$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: Df2Q7yr02/nOXWIr6brylkH2pIaomO7VZv1zjlGKTGc= Subject key identifier: BF:37:0B:53:43:70:9C:39:34:50:D7:6D:BE:89:D3:EB:F0:05:B3:95 Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 06B6 Signing time: Sun 02 Nov 2025 22:10:02 +0000 Manifest this update: Sun 02 Nov 2025 22:10:02 +0000 Manifest next update: Sun 09 Nov 2025 22:10:01 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: sc+Z+I5ih/jekHk6Avi4v1GkeCFmBMfgr9vnsNMlT28=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: Nov 2 22:10:02 2025 GMT Not After : Nov 9 22:10:01 2025 GMT Subject: CN=6907d6ba-5054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f7:8d:35:c9:1d:8a:b0:9d:90:30:82:0c:c9: e5:7d:6b:37:76:d9:3f:f9:07:48:49:11:6e:9d:a3: 39:c7:7c:2f:dc:9c:af:2f:29:4d:c4:9e:40:5b:7d: fb:de:61:f3:dd:72:f9:3e:53:59:96:b8:2f:af:07: cc:48:73:c2:a1:aa:b7:99:db:70:37:c4:b6:fd:06: ca:2c:df:ea:e1:15:4b:c0:ed:59:db:e7:4a:6c:53: 5c:da:49:a4:8a:f7:90:45:b8:b9:51:7f:9c:a6:c9: 0d:9c:6b:17:a9:98:1a:11:f3:33:3a:31:16:ed:a4: 15:ff:d1:df:56:bd:96:ba:73:12:51:2c:f5:f1:df: b9:32:47:da:77:cd:61:37:fd:5e:5c:5e:08:7b:bd: cf:25:21:1f:5b:ce:6b:01:ec:7f:40:ce:74:f0:58: f0:68:61:23:74:06:75:92:5a:f7:6f:90:f3:72:dc: 4a:a5:54:66:ce:3e:cb:ac:9e:b0:da:6b:07:43:6b: 1f:d4:c5:09:46:73:8a:e3:dd:7f:1e:c3:1f:4a:82: a8:1d:da:0e:d9:18:20:88:94:89:da:f9:ba:ee:86: 23:29:b9:48:43:68:d0:67:f8:dd:bf:57:6b:45:64: c8:99:ec:b7:57:b9:71:fc:54:d3:0a:d5:be:61:e0: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:0B:53:43:70:9C:39:34:50:D7:6D:BE:89:D3:EB:F0:05:B3:95 X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:73:47:a8:1c:91:30:ed:09:8a:1c:ad:9c:be:90:a1:3f:a7: ae:0b:41:42:38:45:bb:62:47:4c:82:f9:79:06:48:22:4b:11: 9f:ec:21:fb:1d:b0:e4:1f:33:63:df:4e:49:7f:22:dc:70:7a: 40:23:6d:57:2b:a8:a7:ef:7c:17:03:49:8e:12:cd:b2:32:62: b4:d0:45:f4:a5:e2:3d:bc:fa:7c:c4:9a:1c:0e:53:c8:03:41: 7f:51:6a:ef:29:e6:fb:9f:db:95:ec:a6:75:e8:d5:c6:bb:5e: 37:39:3c:de:4e:75:6c:e4:1c:54:ee:ed:91:fa:8b:6e:e1:cd: 87:7e:c6:83:de:1e:5f:2c:f8:d9:14:df:d3:16:61:e8:e2:98: 1d:44:e2:dc:3d:74:a3:39:81:4e:a8:c6:d3:35:cf:af:6e:e0: 34:23:17:f6:4c:98:15:21:f0:98:bb:e0:5f:1f:b2:34:39:73: 4c:bc:9e:09:74:e1:3e:92:c3:ea:e6:47:af:5f:18:01:84:c9: be:13:d0:62:71:b7:c8:5e:cb:d6:b0:b2:3e:8f:57:bc:da:2f: 00:9c:c8:52:ac:13:22:52:74:e1:29:84:7a:5a:75:b8:d9:ca: 0b:7b:e1:b0:ff:4e:6f:5d:3a:03:f0:36:6e:91:24:07:48:e7: de:6b:dc:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjUxMTAyMjIxMDAyWhcNMjUxMTA5MjIxMDAxWjAYMRYwFAYD VQQDEw02OTA3ZDZiYS01MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/eNNckdirCdkDCCDMnlfWs3dtk/+QdISRFunaM5x3wv3JyvLylNxJ5AW337 3mHz3XL5PlNZlrgvrwfMSHPCoaq3mdtwN8S2/QbKLN/q4RVLwO1Z2+dKbFNc2kmk iveQRbi5UX+cpskNnGsXqZgaEfMzOjEW7aQV/9HfVr2WunMSUSz18d+5Mkfad81h N/1eXF4Ie73PJSEfW85rAex/QM508FjwaGEjdAZ1klr3b5DzctxKpVRmzj7LrJ6w 2msHQ2sf1MUJRnOK491/HsMfSoKoHdoO2RggiJSJ2vm67oYjKblIQ2jQZ/jdv1dr RWTImey3V7lx/FTTCtW+YeB5DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL83C1ND cJw5NFDXbb6J0+vwBbOVMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlc0eoHJEw7QmKHK2cvpChP6euC0FCOEW7YkdMgvl5BkgiSxGf7CH7 HbDkHzNj305JfyLccHpAI21XK6in73wXA0mOEs2yMmK00EX0peI9vPp8xJocDlPI A0F/UWrvKeb7n9uV7KZ16NXGu143OTzeTnVs5BxU7u2R+otu4c2HfsaD3h5fLPjZ FN/TFmHo4pgdROLcPXSjOYFOqMbTNc+vbuA0Ixf2TJgVIfCYu+BfH7I0OXNMvJ4J dOE+ksPq5kevXxgBhMm+E9BicbfIXsvWsLI+j1e82i8AnMhSrBMiUnThKYR6WnW4 2coLe+Gw/05vXToD8DZukSQHSOfea9zT -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:59 2025 by rpki-client