$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: JsUQ7/Wu+wkEGRGWp04fGJ+FgZT4p+HJ/z9TR6aFagk= Subject key identifier: F0:80:F4:30:47:FF:06:9E:BB:64:5B:EA:E6:9B:24:00:25:F3:F1:3A Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 037F Signing time: Wed 05 Nov 2025 00:56:35 +0000 Manifest this update: Wed 05 Nov 2025 00:56:35 +0000 Manifest next update: Wed 12 Nov 2025 00:56:35 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: Qp4TLD+GkYOx2u+UiMMbxD+TLSHDeuKlVpYUHGrqWw8=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: 3gM1BdbMTDqrDwIX93z+/V+zTYOD4jC/sFTj/5bifAc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 7yly3hdDUnooff1AD5UaEbPn8g4l5l4qpcVVzY6AZJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Nov 5 00:56:35 2025 GMT Not After : Nov 12 00:56:35 2025 GMT Subject: CN=690aa0c3-fb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:d7:5a:fd:69:00:d6:56:6c:4a:25:80:42: 17:d8:b1:1d:a9:cd:ee:df:c1:3d:d6:6f:dd:ea:db: d4:eb:e8:a5:35:10:10:80:2a:b2:b7:08:f4:6e:03: 65:b2:14:c0:9a:0e:d4:41:96:dd:9d:9e:76:8d:62: 51:61:80:97:30:ab:34:1c:ce:25:5b:7f:f4:9a:13: da:03:f3:d0:46:fa:25:dd:3d:d5:49:c9:de:33:8a: 41:0a:8d:69:24:a4:ea:fe:48:88:ba:12:bd:e7:31: 01:25:62:b6:a2:ed:16:0d:6c:06:b4:9a:ec:6a:c8: 79:87:cc:b4:79:5a:32:d0:5c:1e:a1:2e:5b:91:d9: c8:0e:99:ec:f6:9d:9d:f6:98:13:ba:29:e3:0f:05: a9:00:c9:9d:8f:fb:20:79:f6:50:36:f3:d4:29:d6: 32:1a:a1:cd:97:ea:4e:94:28:75:bb:ca:e7:ba:ec: e4:95:f4:9b:05:95:8a:66:84:26:0c:02:21:99:4f: 51:0e:30:cc:50:c1:83:88:95:12:0b:ff:f6:b1:eb: 3c:c4:fa:58:2b:ef:29:a0:67:f1:7e:15:4d:fe:4b: 8b:e0:75:5f:4c:bb:62:62:77:49:34:d5:18:50:be: d4:32:17:33:97:f7:b0:bc:80:63:36:aa:e9:8e:33: 25:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:80:F4:30:47:FF:06:9E:BB:64:5B:EA:E6:9B:24:00:25:F3:F1:3A X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:57:e8:b2:e7:40:c9:df:e0:94:65:c1:c2:58:6c:3f:30:8f: 35:da:ce:ca:0e:b1:dd:b5:2b:43:28:00:e4:de:11:3d:6a:2c: 0f:05:71:f1:ff:08:6d:5a:41:5a:54:0b:eb:8f:27:0d:ce:05: ee:5e:b2:2d:24:47:da:84:a1:d7:7a:f3:0d:ae:ae:bd:13:f4: b9:2f:6d:0b:75:c8:8e:df:8d:53:30:03:b0:fa:2a:2f:a7:35: 3a:fb:22:06:eb:c4:b9:53:bf:a3:9f:64:f5:6b:33:12:79:f8: 5b:a1:65:b1:bb:40:b3:57:9b:0c:2c:8a:df:cc:5e:0e:ff:61: 4f:2f:bb:b8:7c:e7:37:55:6b:e5:8d:7c:8b:ae:12:3f:e7:18: 52:1f:20:a8:4e:5b:f8:5f:b4:33:9f:f4:37:75:b2:1d:38:cb: ea:59:b9:f2:22:5e:1e:cd:3c:aa:f8:16:0b:1b:eb:bb:f8:17: f6:63:aa:5c:41:19:8b:20:a2:6b:63:6d:a5:89:a5:d9:48:1c: a1:94:19:16:01:37:63:6f:0d:ab:4a:0b:0a:89:98:09:5f:3d: 0f:c8:64:67:90:2f:95:74:66:15:77:04:d8:b0:8b:f1:17:8b: 48:1c:13:28:78:7a:dd:c8:5a:bd:01:9b:9f:7d:cf:67:7e:0a: f2:63:d1:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUxMTA1MDA1NjM1WhcNMjUxMTEyMDA1NjM1WjAYMRYwFAYD VQQDEw02OTBhYTBjMy1mYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0XXWv1pANZWbEolgEIX2LEdqc3u38E91m/d6tvU6+ilNRAQgCqytwj0bgNl shTAmg7UQZbdnZ52jWJRYYCXMKs0HM4lW3/0mhPaA/PQRvol3T3VScneM4pBCo1p JKTq/kiIuhK95zEBJWK2ou0WDWwGtJrsash5h8y0eVoy0FweoS5bkdnIDpns9p2d 9pgTuinjDwWpAMmdj/sgefZQNvPUKdYyGqHNl+pOlCh1u8rnuuzklfSbBZWKZoQm DAIhmU9RDjDMUMGDiJUSC//2ses8xPpYK+8poGfxfhVN/kuL4HVfTLtiYndJNNUY UL7UMhczl/ewvIBjNqrpjjMlowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCA9DBH /waeu2Rb6uabJAAl8/E6MB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsV+iy50DJ3+CUZcHCWGw/MI812s7KDrHdtStDKADk3hE9aiwPBXHx /whtWkFaVAvrjycNzgXuXrItJEfahKHXevMNrq69E/S5L20LdciO341TMAOw+iov pzU6+yIG68S5U7+jn2T1azMSefhboWWxu0CzV5sMLIrfzF4O/2FPL7u4fOc3VWvl jXyLrhI/5xhSHyCoTlv4X7Qzn/Q3dbIdOMvqWbnyIl4ezTyq+BYLG+u7+Bf2Y6pc QRmLIKJrY22liaXZSByhlBkWATdjbw2rSgsKiZgJXz0PyGRnkC+VdGYVdwTYsIvx F4tIHBMoeHrdyFq9AZuffc9nfgryY9Hv -----END CERTIFICATE-----Generated at Wed Nov 5 03:52:15 2025 by rpki-client