$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json) Hash identifier: z9AWgircUZ5+qGcCzqRKIXZW/DBdGthZJqpEjmiqj1M= Subject key identifier: 37:E9:67:F9:CB:2A:0B:43:76:3B:E5:89:63:09:01:05:7C:06:B2:07 Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft Manifest number: 02BE Signing time: Wed 05 Nov 2025 01:33:57 +0000 Manifest this update: Wed 05 Nov 2025 01:33:56 +0000 Manifest next update: Wed 12 Nov 2025 01:33:56 +0000 Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: vZ1QdXU6N336xqSkdafQEeruBEj4C5zHyBe4CBr+7qk=) 2: 7C754058415411ED8133414DC4F9AE02.roa (hash: gLcQ/guwMKYVAXT6wLKnevx2zWGWLwzZoBVoVJPP2CI=) 3: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: xW+yKhl4DzZnOJoS6Xn0l4WHvXiDoALnGTFCf25+bew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Validity Not Before: Nov 5 01:33:56 2025 GMT Not After : Nov 12 01:33:56 2025 GMT Subject: CN=690aa985-3949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:f6:92:14:7e:63:f9:a2:8d:1d:e9:0e:07: f0:eb:63:aa:87:82:2c:b0:f2:6b:4e:b8:7e:4a:f6: bd:56:85:e0:0c:e9:9d:37:8d:3a:cd:26:24:c7:62: 53:b1:14:94:df:d2:4b:b6:25:e5:2b:a3:08:b6:f0: 47:99:86:7d:a8:29:10:8c:f6:67:b0:c1:76:83:b8: 4c:c4:50:c7:f5:23:79:e0:43:2a:5f:3f:20:3a:df: 44:11:8e:dc:54:d0:45:cd:d6:60:12:53:9c:83:b9: 5e:6e:ea:bb:6d:fc:02:ec:e6:bb:5d:36:5e:5c:f4: 67:8b:10:6c:88:f5:5c:c5:88:b0:03:71:d5:f2:c1: 3b:47:e3:7e:45:66:f1:ad:07:cd:99:51:48:b0:f6: e6:16:3d:e0:dc:e6:37:d2:bc:d6:04:5e:c0:59:97: 34:bb:83:f4:47:a1:e0:b7:06:53:a2:a3:89:7f:bb: 32:21:5f:25:93:c5:f6:51:1a:fd:4c:26:c6:4e:18: 56:fa:37:6b:d8:18:3a:fe:5b:b5:5c:7b:ce:3a:45: c9:d2:16:97:75:50:3d:27:db:d2:b7:9e:6d:e2:17: 1d:f8:ca:d2:60:26:a6:f8:fc:6e:9a:bd:b0:4a:a9: e6:82:9c:60:d0:bf:ce:54:6d:8a:45:8f:86:4a:14: f6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E9:67:F9:CB:2A:0B:43:76:3B:E5:89:63:09:01:05:7C:06:B2:07 X509v3 Authority Key Identifier: keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b1:24:c9:8b:1f:6f:c5:81:3c:28:a1:70:85:23:f0:b2:eb: 93:12:fa:c8:f0:e1:4c:7c:ae:cc:d7:c7:07:e6:4d:af:10:e0: aa:7c:3a:3c:ac:02:99:75:36:d7:d2:77:7a:e9:5f:7c:46:44: 4c:41:bc:46:b4:5e:45:bd:00:2c:b0:98:d1:05:bf:73:6a:60: 0c:fb:1c:ac:10:1e:1e:3f:64:02:f2:6d:25:a6:22:56:d3:f3: 1e:3c:36:17:95:2e:58:ed:da:86:b4:c5:b9:75:8a:43:be:f2: c3:f4:36:3d:db:8b:fe:d0:f0:ba:54:e1:b4:4e:56:e1:bb:91: 08:d6:c4:90:0d:64:ad:28:30:13:4b:6b:1f:5c:e2:17:e7:55: 4a:03:23:1c:4d:88:79:92:09:f6:2f:d1:f2:da:d3:fe:05:b8: b8:3a:36:7b:dc:dd:61:12:76:ff:86:5e:dd:cc:90:80:76:21: 8c:48:a9:ec:1c:62:ae:6a:53:4b:13:d1:cf:6d:d9:95:2c:ae: 86:7d:0a:7c:e7:d4:35:dc:68:07:1a:57:11:0a:aa:a8:e6:9c: 9a:33:e4:54:1e:78:70:f1:f8:2c:cb:13:53:98:20:82:e9:06: 9e:f4:6e:ae:ce:90:47:56:73:af:1d:57:96:11:23:27:8f:ff: 95:16:c4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB QzNBNzIxRDIwHhcNMjUxMTA1MDEzMzU2WhcNMjUxMTEyMDEzMzU2WjAYMRYwFAYD VQQDEw02OTBhYTk4NS0zOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkb2khR+Y/mijR3pDgfw62Oqh4IssPJrTrh+Sva9VoXgDOmdN406zSYkx2JT sRSU39JLtiXlK6MItvBHmYZ9qCkQjPZnsMF2g7hMxFDH9SN54EMqXz8gOt9EEY7c VNBFzdZgElOcg7lebuq7bfwC7Oa7XTZeXPRnixBsiPVcxYiwA3HV8sE7R+N+RWbx rQfNmVFIsPbmFj3g3OY30rzWBF7AWZc0u4P0R6HgtwZToqOJf7syIV8lk8X2URr9 TCbGThhW+jdr2Bg6/lu1XHvOOkXJ0haXdVA9J9vSt55t4hcd+MrSYCam+Pxumr2w Sqnmgpxg0L/OVG2KRY+GShT2FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfpZ/nL KgtDdjvliWMJAQV8BrIHMB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1 NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjJERS8xNzY3OTRENDE1NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3 S2hIdVM2NHVDSDZzT25JZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChsSTJix9vxYE8KKFwhSPwsuuTEvrI8OFMfK7M18cH5k2vEOCqfDo8 rAKZdTbX0nd66V98RkRMQbxGtF5FvQAssJjRBb9zamAM+xysEB4eP2QC8m0lpiJW 0/MePDYXlS5Y7dqGtMW5dYpDvvLD9DY924v+0PC6VOG0Tlbhu5EI1sSQDWStKDAT S2sfXOIX51VKAyMcTYh5kgn2L9Hy2tP+Bbi4OjZ73N1hEnb/hl7dzJCAdiGMSKns HGKualNLE9HPbdmVLK6GfQp859Q13GgHGlcRCqqo5pyaM+RUHnhw8fgsyxNTmCCC 6Qae9G6uzpBHVnOvHVeWESMnj/+VFsRp -----END CERTIFICATE-----Generated at Wed Nov 5 20:26:00 2025 by rpki-client