$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json) Hash identifier: FULnTRr9WKNMNRQsDVtQBH2ANUL+wUcU2kMR/yEkSp4= Subject key identifier: B7:8A:0F:1E:88:24:08:45:85:D3:E7:0A:E9:40:3D:7E:09:56:3E:03 Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft Manifest number: 05DE Signing time: Tue 04 Nov 2025 23:11:43 +0000 Manifest this update: Tue 04 Nov 2025 23:11:42 +0000 Manifest next update: Tue 11 Nov 2025 23:11:42 +0000 Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: 4DHn3y4IS4z9iDv2DB/BXP/fKMHpyTTxnTMuXl02eHU=) 2: 774D2C8A895911F082979238C4F9AE02.roa (hash: MNGV40v8PxwIzKP/YcpeveDanhXceoP8ufn50nFL4nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Validity Not Before: Nov 4 23:11:42 2025 GMT Not After : Nov 11 23:11:42 2025 GMT Subject: CN=690a882e-e105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:3d:0a:f8:eb:51:c0:e9:84:41:09:4a:be: 82:90:f3:c3:5e:4e:48:08:aa:25:92:a5:62:8b:d1: 37:9b:d0:72:4e:8e:bd:90:da:61:72:80:1c:b0:ed: 8c:e3:9f:c5:f2:17:ba:57:51:c3:3d:e0:71:1a:d3: ee:55:52:42:c4:bf:dd:1d:8d:12:6b:8a:98:fb:96: f0:81:e3:e1:a1:68:8d:5e:9f:47:6a:14:cb:f5:c6: d3:99:07:c6:be:5e:37:5c:af:29:0f:ce:eb:ac:9f: 70:d5:46:52:19:91:12:b2:b7:3d:6a:6e:6c:0f:7d: 15:69:3e:21:47:ef:ef:26:66:0b:ef:44:16:24:f6: b4:05:42:35:02:1e:6c:e0:84:e8:16:e2:52:e5:df: fb:a7:67:af:f1:6c:3c:82:e0:8a:d2:9c:a9:21:0d: 6c:c2:bd:2a:16:f1:1e:02:77:c8:9a:c6:2c:df:a8: 58:42:78:6c:a6:00:fa:72:59:7c:53:1e:30:af:59: 72:17:89:46:33:00:1c:21:78:03:d5:f6:23:5f:6d: c0:77:01:ff:91:55:ce:cd:b1:d8:03:84:26:5b:c7: 67:b1:8f:12:17:f9:61:77:f7:de:0e:ed:2d:19:12: 38:44:a8:3c:fc:3e:df:c7:80:c0:b9:6c:80:82:d2: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8A:0F:1E:88:24:08:45:85:D3:E7:0A:E9:40:3D:7E:09:56:3E:03 X509v3 Authority Key Identifier: keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:2e:30:f7:c6:2d:83:da:3e:5c:55:92:9a:4c:64:0a:a1:45: eb:b9:e7:8d:ed:c2:a4:c7:3d:22:e2:c1:93:2b:7d:33:b9:2f: f7:99:0d:49:1c:10:a1:e6:b0:af:34:e8:b3:63:76:d3:1a:71: ce:38:8d:50:d5:9d:7e:aa:c7:08:b8:e1:f5:06:6f:4c:fb:cb: 0b:5b:a6:60:6c:15:29:ef:47:ee:dc:f8:66:26:ca:78:63:aa: de:99:e0:c4:ce:67:0f:57:2a:ee:1a:8e:e0:58:4e:c2:09:0b: 97:93:81:ca:84:66:ef:b4:ca:18:6a:99:65:cc:10:57:49:6a: 6c:34:4d:ef:07:d8:2b:9f:6f:d0:d2:fe:41:d0:ab:8a:f2:77: c9:fc:5e:99:1c:d2:e5:28:10:b3:69:5a:07:0e:b7:44:06:c5: 99:6a:56:ad:78:58:5d:9e:26:d6:f6:94:4f:67:78:21:bd:e9: 1c:86:68:62:27:53:2e:17:d4:5a:c1:cb:31:16:c2:16:ef:b4: 5f:4d:cd:a2:66:e8:71:5a:aa:2f:32:a1:8b:41:d7:a4:c3:60: f1:a5:fc:50:5c:15:06:67:2c:39:fb:75:cb:91:66:12:75:4c: c2:25:db:9a:19:46:3d:11:ed:92:f2:85:5c:d8:0d:f4:61:00: 16:75:33:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTBBRjExMC8GA1UEBRMoNjhFRTg1RjRDMjdENEJBOTNFMEQ2QjZBM0U5MjY1OUUx MEQ2ODk1RTAeFw0yNTExMDQyMzExNDJaFw0yNTExMTEyMzExNDJaMBgxFjAUBgNV BAMTDTY5MGE4ODJlLWUxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrfD0K+OtRwOmEQQlKvoKQ88NeTkgIqiWSpWKL0Teb0HJOjr2Q2mFygByw7Yzj n8XyF7pXUcM94HEa0+5VUkLEv90djRJripj7lvCB4+GhaI1en0dqFMv1xtOZB8a+ XjdcrykPzuusn3DVRlIZkRKytz1qbmwPfRVpPiFH7+8mZgvvRBYk9rQFQjUCHmzg hOgW4lLl3/unZ6/xbDyC4IrSnKkhDWzCvSoW8R4Cd8iaxizfqFhCeGymAPpyWXxT HjCvWXIXiUYzABwheAPV9iNfbcB3Af+RVc7NsdgDhCZbx2exjxIX+WF3994O7S0Z EjhEqDz8Pt/HgMC5bICC0sBVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt4oPHogk CEWF0+cK6UA9fglWPgMwHwYDVR0jBBgwFoAUaO6F9MJ9S6k+DWtqPpJlnhDWiV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMEFGL0ZENjVCNEQ4RTRB NjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZrLURXdHFQcEpsbmhEV2lW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU82RjlNSjlTNmstRFd0cVBwSmxuaERXaVY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB MEFGL0ZENjVCNEQ4RTRBNjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZr LURXdHFQcEpsbmhEV2lWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQuMPfGLYPaPlxVkppMZAqhReu5543twqTHPSLiwZMrfTO5L/eZDUkc EKHmsK806LNjdtMacc44jVDVnX6qxwi44fUGb0z7ywtbpmBsFSnvR+7c+GYmynhj qt6Z4MTOZw9XKu4ajuBYTsIJC5eTgcqEZu+0yhhqmWXMEFdJamw0Te8H2Cufb9DS /kHQq4ryd8n8Xpkc0uUoELNpWgcOt0QGxZlqVq14WF2eJtb2lE9neCG96RyGaGIn Uy4X1FrByzEWwhbvtF9NzaJm6HFaqi8yoYtB16TDYPGl/FBcFQZnLDn7dcuRZhJ1 TMIl25oZRj0R7ZLyhVzYDfRhABZ1M8M= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:08 2025 by rpki-client