$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: wn5B+Fw11lDn40AbIQOeDOtbZ9Ju9l+AcW8mrOTCgEE= Subject key identifier: D2:A1:B6:1B:A7:18:AC:F1:E8:AB:93:CD:A1:EF:9B:41:F9:93:F4:9B Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: AB Signing time: Mon 03 Nov 2025 06:14:59 +0000 Manifest this update: Mon 03 Nov 2025 06:14:58 +0000 Manifest next update: Mon 10 Nov 2025 06:14:58 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: zqTU37u6Ku7GAhQs+Jdmkqb87Kk7T2UxJRkYWYzZrvQ=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: HSb6XjCDD/PrExNgC4kkLXSRksHnMNuj8kokihkx5ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Nov 3 06:14:58 2025 GMT Not After : Nov 10 06:14:58 2025 GMT Subject: CN=69084863-1881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:40:b8:4d:e3:c3:2f:03:b1:ab:9a:a2:d5: fa:9e:3a:1a:28:93:75:da:1b:1a:f2:c2:de:3d:08: 90:5c:c6:8e:c5:07:cf:32:f4:2a:0b:cd:53:de:75: 8a:c2:3a:b1:60:2f:67:0d:c5:aa:34:e2:90:9e:02: a6:76:62:6d:53:21:8f:ad:d4:8a:dd:db:c0:25:08: 77:86:e6:22:ec:d5:a7:0a:93:47:0b:18:a9:da:60: c3:3c:d9:b0:22:f1:8c:94:3b:7b:00:b1:eb:36:ef: 3d:89:24:8c:43:1a:90:86:f3:99:8e:a4:e4:a0:8c: ad:3a:3c:4e:0c:82:c9:86:4d:dd:1c:df:1a:0b:62: c0:de:29:82:5e:54:1d:ca:1c:5f:54:3e:ed:3a:eb: 57:58:63:d3:68:9f:8a:18:75:09:36:1e:b2:e2:6a: ed:d4:5a:1f:ea:af:1c:41:c1:d8:2e:2c:b5:ad:d7: ef:39:87:b4:13:0f:ca:9d:68:8a:8d:c7:72:0a:b5: c0:65:6a:29:29:91:f0:8e:f8:e7:07:84:0f:f0:8b: d1:46:aa:84:cf:e3:1b:f3:91:c3:6d:2a:eb:0b:f5: 21:52:60:1c:b9:18:30:25:40:9c:7b:70:7b:d1:cb: 96:aa:1a:86:de:d8:13:47:c1:34:fc:ee:25:29:d6: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A1:B6:1B:A7:18:AC:F1:E8:AB:93:CD:A1:EF:9B:41:F9:93:F4:9B X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:58:72:8d:78:2c:7d:18:24:24:07:2b:1b:2b:ae:a8:2d:d0: 9b:5e:77:af:ce:1c:8b:da:08:32:ca:50:c0:19:89:2b:65:bc: 89:65:3a:a0:6f:2b:be:a3:db:a9:30:9e:66:a1:ea:7b:85:0b: a1:83:28:c2:c5:d6:ee:7c:4c:ae:a7:1a:d1:74:84:ff:05:dd: 5c:8d:73:a7:c2:3e:c2:99:c8:c0:15:e1:56:d4:33:7a:66:a5: 3b:54:57:99:bd:a3:37:d0:8d:be:11:5f:07:01:c1:c5:f1:24: 3e:59:78:14:ee:00:ae:41:1d:4b:53:a5:c1:a5:58:56:15:03: 96:88:8c:8d:00:40:f3:ad:a5:2d:f4:2e:8e:ce:e8:52:04:66: 74:5a:b7:d6:e5:a1:62:2b:b1:bf:d9:f4:b3:97:64:23:c8:d7: e5:3b:14:2d:60:32:8d:b8:c4:23:fd:6a:43:b1:0b:03:ac:06: f9:dc:0b:73:30:bb:43:4d:60:55:cf:6e:ca:3a:a0:c3:27:f7: 46:a7:22:5c:eb:61:17:7d:cb:e2:0a:82:b8:4f:50:7a:4e:c9: 0a:c5:4c:2e:d6:f5:c0:db:a7:80:32:35:73:f7:4a:e1:68:4b: 81:9c:e5:fc:08:97:64:60:d8:65:9a:5b:c7:84:bd:00:2c:c9: d0:21:7f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjUxMTAzMDYxNDU4WhcNMjUxMTEwMDYxNDU4WjAYMRYwFAYD VQQDEw02OTA4NDg2My0xODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6NAuE3jwy8DsauaotX6njoaKJN12hsa8sLePQiQXMaOxQfPMvQqC81T3nWK wjqxYC9nDcWqNOKQngKmdmJtUyGPrdSK3dvAJQh3huYi7NWnCpNHCxip2mDDPNmw IvGMlDt7ALHrNu89iSSMQxqQhvOZjqTkoIytOjxODILJhk3dHN8aC2LA3imCXlQd yhxfVD7tOutXWGPTaJ+KGHUJNh6y4mrt1Fof6q8cQcHYLiy1rdfvOYe0Ew/KnWiK jcdyCrXAZWopKZHwjvjnB4QP8IvRRqqEz+Mb85HDbSrrC/UhUmAcuRgwJUCce3B7 0cuWqhqG3tgTR8E0/O4lKdZcCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKhthun GKzx6KuTzaHvm0H5k/SbMB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmWHKNeCx9GCQkBysbK66oLdCbXnevzhyL2ggyylDAGYkrZbyJZTqg byu+o9upMJ5moep7hQuhgyjCxdbufEyupxrRdIT/Bd1cjXOnwj7CmcjAFeFW1DN6 ZqU7VFeZvaM30I2+EV8HAcHF8SQ+WXgU7gCuQR1LU6XBpVhWFQOWiIyNAEDzraUt 9C6OzuhSBGZ0WrfW5aFiK7G/2fSzl2QjyNflOxQtYDKNuMQj/WpDsQsDrAb53Atz MLtDTWBVz27KOqDDJ/dGpyJc62EXfcviCoK4T1B6TskKxUwu1vXA26eAMjVz90rh aEuBnOX8CJdkYNhlmlvHhL0ALMnQIX+h -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:12 2025 by rpki-client