$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: rKyDzCa75+YvZEEir6qxd4ijRW2C4u542m+7IM2Oqbo= Subject key identifier: 1D:9F:69:8B:97:AB:E3:90:6A:18:CC:11:83:7B:ED:89:ED:07:0C:6C Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 032B Signing time: Wed 05 Nov 2025 01:09:54 +0000 Manifest this update: Wed 05 Nov 2025 01:09:54 +0000 Manifest next update: Wed 12 Nov 2025 01:09:54 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: jbW4A7pKrZ9agtSlmSJ8ZyZIjliX/CxL4FX0+tWkhu8=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Nov 5 01:09:54 2025 GMT Not After : Nov 12 01:09:54 2025 GMT Subject: CN=690aa3e2-2fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:f7:bf:51:bd:93:50:ab:b6:f4:e1:5c:bc: de:87:78:fb:ae:0f:11:00:e1:e8:33:cd:76:11:18: b0:88:d1:f8:db:41:11:ee:2b:e5:f0:a7:0b:a0:b3: 42:4c:de:43:b1:54:cd:04:12:e5:10:54:17:37:63: af:9d:b0:93:62:1a:5b:45:ba:30:98:80:12:73:9c: 1a:15:d5:bf:49:21:bc:6d:aa:6d:3b:e9:d4:03:d1: fe:e0:c0:82:c5:f2:26:39:ff:6c:c9:7d:d0:d4:5b: aa:fa:33:23:c0:92:a9:00:ee:d9:5c:6f:fa:15:a5: 31:60:59:0c:1e:27:ca:65:ed:1b:3f:0d:65:b7:de: 5e:5b:ca:ca:ec:fb:ac:ae:11:d9:de:e7:a4:2f:67: 0e:b0:9d:0a:c5:24:3f:29:46:84:3e:7f:a9:95:24: f6:8b:5c:86:1e:5b:10:7b:db:61:ef:4e:1a:bc:5e: 7c:70:d4:04:2a:12:14:b7:9b:1c:84:17:d9:e1:17: 76:6d:3e:33:41:f6:cf:78:df:9e:d6:62:fa:a7:3b: a0:d4:3e:35:8a:7f:ed:c9:aa:16:aa:e8:b0:64:ff: 29:c9:95:e9:95:32:26:ac:41:42:ab:d1:6e:b6:0e: 2c:e1:19:ce:7a:2c:7d:c4:d0:91:5c:7f:a9:12:59: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9F:69:8B:97:AB:E3:90:6A:18:CC:11:83:7B:ED:89:ED:07:0C:6C X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:92:aa:30:0a:55:36:18:91:f7:91:25:79:a2:64:77:ad: cc:5e:37:87:71:14:4c:53:4a:b2:6a:1f:96:ec:cc:20:f8:fb: 9a:12:e9:10:8b:69:93:14:d4:36:aa:b2:b3:df:09:ee:24:af: e2:d5:e6:36:4e:89:28:3b:38:7b:5c:b9:22:e3:51:23:b1:d4: 8e:9e:35:a5:aa:82:4c:cd:65:ee:d4:c6:49:df:02:93:51:c2: c6:da:54:7d:da:3c:a3:d3:d5:5e:82:ac:1a:67:75:94:ed:ab: 6a:b1:67:90:93:63:f6:d8:3c:17:de:7e:2c:9e:85:a6:96:22: 0e:90:1d:55:17:8e:08:ac:7d:17:33:1d:09:6e:6f:fe:28:5e: 12:dc:f1:32:d3:db:9f:a3:c8:96:0b:a8:ae:1b:40:d9:91:39: 6b:22:25:16:6b:b4:df:25:73:04:2f:35:8f:9f:68:fe:d2:c0: dd:cf:63:f8:6d:5f:15:e0:98:7f:b8:90:14:db:99:38:83:a3: 19:85:52:25:fe:f1:e9:9b:1d:e9:56:9f:26:0c:d0:5e:72:88: fa:4c:9c:b0:47:f7:81:58:88:26:ac:ae:d3:e4:ad:09:cc:f3: b1:30:97:80:90:03:4b:4b:3c:6a:e1:86:67:1b:bf:e4:0d:5e: 79:13:c3:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUxMTA1MDEwOTU0WhcNMjUxMTEyMDEwOTU0WjAYMRYwFAYD VQQDEw02OTBhYTNlMi0yZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/H3v1G9k1CrtvThXLzeh3j7rg8RAOHoM812ERiwiNH420ER7ivl8KcLoLNC TN5DsVTNBBLlEFQXN2OvnbCTYhpbRbowmIASc5waFdW/SSG8baptO+nUA9H+4MCC xfImOf9syX3Q1Fuq+jMjwJKpAO7ZXG/6FaUxYFkMHifKZe0bPw1lt95eW8rK7Pus rhHZ3uekL2cOsJ0KxSQ/KUaEPn+plST2i1yGHlsQe9th704avF58cNQEKhIUt5sc hBfZ4Rd2bT4zQfbPeN+e1mL6pzug1D41in/tyaoWquiwZP8pyZXplTImrEFCq9Fu tg4s4RnOeix9xNCRXH+pElnrnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2faYuX q+OQahjMEYN77YntBwxsMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSNpKqMApVNhiR95EleaJkd63MXjeHcRRMU0qyah+W7Mwg+PuaEukQ i2mTFNQ2qrKz3wnuJK/i1eY2TokoOzh7XLki41EjsdSOnjWlqoJMzWXu1MZJ3wKT UcLG2lR92jyj09VegqwaZ3WU7atqsWeQk2P22DwX3n4snoWmliIOkB1VF44IrH0X Mx0Jbm/+KF4S3PEy09ufo8iWC6iuG0DZkTlrIiUWa7TfJXMELzWPn2j+0sDdz2P4 bV8V4Jh/uJAU25k4g6MZhVIl/vHpmx3pVp8mDNBecoj6TJywR/eBWIgmrK7T5K0J zPOxMJeAkANLSzxq4YZnG7/kDV55E8N5 -----END CERTIFICATE-----Generated at Thu Nov 6 03:04:31 2025 by rpki-client