$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json) Hash identifier: P7tD14R6Ph06MmlfZsPQhk0k2X8QXJIEKIEXSV8gzK0= Subject key identifier: 90:97:A0:27:6A:2A:2C:02:16:E7:C4:AB:00:7C:C3:FD:5F:B7:B5:BA Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 131C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft Manifest number: 12FB Signing time: Tue 04 Nov 2025 17:08:37 +0000 Manifest this update: Tue 04 Nov 2025 17:08:36 +0000 Manifest next update: Tue 11 Nov 2025 17:08:36 +0000 Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: kpTouK1L7dC7BKif3qpTgSt+UDDOwq1UEvs/d5mVKJ0=) 2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: cuFQqVlbEJ/udXRPZ56LOiAFU4p5XZPUOiRAjCCaxGQ=) 3: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: NtzVmYZPONq5rR0byClnuINw111fMOuuPgaj23EaEmw=) 4: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: tPqGcusMyqiuDoF3oCEh1MkgveCq5i4UTPc8YjbijQA=) 5: 403398AA233111EEAF768F66C4F9AE02.roa (hash: LFrmkrzanddJe0x2nUkwJLw/OhE7SJ+J+T3fYrc0q4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4892 (0x131c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Validity Not Before: Nov 4 17:08:36 2025 GMT Not After : Nov 11 17:08:36 2025 GMT Subject: CN=690a3315-ee98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:b6:81:ca:bb:9d:54:4e:95:3a:00:ca:b6: 23:a3:34:d2:b9:45:bb:f9:5a:d4:1f:2f:d8:40:ad: ca:4c:13:6d:ce:41:36:9b:57:e9:65:ea:81:46:ba: 26:4d:5b:7a:7f:af:f7:ad:aa:76:c9:a5:5f:aa:47: bb:0a:54:7c:68:a0:ca:f7:92:be:ba:6f:18:6f:75: 2a:ef:24:19:e8:54:d0:93:8c:8a:5d:14:bb:e6:f5: e7:66:a2:db:f2:3a:5f:d5:ae:54:0f:96:0c:3d:55: 25:bf:5e:fb:5e:06:84:ea:9b:a2:8b:68:32:67:ab: 9e:3e:c4:df:6d:ab:7a:c6:69:ee:bc:03:66:50:df: 76:d9:a1:9f:19:9d:05:6b:9d:d6:85:53:98:69:ae: e1:55:46:d6:34:47:27:c1:e2:17:e6:4f:19:9e:a1: a7:43:db:fd:3f:5e:9d:03:7d:0b:44:29:79:df:44: 76:3d:fd:9d:13:89:15:e6:14:a7:8d:05:37:8a:9a: 2d:cd:85:4b:77:4c:e8:f6:0f:ee:47:08:94:4c:96: 99:ea:7a:5f:10:48:6a:e1:f8:7e:ee:c1:97:99:a9: ac:8f:89:80:87:e3:de:37:e3:6d:f2:c1:2c:0f:65: b6:0e:8d:44:83:85:a9:de:ba:32:6e:8c:3d:04:67: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:97:A0:27:6A:2A:2C:02:16:E7:C4:AB:00:7C:C3:FD:5F:B7:B5:BA X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:29:1a:a1:3b:0f:52:b1:da:7d:7b:01:47:96:51:95:bb:11: e0:a2:65:2f:b8:46:ad:70:24:46:0b:e8:a4:5e:9a:4d:fe:3b: c0:98:18:f6:ca:81:b1:2d:7c:ee:b8:ed:e6:c3:43:89:49:9f: d6:25:c8:6f:c8:a9:ca:9f:eb:05:53:65:8a:db:fe:ab:ee:2a: cf:94:2f:85:80:cb:41:3c:14:94:5b:51:b2:76:08:6a:2b:83: ea:a2:2e:1b:b4:7c:a4:85:db:96:1c:6a:4b:7c:f9:7f:c6:86: d3:77:52:4f:14:b3:21:db:9e:91:05:cc:d7:47:84:0c:71:b2: d8:38:1a:28:79:70:3b:57:5a:5e:d5:7e:32:9e:6c:16:39:fa: fc:9b:2b:52:51:38:28:03:02:97:df:90:c2:66:a0:f0:be:ae: e8:4a:e3:e0:72:45:39:6c:f7:2a:36:7e:14:21:b2:e0:6c:f9: 8a:ff:74:9e:9f:a8:37:a0:bc:59:a2:36:e8:85:14:f3:04:95: 69:b0:17:ee:d8:d7:91:af:4f:da:9d:1d:73:75:a5:c6:e7:bf: a9:99:1e:a7:d3:37:95:5e:98:d3:da:58:13:5c:cf:2a:65:76: 1b:cb:db:5f:ee:11:a4:bf:2b:cb:ec:88:08:69:10:8b:d8:5f: aa:e8:50:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUxMTA0MTcwODM2WhcNMjUxMTExMTcwODM2WjAYMRYwFAYD VQQDEw02OTBhMzMxNS1lZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCe2gcq7nVROlToAyrYjozTSuUW7+VrUHy/YQK3KTBNtzkE2m1fpZeqBRrom TVt6f6/3rap2yaVfqke7ClR8aKDK95K+um8Yb3Uq7yQZ6FTQk4yKXRS75vXnZqLb 8jpf1a5UD5YMPVUlv177XgaE6puii2gyZ6uePsTfbat6xmnuvANmUN922aGfGZ0F a53WhVOYaa7hVUbWNEcnweIX5k8ZnqGnQ9v9P16dA30LRCl530R2Pf2dE4kV5hSn jQU3ipotzYVLd0zo9g/uRwiUTJaZ6npfEEhq4fh+7sGXmamsj4mAh+PeN+Nt8sEs D2W2Do1Eg4Wp3roybow9BGcVEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCXoCdq KiwCFufEqwB8w/1ft7W6MB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15 YlhGV2d2c0VFMUhzajUwMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUKRqhOw9Ssdp9ewFHllGVuxHgomUvuEatcCRGC+ikXppN/jvAmBj2 yoGxLXzuuO3mw0OJSZ/WJchvyKnKn+sFU2WK2/6r7irPlC+FgMtBPBSUW1Gydghq K4Pqoi4btHykhduWHGpLfPl/xobTd1JPFLMh256RBczXR4QMcbLYOBooeXA7V1pe 1X4ynmwWOfr8mytSUTgoAwKX35DCZqDwvq7oSuPgckU5bPcqNn4UIbLgbPmK/3Se n6g3oLxZojbohRTzBJVpsBfu2NeRr0/anR1zdaXG57+pmR6n0zeVXpjT2lgTXM8q ZXYby9tf7hGkvyvL7IgIaRCL2F+q6FB9 -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:10 2025 by rpki-client