$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: zijVKgZR3ay9BTsWE49QWcTIJTFpQAI4OHAV6r9nQLg= Subject key identifier: 9D:D4:56:C4:B2:BF:E8:18:3A:63:4D:92:53:E3:3D:82:2F:E8:AE:1F Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 8E Signing time: Wed 05 Nov 2025 06:43:50 +0000 Manifest this update: Wed 05 Nov 2025 06:43:50 +0000 Manifest next update: Wed 12 Nov 2025 06:43:50 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: 98scu/oHnIGS/gyKaBi4fKYbrKv3T3DRRAcseC4OFoA=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Nov 5 06:43:50 2025 GMT Not After : Nov 12 06:43:50 2025 GMT Subject: CN=690af226-9f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:1e:e7:89:81:78:96:8f:00:e7:76:3f:82: 6f:70:5b:b3:f8:dc:e8:ea:82:23:0a:ed:9e:aa:b5: 4a:bb:82:33:ba:ed:83:68:92:1d:5b:94:d9:09:dc: 26:cc:91:10:32:69:7d:6b:96:88:17:a8:4f:e2:f9: 88:93:60:96:30:2f:75:16:7e:0c:81:98:40:22:3e: a0:69:4f:c2:73:0c:76:21:6c:7e:76:b8:b1:8a:5b: 4a:3f:cc:3a:c9:24:eb:c6:9a:e6:e4:11:38:17:76: d9:70:a2:06:b7:77:13:de:f9:b9:29:60:64:b3:f0: 5d:4d:4f:77:c8:d5:31:44:fb:c4:c1:c6:31:eb:5f: 1a:38:f8:39:cd:dd:8f:50:5c:e6:05:2b:95:b2:1d: 3c:14:83:39:52:37:fa:f1:40:ae:76:da:0a:ec:49: 2e:49:f4:e7:b9:85:c7:e7:bc:28:2c:2d:0a:70:55: 1a:f6:2a:d0:88:03:c2:fd:16:57:30:87:8f:91:5a: af:02:bf:bf:5b:30:66:49:c7:55:e1:a6:6e:ab:5e: 56:df:e4:fe:11:3f:28:5a:6b:73:cf:d3:a2:18:7a: 16:a1:14:c6:ef:54:4d:0b:f8:b2:68:95:6c:03:24: a2:a6:eb:6a:f6:f4:bd:97:8d:cd:84:aa:5b:40:c5: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D4:56:C4:B2:BF:E8:18:3A:63:4D:92:53:E3:3D:82:2F:E8:AE:1F X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a0:44:a9:ee:7f:b1:e8:35:6e:10:e2:c1:23:1e:c8:81:21: cb:d5:0c:42:f2:37:d1:72:fb:8c:a1:b8:5b:3a:70:06:18:bc: a7:26:69:17:9c:57:44:9d:dd:82:f0:d1:6b:f4:4d:41:23:d6: 2f:2b:f5:c9:42:dd:59:d2:bf:1f:70:cf:ea:d3:de:4b:96:f4: a7:95:64:a8:e0:ff:f7:91:72:b8:42:b4:bd:14:13:dd:6f:ba: cb:e5:9d:2b:0a:a8:4a:10:b9:ce:98:b3:21:2f:33:ff:75:0f: 0a:ed:0c:6f:b9:06:a4:d9:05:cb:0e:ec:eb:74:1a:87:a1:1f: 43:04:06:b9:3f:75:20:e6:41:9f:43:85:a4:76:83:43:ab:f5: e9:15:e3:e4:49:68:f5:be:25:07:b2:f4:d0:41:af:76:48:eb: 9e:b4:15:13:67:56:5a:40:b1:9c:5d:1f:00:e7:65:ea:7a:15: 78:3b:f3:43:77:b4:1f:c6:ed:91:49:65:55:d0:64:25:c8:de: 1e:aa:6b:00:87:5d:82:80:26:7f:35:8f:fc:82:36:9e:8a:0a: e2:f5:4b:95:8a:8a:5b:4f:77:48:f2:ed:af:ff:62:df:6c:4a: 1f:2c:ef:7e:d5:cf:53:0a:14:bb:bb:14:31:57:1e:28:ba:c3: 1d:bf:40:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURCNjYxMTAvBgNVBAUTKEJDOEM3OUY3ODQ5MUExRDVBQTQ1REJFNDEzM0MwQzEw RjY5MzY0QUQwHhcNMjUxMTA1MDY0MzUwWhcNMjUxMTEyMDY0MzUwWjAYMRYwFAYD VQQDEw02OTBhZjIyNi05ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1Ae54mBeJaPAOd2P4JvcFuz+Nzo6oIjCu2eqrVKu4Izuu2DaJIdW5TZCdwm zJEQMml9a5aIF6hP4vmIk2CWMC91Fn4MgZhAIj6gaU/Ccwx2IWx+drixiltKP8w6 ySTrxprm5BE4F3bZcKIGt3cT3vm5KWBks/BdTU93yNUxRPvEwcYx618aOPg5zd2P UFzmBSuVsh08FIM5Ujf68UCudtoK7EkuSfTnuYXH57woLC0KcFUa9irQiAPC/RZX MIePkVqvAr+/WzBmScdV4aZuq15W3+T+ET8oWmtzz9OiGHoWoRTG71RNC/iyaJVs AySiputq9vS9l43NhKpbQMWvcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3UVsSy v+gYOmNNklPjPYIv6K4fMB8GA1UdIwQYMBaAFLyMefeEkaHVqkXb5BM8DBD2k2St MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREI2Ni83N0I2MTk5Q0Uw OUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9kV3FSZHZrRXp3TUVQYVRa SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REI2Ni83N0I2MTk5Q0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9k V3FSZHZrRXp3TUVQYVRaSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIoESp7n+x6DVuEOLBIx7IgSHL1QxC8jfRcvuMobhbOnAGGLynJmkX nFdEnd2C8NFr9E1BI9YvK/XJQt1Z0r8fcM/q095LlvSnlWSo4P/3kXK4QrS9FBPd b7rL5Z0rCqhKELnOmLMhLzP/dQ8K7QxvuQak2QXLDuzrdBqHoR9DBAa5P3Ug5kGf Q4WkdoNDq/XpFePkSWj1viUHsvTQQa92SOuetBUTZ1ZaQLGcXR8A52XqehV4O/ND d7Qfxu2RSWVV0GQlyN4eqmsAh12CgCZ/NY/8gjaeigri9UuViopbT3dI8u2v/2Lf bEofLO9+1c9TChS7uxQxVx4ousMdv0D0 -----END CERTIFICATE-----Generated at Wed Nov 5 23:25:41 2025 by rpki-client