$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: EKKch4GxhJaX5bBRinIcdllTtxdPfLEvY0opGGs3ZtY= Subject key identifier: 40:F2:D6:4B:0C:CD:75:C4:46:50:10:07:8D:71:F4:BD:48:23:62:24 Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 0199 Signing time: Wed 05 Nov 2025 01:01:40 +0000 Manifest this update: Wed 05 Nov 2025 01:01:39 +0000 Manifest next update: Wed 12 Nov 2025 01:01:39 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: IeeqHrQvHMnvsbeweMj5CzgdrXZFuAhWDQj6uqOaeJM=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Nov 5 01:01:39 2025 GMT Not After : Nov 12 01:01:39 2025 GMT Subject: CN=690aa1f4-3e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:42:7d:70:a7:2d:22:70:fd:89:4f:17:f7: 36:b2:93:ba:d0:74:53:a8:6d:a1:f3:a8:1f:c9:6c: cc:fc:ba:b6:60:eb:c4:c7:e7:39:d7:29:43:e3:0e: 71:ec:30:1d:b5:6e:8e:3c:a3:1a:02:85:36:a3:b6: e1:08:e6:1d:5e:8e:d6:28:b7:d6:51:f2:9a:74:b6: c0:c4:60:7e:d0:78:b0:86:71:8a:93:c2:c2:39:dd: 15:b2:41:9b:3e:41:f6:3f:92:fb:c4:75:53:3b:e4: 5a:13:4c:37:c4:6b:82:a4:de:ed:0d:d6:bb:0c:a8: 35:ed:24:34:c2:1d:cc:33:10:7a:68:63:b5:7d:1b: 18:20:a3:38:ee:ab:1b:20:06:5c:5b:d3:52:a4:15: ea:3a:c3:09:e2:f3:30:6b:c7:ac:28:b5:9e:5d:ce: 05:f7:40:28:ad:b0:cd:27:a7:b5:4b:07:4e:b4:bc: 21:2a:5e:32:2c:54:e7:16:42:06:98:10:99:7d:4f: 4a:b2:ff:e0:9c:be:0d:b1:4e:da:d5:aa:c6:53:d0: 96:c1:b6:49:a5:24:74:b0:d9:99:cb:bc:d4:ec:08: 06:74:08:be:31:bf:e4:95:60:cb:62:bb:87:6d:8d: 87:16:a6:4b:c1:6c:d0:0e:fc:0c:fc:1d:11:3c:30: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:D6:4B:0C:CD:75:C4:46:50:10:07:8D:71:F4:BD:48:23:62:24 X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:4b:f3:40:5a:4f:ec:5a:ad:2b:34:f7:42:87:b0:e9:b0:bb: d0:d7:87:44:cc:d3:37:0d:7e:30:11:62:fe:a2:c9:83:9b:67: 8d:db:7c:1b:2f:7f:cc:62:a4:ac:c7:42:66:88:88:5b:be:ef: a4:b1:94:94:cf:fd:a1:ef:c9:c4:b7:01:ad:6f:b9:b4:cc:5f: 1a:77:cc:7c:b4:b6:9b:2a:3d:28:4b:3e:5b:c9:23:b9:6b:95: e3:29:6f:16:d1:85:20:59:b6:f4:2a:05:57:16:b8:02:20:ef: 16:fe:70:1b:8c:27:17:a1:8b:75:e4:b6:2c:10:03:53:d0:5b: 75:e6:53:50:69:97:93:a3:8b:fc:e2:04:42:ff:8a:2f:4a:14: 4d:ae:61:25:98:b8:b8:dc:3d:e9:e1:69:f3:a6:a3:6b:5b:ca: 43:56:bb:fa:7f:1c:c9:e6:61:c0:92:59:2e:27:57:97:8a:d4: 25:1c:d8:f7:0b:72:91:87:f4:28:b4:98:2b:89:bd:e0:49:e2: 80:c8:3f:b3:51:b8:6e:e8:6b:39:db:8c:3c:c7:67:c9:09:cd: 8d:c0:72:5a:af:1d:71:76:7a:20:36:71:30:6d:78:5a:63:ca: 5a:23:cf:98:5e:6c:a8:96:12:34:51:7c:da:40:2d:4e:1e:c9: 85:07:71:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjUxMTA1MDEwMTM5WhcNMjUxMTEyMDEwMTM5WjAYMRYwFAYD VQQDEw02OTBhYTFmNC0zZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutxCfXCnLSJw/YlPF/c2spO60HRTqG2h86gfyWzM/Lq2YOvEx+c51ylD4w5x 7DAdtW6OPKMaAoU2o7bhCOYdXo7WKLfWUfKadLbAxGB+0HiwhnGKk8LCOd0VskGb PkH2P5L7xHVTO+RaE0w3xGuCpN7tDda7DKg17SQ0wh3MMxB6aGO1fRsYIKM47qsb IAZcW9NSpBXqOsMJ4vMwa8esKLWeXc4F90AorbDNJ6e1SwdOtLwhKl4yLFTnFkIG mBCZfU9Ksv/gnL4NsU7a1arGU9CWwbZJpSR0sNmZy7zU7AgGdAi+Mb/klWDLYruH bY2HFqZLwWzQDvwM/B0RPDCtpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDy1ksM zXXERlAQB41x9L1II2IkMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoS/NAWk/sWq0rNPdCh7DpsLvQ14dEzNM3DX4wEWL+osmDm2eN23wb L3/MYqSsx0JmiIhbvu+ksZSUz/2h78nEtwGtb7m0zF8ad8x8tLabKj0oSz5bySO5 a5XjKW8W0YUgWbb0KgVXFrgCIO8W/nAbjCcXoYt15LYsEANT0Ft15lNQaZeTo4v8 4gRC/4ovShRNrmElmLi43D3p4WnzpqNrW8pDVrv6fxzJ5mHAklkuJ1eXitQlHNj3 C3KRh/QotJgrib3gSeKAyD+zUbhu6Gs524w8x2fJCc2NwHJarx1xdnogNnEwbXha Y8paI8+YXmyolhI0UXzaQC1OHsmFB3Hp -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:36 2025 by rpki-client