$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json) Hash identifier: 8449gAuRPogwdUkvGSmcDSXJIGO8X8Kop+mLW+MPsT8= Subject key identifier: 65:40:26:AA:09:F7:D9:76:B1:03:DE:D5:F7:58:4E:DF:74:3B:9E:FD Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Certificate serial: 356B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft Manifest number: 3519 Signing time: Tue 04 Nov 2025 14:17:23 +0000 Manifest this update: Tue 04 Nov 2025 14:17:22 +0000 Manifest next update: Tue 11 Nov 2025 14:17:22 +0000 Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: Lkc0gMSowmminHz7o7qEb+rR9rozGXAGR3KyGMuoVsA=) 2: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: jqW67pSJSIsRiaBgE6s/DK3BAL3JeM6fk0sbod9Ihss=) 3: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: m0T5p+j/9s+rm9D6YdSh//2Alx2Eae+Du8lbaB1hR7Y=) 4: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=) 5: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: tqonfMb2T4kEzGLFTTW3PK/xQqepl87jr8dA78s4VGI=) 6: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: D48/pxU7MzDuerY2hyHqIJz8Ni5AYoPlrPyxeWvQn8M=) 7: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: H76rrDZxK8h/g51b1krAIQ2ulCKuPO82m4joCbnFfEs=) 8: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: rb6m6NgtqMNqMVoEYBcUFewdPh6xLzsagwAw8cSDCbE=) 9: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: kN3zyoollwJXDugnYM0yHLk48cRpRCSo426eiI4jnbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13675 (0x356b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Validity Not Before: Nov 4 14:17:22 2025 GMT Not After : Nov 11 14:17:22 2025 GMT Subject: CN=690a0af3-c76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1e:4f:aa:4c:13:44:8e:cd:5f:6b:f0:bc:f2: 23:a7:c9:83:18:ba:22:38:f6:0a:6e:74:0d:a5:dc: 6a:90:b7:e4:d8:60:f6:80:13:37:6e:a8:b5:4b:37: 6e:80:df:28:36:c2:ae:e7:dd:b0:c7:c9:32:4c:85: 6e:1f:87:10:5f:ca:06:f6:10:1b:07:68:3f:fd:97: 1a:a5:03:bf:55:e2:67:1a:f0:58:c5:b6:1e:cc:fe: 2c:4b:86:0b:60:9c:71:a9:16:01:90:fe:f4:cd:ed: 09:04:1f:a9:33:79:b2:4c:58:3b:89:35:84:58:4d: fb:39:4d:29:fd:b2:a2:9f:28:ff:d6:3e:be:15:c0: cd:7d:fa:31:03:83:35:a4:d3:f2:04:19:f2:9b:a2: b7:8d:cc:b9:f1:31:58:81:f7:1e:9d:a9:5c:46:1a: f7:75:ef:b6:a8:63:79:93:d2:36:4b:a5:f6:7d:82: 3d:79:70:0e:ae:ec:aa:41:c3:0c:63:b1:87:0a:97: b6:0f:91:38:e5:93:31:59:49:0d:c6:6b:49:25:9c: ac:11:24:9a:70:70:48:47:18:4b:b6:4a:0e:09:c3: 5c:f6:06:33:07:90:26:d7:7f:ed:c6:f8:81:db:23: a4:e4:30:45:f9:66:b5:f5:75:a9:cc:6b:62:96:16: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:40:26:AA:09:F7:D9:76:B1:03:DE:D5:F7:58:4E:DF:74:3B:9E:FD X509v3 Authority Key Identifier: keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:02:f3:89:6b:d6:2d:3d:75:3e:94:2d:ed:38:1d:47:01:f0: 30:ac:e2:18:8c:04:fc:d4:0f:b3:02:f0:28:68:77:33:11:15: 73:68:ef:20:ac:7e:f9:b2:b5:ea:b1:d8:75:53:52:0a:88:48: 90:0e:f9:98:34:82:d4:72:9b:48:d9:d0:df:24:b1:00:95:10: d5:b2:9b:45:50:ae:48:a7:93:94:6c:96:41:a2:19:2f:b3:06: 7f:51:e5:f0:13:16:81:3f:fe:f2:0e:58:0d:ef:55:86:b8:5a: bb:56:de:b3:c1:7c:3f:e7:11:82:ae:0a:24:38:33:56:ac:93: f9:f7:03:7e:7d:d1:e3:55:c4:05:37:4d:ae:11:5d:13:c3:48: b0:0a:24:3b:0d:7d:f0:e3:4f:f0:e6:a0:79:68:77:7d:1b:60: a5:b3:59:a8:1f:c2:ba:9c:49:45:79:c5:9b:04:b0:ee:be:11: 52:ed:32:7c:ae:be:bc:72:7e:eb:4b:46:a9:00:e0:5f:75:79: b6:7b:13:dc:35:ff:d8:c1:ec:34:00:af:90:0a:ef:31:b5:76: e1:cf:e1:f0:0c:3a:6c:98:ff:e3:59:9d:b6:7e:90:6b:78:33: da:72:4b:90:b3:98:62:13:0c:31:4e:c2:e1:6e:a3:13:13:2a: 84:98:e9:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyRUQxMTAvBgNVBAUTKDY4RkFGOURBQ0UxOTc2OENBQzNENEVEN0JCMjQzNzJC RkZBNkQwMTgwHhcNMjUxMTA0MTQxNzIyWhcNMjUxMTExMTQxNzIyWjAYMRYwFAYD VQQDEw02OTBhMGFmMy1jNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9B5PqkwTRI7NX2vwvPIjp8mDGLoiOPYKbnQNpdxqkLfk2GD2gBM3bqi1Szdu gN8oNsKu592wx8kyTIVuH4cQX8oG9hAbB2g//ZcapQO/VeJnGvBYxbYezP4sS4YL YJxxqRYBkP70ze0JBB+pM3myTFg7iTWEWE37OU0p/bKinyj/1j6+FcDNffoxA4M1 pNPyBBnym6K3jcy58TFYgfcenalcRhr3de+2qGN5k9I2S6X2fYI9eXAOruyqQcMM Y7GHCpe2D5E45ZMxWUkNxmtJJZysESSacHBIRxhLtkoOCcNc9gYzB5Am13/txviB 2yOk5DBF+Wa19XWpzGtilhZNcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVAJqoJ 99l2sQPe1fdYTt90O579MB8GA1UdIwQYMBaAFGj6+drOGXaMrD1O17skNyv/ptAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzJFRC9FRDhDOTY5MDFE NkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRveXNQVTdYdXlRM0tfLW0w QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQcjUyczRaZG95c1BVN1h1eVEzS18tbTBCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzJFRC9FRDhDOTY5MDFENkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRv eXNQVTdYdXlRM0tfLW0wQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaAvOJa9YtPXU+lC3tOB1HAfAwrOIYjAT81A+zAvAoaHczERVzaO8g rH75srXqsdh1U1IKiEiQDvmYNILUcptI2dDfJLEAlRDVsptFUK5Ip5OUbJZBohkv swZ/UeXwExaBP/7yDlgN71WGuFq7Vt6zwXw/5xGCrgokODNWrJP59wN+fdHjVcQF N02uEV0Tw0iwCiQ7DX3w40/w5qB5aHd9G2Cls1moH8K6nElFecWbBLDuvhFS7TJ8 rr68cn7rS0apAOBfdXm2exPcNf/Ywew0AK+QCu8xtXbhz+HwDDpsmP/jWZ22fpBr eDPackuQs5hiEwwxTsLhbqMTEyqEmOnf -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:00 2025 by rpki-client