hash: cH6Nz/rsSptcbYGqWkt6/JCQQnGOe+WbziD4rW3ylGU=) 2: 6F873B3A7CD211EDA61A1836C4F9AE02.roa (hash: elMEoeZr1kMxHEzZvAxYI3biX1cRxKVaLlWrHacBWyE=) 3: 6EFEE12C7CD211EDA61A1836C4F9AE02.roa (hash: mnezjCyzKusiAqMtaUmdzOLSoLAbXHzaPhqGAX/1w/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911549E, serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1 Validity Not Before: Nov 5 02:15:35 2025 GMT Not After : Nov 12 02:15:35 2025 GMT Subject: CN=690ab347-6d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:63:b2:37:bb:ff:c8:8b:82:6d:b9:da:d6: a9:7d:d9:7b:33:51:50:a4:ef:d0:d1:8b:f8:80:7a: 84:76:66:5f:8d:38:ee:14:ac:87:dd:71:ea:07:22: 39:14:32:51:60:75:d9:e1:29:1d:41:7b:55:c9:1c: e2:28:23:98:de:51:b4:5d:63:38:0c:4b:fe:77:61: 65:19:0d:25:34:fa:ed:bb:be:88:c3:67:08:b1:bc: 1b:1a:98:b9:0c:f6:04:f8:99:7d:eb:a5:e4:ba:a6: 41:97:32:f8:5f:01:55:c2:35:fc:65:40:6d:31:be: 12:03:17:96:d9:2f:a8:2d:c8:fd:65:ed:77:1a:3a: e4:b1:81:89:1a:0d:58:f1:f4:b5:16:1c:4f:03:2f: 6a:76:98:93:d9:8c:c9:25:0f:ca:88:05:de:50:c2: 9c:25:ac:f6:b7:a3:2c:5e:f0:4a:b6:18:63:e3:68: 09:40:2c:80:74:d2:a4:44:89:85:f4:2d:96:b5:3c: 62:c8:f7:45:30:f2:ad:a0:c7:88:c4:93:16:5e:8b: 88:1a:f5:ce:6d:c5:91:49:1d:f4:6d:c2:27:e8:06: 06:35:db:14:78:ac:12:a0:89:39:2f:98:e8:c9:44: d3:6f:d0:b2:a1:34:58:ab:4d:18:0d:ff:35:1e:de: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:1D:D9:2E:6E:CC:8E:EA:D6:54:3C:B4:50:FE:E3:B2:E1:92:D6 X509v3 Authority Key Identifier: keyid:17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:8a:2f:a5:d9:61:28:01:da:6a:11:20:ee:75:50:42:9a:79: 85:5d:09:b4:5f:43:3e:9d:50:c3:4e:93:f4:4d:27:bc:86:c0: 7f:d7:56:dc:e1:b8:41:e1:df:7a:d3:b5:a7:d6:02:25:de:25: 1f:5e:fa:f2:57:1a:aa:c0:da:03:2c:94:db:82:39:d5:6f:b5: e5:81:e3:97:ff:69:26:2c:64:57:14:d6:d3:91:a9:53:a4:d9: 09:33:cf:de:2a:27:e5:1a:cf:20:9f:74:9f:ab:8f:ba:28:5e: 4d:50:29:ab:a8:da:40:9c:0a:e6:81:ea:be:62:03:33:68:be: 5a:dd:a2:3e:1b:80:8c:8f:19:8c:68:7a:d5:b4:5e:d0:da:82: a0:90:a6:fe:92:ec:a3:07:af:d0:e6:45:b0:69:f6:7d:f7:0a: 96:85:fa:c5:82:62:65:76:85:67:50:9a:c8:0c:11:7b:35:35: d3:6e:25:76:d0:78:2f:5f:4e:a2:5b:4d:69:ee:f3:1e:cd:90: c8:06:ed:68:e3:52:63:84:1b:b6:4b:0e:c9:09:26:ea:37:03: e3:e9:00:fe:ad:83:06:2f:80:99:17:0c:68:0c:23:fb:7e:03: 4e:f3:54:59:2e:3c:e3:ec:80:46:28:01:da:72:80:7b:b9:8c: 2e:c7:6b:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0OUUxMTAvBgNVBAUTKDE3RjQ2NDY4M0E5Q0FDRkZFRTM5MkREQUI1NUVDMDQx MEMyOTZBQTEwHhcNMjUxMTA1MDIxNTM1WhcNMjUxMTEyMDIxNTM1WjAYMRYwFAYD VQQDEw02OTBhYjM0Ny02ZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxydjsje7/8iLgm252tapfdl7M1FQpO/Q0Yv4gHqEdmZfjTjuFKyH3XHqByI5 FDJRYHXZ4SkdQXtVyRziKCOY3lG0XWM4DEv+d2FlGQ0lNPrtu76Iw2cIsbwbGpi5 DPYE+Jl966XkuqZBlzL4XwFVwjX8ZUBtMb4SAxeW2S+oLcj9Ze13GjrksYGJGg1Y 8fS1FhxPAy9qdpiT2YzJJQ/KiAXeUMKcJaz2t6MsXvBKthhj42gJQCyAdNKkRImF 9C2WtTxiyPdFMPKtoMeIxJMWXouIGvXObcWRSR30bcIn6AYGNdsUeKwSoIk5L5jo yUTTb9CyoTRYq00YDf81Ht6BowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFrHdku bsyO6tZUPLRQ/uOy4ZLWMB8GA1UdIwQYMBaAFBf0ZGg6nKz/7jkt2rVewEEMKWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ5RS9CMjI1QjE5QzdD Q0QxMUVEOUY4RTBCMkZDNEY5QUUwMi9GX1JrYURxY3JQX3VPUzNhdFY3QVFRd3Bh cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfUmthRHFjclBfdU9TM2F0VjdBUVF3cGFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ5RS9CMjI1QjE5QzdDQ0QxMUVEOUY4RTBCMkZDNEY5QUUwMi9GX1JrYURxY3JQ X3VPUzNhdFY3QVFRd3BhcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARii+l2WEoAdpqESDudVBCmnmFXQm0X0M+nVDDTpP0TSe8hsB/11bc 4bhB4d9607Wn1gIl3iUfXvryVxqqwNoDLJTbgjnVb7XlgeOX/2kmLGRXFNbTkalT pNkJM8/eKiflGs8gn3Sfq4+6KF5NUCmrqNpAnArmgeq+YgMzaL5a3aI+G4CMjxmM aHrVtF7Q2oKgkKb+kuyjB6/Q5kWwafZ99wqWhfrFgmJldoVnUJrIDBF7NTXTbiV2 0HgvX06iW01p7vMezZDIBu1o41JjhBu2Sw7JCSbqNwPj6QD+rYMGL4CZFwxoDCP7 fgNO81RZLjzj7IBGKAHacoB7uYwux2vR -----END CERTIFICATE-----Generated at Wed Nov 5 22:34:34 2025 by rpki-client