$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: 6UvnzVr6UmQnbnX9WiA1a7p/IG4yfl/Vmpj+ikdoOBA= Subject key identifier: 3E:FC:E4:17:0B:9E:8A:A0:9D:F1:D5:B0:CB:F1:85:92:9D:A1:8D:EB Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 1836 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 182E Signing time: Tue 04 Nov 2025 16:37:21 +0000 Manifest this update: Tue 04 Nov 2025 16:37:21 +0000 Manifest next update: Tue 11 Nov 2025 16:37:21 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: 6LuqFcb8b85R00Cz6UShs2PoeGfrjo64SIBoRah0tXQ=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6198 (0x1836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Nov 4 16:37:21 2025 GMT Not After : Nov 11 16:37:21 2025 GMT Subject: CN=690a2bc1-e388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:16:7c:69:d1:cc:89:c8:41:e4:d7:31:7c: 67:c5:7c:02:25:fb:37:fd:80:8e:54:70:c9:c4:7b: 62:12:e3:8f:4a:00:3d:c4:c9:82:98:98:bb:eb:aa: d6:a1:15:a2:26:43:38:17:5f:fe:0f:4c:09:02:2e: 7c:b4:4c:d1:54:f7:86:d7:04:18:0c:9a:ae:b3:0d: 1d:c3:a7:3f:a8:db:85:5e:bb:8c:58:cd:64:1b:a7: 2f:55:9a:07:9a:8b:85:fa:b9:6e:85:9b:1e:48:af: ab:31:95:ef:2c:ce:bb:9e:3e:44:70:58:a8:2e:30: 36:74:1d:e6:ee:6d:66:79:9d:05:64:a3:07:4f:e6: ed:81:b0:4a:5d:a4:e9:61:0d:ea:0c:e3:22:fe:58: ed:e9:6a:52:e6:9d:a1:1e:ac:90:d6:cd:e8:7c:b7: 29:39:96:21:29:41:6e:4f:3e:ac:ca:d0:68:e8:29: e7:1e:99:71:9d:01:98:57:e2:25:17:76:75:4a:53: e2:77:ba:bd:14:49:80:7a:ba:19:18:3d:f7:8d:75: 8d:88:7b:26:99:b8:08:07:8d:19:61:a8:70:51:a9: 0c:ca:26:4f:54:30:07:ae:2d:f0:ec:40:35:61:33: d0:bc:b8:b2:55:0f:dd:49:3c:e2:84:7b:92:88:95: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:E4:17:0B:9E:8A:A0:9D:F1:D5:B0:CB:F1:85:92:9D:A1:8D:EB X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cf:57:00:c1:00:d7:2a:c8:6d:fe:e3:20:30:06:6e:32:19: b2:80:16:1b:bf:01:39:c1:94:24:44:db:d1:43:ad:5f:a7:64: be:a0:84:c5:c1:14:35:41:01:b6:a0:3d:10:6e:4f:c3:42:ea: 01:04:4a:ed:bd:53:1c:73:11:20:81:4a:8e:10:04:1b:3f:2f: 3b:60:d6:e4:3a:d4:8c:b8:9d:9b:1b:0e:21:d8:f2:44:50:21: ea:a9:64:fd:3c:6e:5d:ca:9d:04:4b:25:dc:46:ff:03:5a:bc: 4a:0a:23:27:95:a1:43:93:65:7e:bf:93:01:9b:b9:0a:a9:b8: c4:a1:c6:b3:e0:92:41:11:a2:db:e1:0c:96:70:17:ef:07:47: f3:cc:d6:91:08:40:de:0d:0d:da:9f:bd:15:1f:e3:b4:4a:cc: 1f:05:a0:63:13:47:8d:9a:74:c3:d6:ac:7c:77:22:18:70:94: 5d:76:14:7d:3f:e1:fc:9f:30:b2:91:d2:a6:eb:5a:7d:35:b9: 17:a1:7e:42:6e:ed:f5:d1:0e:a1:9f:5c:55:ba:ec:25:55:27: 52:d1:d3:eb:cd:15:7f:2f:06:8f:70:1b:a1:68:50:19:76:9e: e2:40:cd:76:7c:72:bd:84:ce:b7:c8:66:ab:86:3e:f4:07:00: 2e:38:fb:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUxMTA0MTYzNzIxWhcNMjUxMTExMTYzNzIxWjAYMRYwFAYD VQQDEw02OTBhMmJjMS1lMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJMWfGnRzInIQeTXMXxnxXwCJfs3/YCOVHDJxHtiEuOPSgA9xMmCmJi766rW oRWiJkM4F1/+D0wJAi58tEzRVPeG1wQYDJqusw0dw6c/qNuFXruMWM1kG6cvVZoH mouF+rluhZseSK+rMZXvLM67nj5EcFioLjA2dB3m7m1meZ0FZKMHT+btgbBKXaTp YQ3qDOMi/ljt6WpS5p2hHqyQ1s3ofLcpOZYhKUFuTz6sytBo6CnnHplxnQGYV+Il F3Z1SlPid7q9FEmAeroZGD33jXWNiHsmmbgIB40ZYahwUakMyiZPVDAHri3w7EA1 YTPQvLiyVQ/dSTzihHuSiJW3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD785BcL noqgnfHVsMvxhZKdoY3rMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfz1cAwQDXKsht/uMgMAZuMhmygBYbvwE5wZQkRNvRQ61fp2S+oITF wRQ1QQG2oD0Qbk/DQuoBBErtvVMccxEggUqOEAQbPy87YNbkOtSMuJ2bGw4h2PJE UCHqqWT9PG5dyp0ESyXcRv8DWrxKCiMnlaFDk2V+v5MBm7kKqbjEocaz4JJBEaLb 4QyWcBfvB0fzzNaRCEDeDQ3an70VH+O0SswfBaBjE0eNmnTD1qx8dyIYcJRddhR9 P+H8nzCykdKm61p9NbkXoX5Cbu310Q6hn1xVuuwlVSdS0dPrzRV/LwaPcBuhaFAZ dp7iQM12fHK9hM63yGarhj70BwAuOPsy -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:40 2025 by rpki-client