$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: gdJLeaYE4VC2b2XMHvrhvy2SS8AI9jqKxVfJK2gCC+I= Subject key identifier: 4E:76:75:F9:D5:97:AD:F5:16:61:B9:CD:33:AA:82:B4:D6:D4:18:DD Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 03D8 Signing time: Wed 05 Nov 2025 00:42:44 +0000 Manifest this update: Wed 05 Nov 2025 00:42:44 +0000 Manifest next update: Wed 12 Nov 2025 00:42:44 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: LhwBsw4R5kC+iC1RidBuoax5rC1AdDcPqyuaoz9CaIU=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=) 3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=) 4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Nov 5 00:42:44 2025 GMT Not After : Nov 12 00:42:44 2025 GMT Subject: CN=690a9d84-64e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:b7:cc:94:9b:1d:fe:cb:ac:66:dd:70:aa: 4a:a3:c3:59:fc:62:53:66:04:7c:1c:05:56:8e:02: 3c:95:8b:94:a2:de:3d:f9:9e:11:00:d1:50:5a:bd: 24:51:e8:e8:08:6f:98:77:a2:fb:75:54:8d:8f:4a: ec:ea:67:26:e6:4a:64:31:c4:8d:c0:3c:96:82:ca: 94:96:26:2e:f8:b8:58:03:61:a2:b1:f5:2a:70:d7: 76:bb:bf:46:fd:95:e2:c0:99:8e:2a:ae:cb:1a:1b: 6a:bc:8d:8d:38:41:a2:97:de:9a:c5:8f:d6:51:cb: 17:89:c8:f8:dd:fe:23:de:3b:aa:33:cd:84:92:f4: 47:cf:d2:59:ca:d1:2a:25:2b:fe:e7:3a:17:bb:3b: 47:20:a1:d6:69:a3:c9:d9:43:b0:9c:9c:64:ce:ca: 32:93:aa:4b:7b:ac:86:e6:00:d2:0b:34:85:36:41: 78:94:69:7f:5a:6d:05:97:86:41:f1:9e:26:d4:21: 7e:ea:af:58:37:6b:05:26:08:e8:6f:3a:40:5c:46: 4c:89:4e:84:ee:5b:d0:0c:fb:11:54:5f:40:36:c5: b2:a4:6e:7e:65:d2:f2:0b:a5:2f:d7:1f:cf:8a:a6: 97:ca:a2:e8:ad:92:81:1d:65:0f:c9:82:35:c2:82: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:76:75:F9:D5:97:AD:F5:16:61:B9:CD:33:AA:82:B4:D6:D4:18:DD X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:35:01:97:79:b3:65:9e:c4:e4:75:3e:4c:b7:29:12:26:81: 72:a4:ba:07:42:4d:35:9c:e6:e9:a3:6b:6e:3c:f9:81:ed:f2: 36:f3:af:45:3a:1e:3a:9f:d4:2e:b9:8f:0b:95:85:4a:f0:67: 77:57:c4:48:a6:a5:82:a4:57:f6:9e:ca:14:89:b0:73:5a:35: 1e:8a:22:68:cb:8c:37:d6:8d:96:2e:0a:cf:78:ba:da:c7:6a: 0b:fa:ac:70:e5:61:f8:af:a5:87:2c:c6:50:a9:bb:3d:87:06: 6a:1e:46:0c:9b:61:9b:32:45:a6:74:e8:53:ef:c5:fe:49:ad: ad:45:aa:8f:c2:3d:5e:fc:cc:40:3f:73:b1:bc:39:58:21:1f: 03:97:16:c7:1b:51:69:d6:59:71:86:4d:2f:ce:b0:92:4e:b1: 16:e8:cc:67:ac:4c:2e:cb:e1:c1:ba:fe:a9:fe:f9:e9:e7:74: 16:a4:a2:32:09:58:87:3e:e6:40:cb:db:e1:38:24:c9:3a:89: 3e:d1:92:ed:08:6c:3a:5a:cd:6b:22:6d:94:44:37:e3:bf:92: 1d:30:41:12:e9:ab:c5:6d:ca:d2:db:43:27:80:35:ca:75:77: df:af:0f:ed:7a:40:83:3b:6a:f4:45:a5:00:42:2f:a1:79:25: 71:4f:21:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUxMTA1MDA0MjQ0WhcNMjUxMTEyMDA0MjQ0WjAYMRYwFAYD VQQDEw02OTBhOWQ4NC02NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfS3zJSbHf7LrGbdcKpKo8NZ/GJTZgR8HAVWjgI8lYuUot49+Z4RANFQWr0k UejoCG+Yd6L7dVSNj0rs6mcm5kpkMcSNwDyWgsqUliYu+LhYA2GisfUqcNd2u79G /ZXiwJmOKq7LGhtqvI2NOEGil96axY/WUcsXicj43f4j3juqM82EkvRHz9JZytEq JSv+5zoXuztHIKHWaaPJ2UOwnJxkzsoyk6pLe6yG5gDSCzSFNkF4lGl/Wm0Fl4ZB 8Z4m1CF+6q9YN2sFJgjobzpAXEZMiU6E7lvQDPsRVF9ANsWypG5+ZdLyC6Uv1x/P iqaXyqLorZKBHWUPyYI1woKJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE52dfnV l631FmG5zTOqgrTW1BjdMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9NQGXebNlnsTkdT5MtykSJoFypLoHQk01nObpo2tuPPmB7fI2869F Oh46n9QuuY8LlYVK8Gd3V8RIpqWCpFf2nsoUibBzWjUeiiJoy4w31o2WLgrPeLra x2oL+qxw5WH4r6WHLMZQqbs9hwZqHkYMm2GbMkWmdOhT78X+Sa2tRaqPwj1e/MxA P3OxvDlYIR8DlxbHG1Fp1llxhk0vzrCSTrEW6MxnrEwuy+HBuv6p/vnp53QWpKIy CViHPuZAy9vhOCTJOok+0ZLtCGw6Ws1rIm2URDfjv5IdMEES6avFbcrS20MngDXK dXffrw/tekCDO2r0RaUAQi+heSVxTyH7 -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:19 2025 by rpki-client