$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: vX9X24SMOk9gMWOSqqZEDS6v+Wtinb3jnX7UsWnmnDE= Subject key identifier: 03:B1:EE:0E:13:6D:12:A7:BD:50:ED:61:C1:B2:19:CF:AE:D1:42:F7 Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 01F1 Signing time: Mon 03 Nov 2025 02:31:03 +0000 Manifest this update: Mon 03 Nov 2025 02:31:03 +0000 Manifest next update: Mon 10 Nov 2025 02:31:03 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: 6l67nvdlbRN1trnKv9M5utntMV9UoPZhu/Rs2DemIyM=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: JeP8VoOcpiutGG7hGzbyaQvIgNDCVBOYu3S0WeuVu3E=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: UaaSyqLY1EU1feMuBNb93HrMgg8A6BJd78TyE8+TiZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Nov 3 02:31:03 2025 GMT Not After : Nov 10 02:31:03 2025 GMT Subject: CN=690813e7-916c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:94:07:02:2f:ad:13:26:75:4d:94:86:a0: 38:15:b1:15:00:4e:92:d2:dc:5c:f6:ca:6e:da:55: 5c:bf:9e:4b:da:aa:b6:de:7a:8b:ea:11:4d:89:cc: 6d:5a:6a:2b:ed:74:14:07:f2:69:f9:c1:23:03:c0: 23:22:6c:8e:1e:38:6a:b8:28:24:a8:c4:69:07:e1: e8:d5:44:75:b2:19:f9:4a:70:be:6d:cd:38:de:c7: 6a:da:fa:51:95:f9:4a:a7:73:36:6b:75:26:a0:09: b2:f2:6d:7d:18:94:b9:0e:31:3c:f0:d2:db:b3:e3: ec:39:de:1d:f3:d6:ec:47:af:f3:cb:d0:6f:e2:e6: 60:c1:7e:fa:25:be:e2:da:3e:45:55:21:df:a8:d2: a2:be:94:8d:83:d0:be:a0:9d:5f:97:c3:f6:c0:92: 2b:fa:e2:b8:ec:48:95:80:81:d9:0f:13:5f:e9:c9: 9a:ec:8e:65:77:18:b9:92:1a:9d:49:9e:39:ae:9f: 7c:ab:68:23:15:37:ad:b9:1d:62:87:29:a5:22:23: 76:e8:59:d1:3a:67:7b:4b:6c:ef:c1:27:52:1c:10: 34:38:61:d9:26:8e:33:42:3b:1c:ff:a5:80:bc:3d: b5:74:fa:fa:c2:93:33:c6:99:54:1e:b7:c4:a1:82: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B1:EE:0E:13:6D:12:A7:BD:50:ED:61:C1:B2:19:CF:AE:D1:42:F7 X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b2:d5:15:eb:eb:be:ea:23:c1:1b:d1:4f:6d:c3:09:f0:e2: b2:db:55:c1:6f:c6:00:11:4c:57:4d:df:76:03:48:6a:b6:b9: 06:6f:e7:a7:51:7e:d7:1f:95:f2:36:83:b9:b3:3a:4c:89:4f: d2:1e:af:56:d1:d4:22:f2:62:51:cf:97:7f:67:d7:f8:71:47: 90:f2:63:52:12:a1:8b:02:07:47:aa:67:e2:8f:c6:f0:eb:6f: a2:e6:16:b0:f5:23:ad:04:55:77:07:ea:2f:59:12:74:41:9b: 4a:56:a1:d7:77:4b:85:90:e1:c3:dd:e2:70:03:0e:da:b6:25: d7:a4:16:e6:ca:9d:19:86:a3:f3:b0:d5:f3:86:bc:8f:c7:8e: 40:17:ef:c9:ee:f2:ab:a4:29:c4:98:a4:c7:23:2d:99:e9:fe: fd:ca:e4:15:ce:da:e7:4b:56:61:19:3f:42:18:f7:e1:40:4e: 49:b1:55:c3:84:37:cf:c1:de:94:32:5f:21:26:0e:e3:b2:e5: e8:e7:4c:c5:05:d0:43:c6:3b:35:66:f2:04:9e:df:51:bd:de: c8:19:05:ed:5b:4d:94:fd:7c:d5:ad:6d:a6:71:ac:3a:ea:4c: ca:b8:db:56:5e:d4:ff:ac:59:ec:bd:9a:46:91:85:1f:ea:d3: 95:b0:fa:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjUxMTAzMDIzMTAzWhcNMjUxMTEwMDIzMTAzWjAYMRYwFAYD VQQDEw02OTA4MTNlNy05MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN+UBwIvrRMmdU2UhqA4FbEVAE6S0txc9spu2lVcv55L2qq23nqL6hFNicxt Wmor7XQUB/Jp+cEjA8AjImyOHjhquCgkqMRpB+Ho1UR1shn5SnC+bc043sdq2vpR lflKp3M2a3UmoAmy8m19GJS5DjE88NLbs+PsOd4d89bsR6/zy9Bv4uZgwX76Jb7i 2j5FVSHfqNKivpSNg9C+oJ1fl8P2wJIr+uK47EiVgIHZDxNf6cma7I5ldxi5khqd SZ45rp98q2gjFTetuR1ihymlIiN26FnROmd7S2zvwSdSHBA0OGHZJo4zQjsc/6WA vD21dPr6wpMzxplUHrfEoYJizwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOx7g4T bRKnvVDtYcGyGc+u0UL3MB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUstUV6+u+6iPBG9FPbcMJ8OKy21XBb8YAEUxXTd92A0hqtrkGb+en UX7XH5XyNoO5szpMiU/SHq9W0dQi8mJRz5d/Z9f4cUeQ8mNSEqGLAgdHqmfij8bw 62+i5haw9SOtBFV3B+ovWRJ0QZtKVqHXd0uFkOHD3eJwAw7atiXXpBbmyp0ZhqPz sNXzhryPx45AF+/J7vKrpCnEmKTHIy2Z6f79yuQVztrnS1ZhGT9CGPfhQE5JsVXD hDfPwd6UMl8hJg7jsuXo50zFBdBDxjs1ZvIEnt9Rvd7IGQXtW02U/XzVrW2mcaw6 6kzKuNtWXtT/rFnsvZpGkYUf6tOVsPoX -----END CERTIFICATE-----Generated at Tue Nov 4 22:45:06 2025 by rpki-client