$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: Z5WxYUGh33M58yyyNYXu8ldyN+DXjy7z1MaapuCXRNU= Subject key identifier: C0:0C:91:12:F6:F2:93:82:BC:74:25:F3:9B:06:12:D3:A2:1A:9C:99 Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 021A Signing time: Wed 05 Nov 2025 02:17:05 +0000 Manifest this update: Wed 05 Nov 2025 02:17:04 +0000 Manifest next update: Wed 12 Nov 2025 02:17:04 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: 19KzvXFecq9dzW0WhsLJuY9CqSYlpMtGUWIIphQmtL8=) 2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=) 3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: Nov 5 02:17:04 2025 GMT Not After : Nov 12 02:17:04 2025 GMT Subject: CN=690ab3a0-4f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:04:93:84:73:fa:48:a6:9f:d1:0c:e9:1c: 5d:19:17:12:23:f9:ef:e1:14:75:57:13:e9:b5:af: 78:90:4f:39:b5:74:a5:47:51:b9:94:d9:bb:84:13: 7f:1c:85:86:78:ea:12:77:8e:fc:f8:34:d8:00:99: 68:92:76:f6:a6:bd:87:ee:d8:14:d2:ba:3a:67:9d: 61:47:c6:d3:c9:57:5f:3b:ff:d4:56:74:43:eb:1d: 6d:de:64:51:35:44:b8:63:21:ec:78:4d:9c:4a:7c: c4:68:34:93:f7:49:06:8e:89:6f:3a:41:bb:22:76: 26:76:06:da:c4:2a:62:f2:dc:10:68:c8:2c:43:cb: bf:0e:7e:9e:0e:bf:5d:10:54:2a:5e:e7:98:2e:8f: 5d:ee:78:0b:71:22:d7:be:16:22:c0:bd:b3:ef:1c: d6:df:79:9f:68:35:2c:8d:88:12:6f:a8:6e:97:26: a8:4f:b8:d8:a3:56:ff:27:df:4b:ba:1b:0e:58:74: 5c:a4:b4:a8:bd:ac:4c:7c:7c:cd:56:b2:e9:c4:54: aa:2f:0e:6a:33:05:19:06:41:44:08:43:79:db:34: 41:c8:7b:b6:e5:86:17:82:a9:cd:fb:ae:85:39:c0: 27:32:d5:55:88:c7:19:af:ea:f9:89:ca:fd:34:ba: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:91:12:F6:F2:93:82:BC:74:25:F3:9B:06:12:D3:A2:1A:9C:99 X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ef:c9:78:06:02:95:a8:71:2e:d2:5e:22:cf:5c:22:88:69: 99:6d:47:11:7e:5f:06:23:f7:cb:aa:e3:c3:6d:af:f2:fc:07: b1:76:a4:04:67:95:8b:81:64:a9:73:c7:df:cb:0a:a3:6f:a4: 47:41:8a:c0:3e:79:17:b9:d2:4d:98:d4:b4:a4:8f:35:7c:9b: af:95:ae:8c:4e:64:a6:b5:08:ef:87:d1:19:a6:17:26:14:ac: 12:24:b4:f5:28:22:7e:ec:3f:6b:ce:0c:89:5f:de:b2:b1:5f: f0:d6:1f:25:88:4a:73:2e:d0:7c:2f:8a:fe:6f:79:80:40:49: 23:4e:6c:ff:86:0d:48:b2:6b:99:2f:6e:61:c6:f7:a9:ba:08: 68:84:10:5f:c4:08:e2:f0:0a:1f:71:29:12:e6:f5:46:5e:e4: c8:a6:da:98:a3:c9:a2:b6:66:39:f2:ab:68:00:d2:12:a5:4a: 29:07:ad:b3:42:c0:65:ab:8f:e1:34:c0:98:53:f6:2a:28:ca: 84:01:a0:fa:69:f8:a6:05:d6:b8:5e:b1:17:cb:21:c8:65:70: b7:e8:7d:02:cf:00:25:b7:cc:bc:e7:da:55:c2:f0:20:3e:91: f8:e5:bb:c3:94:87:4a:38:0d:5d:db:5c:5c:03:0a:55:37:d0: cf:e4:6f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjUxMTA1MDIxNzA0WhcNMjUxMTEyMDIxNzA0WjAYMRYwFAYD VQQDEw02OTBhYjNhMC00ZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OkEk4Rz+kimn9EM6RxdGRcSI/nv4RR1VxPpta94kE85tXSlR1G5lNm7hBN/ HIWGeOoSd478+DTYAJloknb2pr2H7tgU0ro6Z51hR8bTyVdfO//UVnRD6x1t3mRR NUS4YyHseE2cSnzEaDST90kGjolvOkG7InYmdgbaxCpi8twQaMgsQ8u/Dn6eDr9d EFQqXueYLo9d7ngLcSLXvhYiwL2z7xzW33mfaDUsjYgSb6hulyaoT7jYo1b/J99L uhsOWHRcpLSovaxMfHzNVrLpxFSqLw5qMwUZBkFECEN52zRByHu25YYXgqnN+66F OcAnMtVViMcZr+r5icr9NLo+VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAMkRL2 8pOCvHQl85sGEtOiGpyZMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG78l4BgKVqHEu0l4iz1wiiGmZbUcRfl8GI/fLquPDba/y/AexdqQE Z5WLgWSpc8ffywqjb6RHQYrAPnkXudJNmNS0pI81fJuvla6MTmSmtQjvh9EZphcm FKwSJLT1KCJ+7D9rzgyJX96ysV/w1h8liEpzLtB8L4r+b3mAQEkjTmz/hg1IsmuZ L25hxvepughohBBfxAji8AofcSkS5vVGXuTIptqYo8mitmY58qtoANISpUopB62z QsBlq4/hNMCYU/YqKMqEAaD6afimBda4XrEXyyHIZXC36H0CzwAlt8y859pVwvAg PpH45bvDlIdKOA1d21xcAwpVN9DP5G8l -----END CERTIFICATE-----Generated at Wed Nov 5 22:32:02 2025 by rpki-client