$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json) Hash identifier: C0sPvh+8qNAlG/6lRano4ZOAFqRAhM2gu4eB3NBlY3Q= Subject key identifier: E4:F1:BC:D8:63:D3:55:6F:21:E3:18:9E:56:4C:55:39:5D:6C:9A:2B Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft Manifest number: 0B9B Signing time: Tue 04 Nov 2025 19:05:09 +0000 Manifest this update: Tue 04 Nov 2025 19:05:08 +0000 Manifest next update: Tue 11 Nov 2025 19:05:08 +0000 Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: wZ28kyvl+gnSDi7GtfrDOtfU8VbrKqmK+8o1ndZmQFA=) 2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: sug/yLBQ+OjqkHil53A1fXubXeb6H+1TbTT+YvNP/YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: Nov 4 19:05:08 2025 GMT Not After : Nov 11 19:05:08 2025 GMT Subject: CN=690a4e65-f40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:78:7b:20:ce:bb:b0:b0:5f:ba:6e:75:d9: fa:0c:f9:35:14:b3:b6:0c:9a:07:ea:11:f0:35:27: c8:7c:90:3b:20:9f:42:1a:79:0d:26:5a:07:b4:b5: 02:c8:cb:b7:2b:26:02:23:4b:64:84:e8:75:a3:ef: dc:61:47:09:e6:84:7e:00:63:12:8d:46:43:17:e9: 74:c7:b1:ff:db:89:d2:f8:95:6d:83:31:d0:88:74: b2:d5:b3:61:b1:d6:bf:08:72:d0:1a:0f:e5:0a:30: ed:99:a0:34:c4:c6:c4:16:7a:c4:b8:fe:1f:29:fb: 8d:44:74:6e:b4:0b:f8:b0:7d:11:8d:83:2c:b1:6c: 11:2b:ea:19:80:78:41:3b:7b:28:39:37:c1:21:38: 1b:d2:c8:b6:5b:49:cc:c8:bd:db:b6:64:50:69:38: 51:0f:d0:88:8b:ce:dc:e0:23:4e:12:a1:ee:af:06: a5:24:f1:5d:73:98:ae:0c:d9:5e:66:f5:b8:ab:c7: 6d:fa:a4:a6:77:0e:e5:17:29:d4:df:be:1d:fa:9e: 56:fa:9b:7a:e0:e0:a9:18:bd:b7:54:93:2b:bf:78: 4d:45:f2:f9:f3:cf:82:23:22:ca:6f:1d:95:05:63: 02:db:bf:11:35:82:ad:6c:38:1c:aa:55:ed:b1:5f: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F1:BC:D8:63:D3:55:6F:21:E3:18:9E:56:4C:55:39:5D:6C:9A:2B X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:61:16:8f:25:d0:22:d8:30:c6:f4:64:d1:83:47:2b:8f:99: 74:12:bc:98:ba:85:b2:84:10:ad:cb:7a:5d:f4:8c:80:5a:5f: 50:1b:c0:a9:88:86:88:2f:48:38:5d:95:25:28:d6:29:0f:41: cf:51:a3:48:3c:1e:db:ad:5a:a3:00:62:c3:d4:ac:54:d5:d9: 28:2c:88:d3:15:8c:5e:07:43:50:79:ff:bf:6f:77:df:ea:5c: 21:8c:23:30:81:97:71:f8:c1:69:a8:5d:c5:8b:57:7e:27:38: 88:2a:29:52:d0:e3:c8:4c:5a:83:94:1a:b5:79:41:e8:fa:57: 24:b3:00:b1:0c:fa:21:b3:09:f7:e6:00:bf:f9:03:92:3d:c6: dc:02:12:23:73:5c:04:84:17:25:64:8d:15:a5:33:45:69:7b: b7:26:ea:b1:3c:66:61:b2:1e:0b:f5:bb:ad:bf:f7:57:8b:74: 7b:75:0a:86:93:e9:ff:ac:33:c7:e3:b3:a1:11:0b:ea:b5:fd: 45:3c:61:ee:4d:48:51:9a:95:fd:6f:f9:84:ad:77:de:b8:7f: 33:d3:c8:92:17:2a:41:d8:5a:bc:77:ee:93:ff:eb:29:6f:fc: d8:5d:d5:d9:aa:f4:2c:3c:3a:d5:68:fc:d6:e2:35:71:6f:04: 55:12:67:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjUxMTA0MTkwNTA4WhcNMjUxMTExMTkwNTA4WjAYMRYwFAYD VQQDEw02OTBhNGU2NS1mNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn14eyDOu7CwX7puddn6DPk1FLO2DJoH6hHwNSfIfJA7IJ9CGnkNJloHtLUC yMu3KyYCI0tkhOh1o+/cYUcJ5oR+AGMSjUZDF+l0x7H/24nS+JVtgzHQiHSy1bNh sda/CHLQGg/lCjDtmaA0xMbEFnrEuP4fKfuNRHRutAv4sH0RjYMssWwRK+oZgHhB O3soOTfBITgb0si2W0nMyL3btmRQaThRD9CIi87c4CNOEqHurwalJPFdc5iuDNle ZvW4q8dt+qSmdw7lFynU374d+p5W+pt64OCpGL23VJMrv3hNRfL588+CIyLKbx2V BWMC278RNYKtbDgcqlXtsV/DlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTxvNhj 01VvIeMYnlZMVTldbJorMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5YRaPJdAi2DDG9GTRg0crj5l0EryYuoWyhBCty3pd9IyAWl9QG8Cp iIaIL0g4XZUlKNYpD0HPUaNIPB7brVqjAGLD1KxU1dkoLIjTFYxeB0NQef+/b3ff 6lwhjCMwgZdx+MFpqF3Fi1d+JziIKilS0OPITFqDlBq1eUHo+lckswCxDPohswn3 5gC/+QOSPcbcAhIjc1wEhBclZI0VpTNFaXu3JuqxPGZhsh4L9butv/dXi3R7dQqG k+n/rDPH47OhEQvqtf1FPGHuTUhRmpX9b/mErXfeuH8z08iSFypB2Fq8d+6T/+sp b/zYXdXZqvQsPDrVaPzW4jVxbwRVEmfj -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:31 2025 by rpki-client