$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json) Hash identifier: wNR0TI2JjngZzdNgerRRFIFq5mPJOpuHIDzV+R1dTP0= Subject key identifier: 2D:B2:19:E7:AA:F7:D9:2A:CA:D8:A9:2F:12:2D:D0:5F:C0:8F:F0:55 Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft Manifest number: 0726 Signing time: Sun 02 Nov 2025 21:45:30 +0000 Manifest this update: Sun 02 Nov 2025 21:45:30 +0000 Manifest next update: Sun 09 Nov 2025 21:45:30 +0000 Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: cXALgtWwx466m+8Tq1+jLe9BoWNQG83VSGKGvpUEDfo=) 2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: q+i3wafgejbFMbyjX77ENtsRan2UT1Ux8wQq92JlMS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Validity Not Before: Nov 2 21:45:30 2025 GMT Not After : Nov 9 21:45:30 2025 GMT Subject: CN=6907d0fa-bd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:88:60:62:f1:94:45:65:fe:13:76:d8:98: c0:c5:34:ae:19:46:e0:9a:f0:3f:66:d4:f2:82:80: 63:bf:b4:8a:ae:7a:81:44:3e:d1:57:40:62:c4:75: 7c:60:ad:d0:84:18:ab:c7:a9:1b:80:e7:49:e4:45: 2f:a7:28:ee:2c:6d:d6:33:54:61:ee:96:10:7f:27: 58:82:de:0f:39:b6:9f:46:da:68:e3:c6:1e:87:f5: 39:95:89:31:cc:ca:dc:45:30:7b:0d:a4:60:64:67: c9:77:c5:50:f0:48:3a:02:49:80:2a:be:60:12:cc: ca:25:06:62:a5:c4:47:69:dd:65:cc:d2:0a:5c:d9: 72:b8:01:a6:c4:55:b7:ef:ea:90:fa:a5:bf:10:72: 08:b6:15:a0:7d:82:e2:7a:66:82:24:88:27:42:fe: 6a:64:06:0c:03:06:9e:32:c5:8c:69:e5:6d:54:db: 07:57:24:89:1a:22:17:7d:a6:02:8f:72:e8:fc:46: ab:f4:86:37:61:0f:e0:b6:7b:de:2d:5c:6a:89:5e: 71:99:79:02:59:22:6b:15:95:c8:1f:a5:8b:8f:de: ed:c6:dd:18:9d:a0:30:79:d8:00:03:00:53:54:b4: 25:c0:c0:5b:4a:07:f4:73:34:5b:01:b3:a5:d9:b5: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:19:E7:AA:F7:D9:2A:CA:D8:A9:2F:12:2D:D0:5F:C0:8F:F0:55 X509v3 Authority Key Identifier: keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:af:21:3a:cd:dd:12:7f:28:28:a8:b1:9c:3d:6a:d9:80:d3: c1:e0:92:67:75:2e:9f:4a:cd:4e:bc:f9:ee:f1:aa:b0:02:51: f6:96:dd:8e:76:7f:a2:84:23:e4:09:15:97:c4:d0:cd:f4:2c: fe:9d:75:9b:1f:2a:dd:fe:9a:ef:04:ad:b0:8e:6a:d5:ba:9d: e4:c6:b8:4b:20:51:3a:82:ae:62:9b:7a:88:69:50:9b:46:6e: 96:5b:8d:92:c1:b5:b0:41:03:f6:3d:e8:5c:6e:26:10:a0:ca: fe:35:dc:ec:fa:18:f1:6f:d9:ba:c6:37:d6:4d:2e:ac:2a:1d: d0:47:3b:ae:a6:f4:3e:35:0e:9f:dd:9b:01:23:74:0e:4a:bc: 2f:14:dc:0d:74:c7:c8:22:1e:65:23:35:af:f0:ac:02:7c:c4: 34:7a:0c:e3:08:c2:58:84:63:35:83:b1:c7:39:79:59:54:2d: 2a:37:c4:79:00:cd:a7:5a:9e:50:9c:37:e5:0f:0f:11:69:24: e8:5d:3d:2b:d6:5a:28:f2:4c:97:14:e6:b8:f7:48:fd:bb:1a: 59:3b:a8:df:de:24:85:e0:9e:40:23:67:c3:8b:3a:92:3d:b2: 5d:9f:ea:dd:08:60:76:44:f0:17:86:0c:94:f1:75:73:c5:1e: cc:44:35:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy QjI4OUMyRkQwHhcNMjUxMTAyMjE0NTMwWhcNMjUxMTA5MjE0NTMwWjAYMRYwFAYD VQQDEw02OTA3ZDBmYS1iZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjaIYGLxlEVl/hN22JjAxTSuGUbgmvA/ZtTygoBjv7SKrnqBRD7RV0BixHV8 YK3QhBirx6kbgOdJ5EUvpyjuLG3WM1Rh7pYQfydYgt4PObafRtpo48Yeh/U5lYkx zMrcRTB7DaRgZGfJd8VQ8Eg6AkmAKr5gEszKJQZipcRHad1lzNIKXNlyuAGmxFW3 7+qQ+qW/EHIIthWgfYLiemaCJIgnQv5qZAYMAwaeMsWMaeVtVNsHVySJGiIXfaYC j3Lo/Ear9IY3YQ/gtnveLVxqiV5xmXkCWSJrFZXIH6WLj97txt0YnaAwedgAAwBT VLQlwMBbSgf0czRbAbOl2bVO2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2yGeeq 99kqytipLxIt0F/Aj/BVMB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0 MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW Z3hoZ1huSVRTY0FyS0p3djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ryE6zd0SfygoqLGcPWrZgNPB4JJndS6fSs1OvPnu8aqwAlH2lt2O dn+ihCPkCRWXxNDN9Cz+nXWbHyrd/prvBK2wjmrVup3kxrhLIFE6gq5im3qIaVCb Rm6WW42SwbWwQQP2PehcbiYQoMr+Ndzs+hjxb9m6xjfWTS6sKh3QRzuupvQ+NQ6f 3ZsBI3QOSrwvFNwNdMfIIh5lIzWv8KwCfMQ0egzjCMJYhGM1g7HHOXlZVC0qN8R5 AM2nWp5QnDflDw8RaSToXT0r1loo8kyXFOa490j9uxpZO6jf3iSF4J5AI2fDizqS PbJdn+rdCGB2RPAXhgyU8XVzxR7MRDWi -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:37 2025 by rpki-client