$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: qOe5Z1QqIfVaNu2zaaWMxwvb7K3D9TSqBy14uI8a8Ak= Subject key identifier: 5E:F8:71:85:04:4D:9A:C4:3A:E9:C4:C1:FF:40:1F:FE:AC:74:AC:8C Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 01D5 Signing time: Wed 05 Nov 2025 02:55:24 +0000 Manifest this update: Wed 05 Nov 2025 02:55:24 +0000 Manifest next update: Wed 12 Nov 2025 02:55:24 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: QWQtieG1pJE4RdWAq76DOF1AkHywHwKKSOGaOQq16YM=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Nov 5 02:55:24 2025 GMT Not After : Nov 12 02:55:24 2025 GMT Subject: CN=690abc9c-8b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:9d:2a:13:c7:fb:a0:f6:28:c7:97:ea:be: 10:4f:5d:1c:4c:77:eb:ec:a3:e1:1b:cf:d5:b1:b0: b6:23:7e:3d:f1:44:04:23:7b:2f:63:51:a9:0b:78: 94:ad:cd:e3:a4:fb:2d:bd:1e:20:4b:3b:df:8e:ae: 62:a7:67:e8:34:6c:51:a1:dd:21:ba:fb:ef:f8:94: 28:cd:4f:68:ee:ca:f3:1c:aa:68:69:59:98:ac:0f: 4b:ce:74:ed:c7:5a:af:40:77:ec:03:32:bc:7a:9e: 4f:22:1d:14:1f:12:b9:ec:14:a5:39:0f:6e:d9:8c: 1e:f0:da:40:9d:3e:a4:af:50:a4:17:4c:be:10:22: 8e:8b:d1:a9:72:a1:52:57:04:4f:34:ee:56:07:fd: 92:f1:05:dc:37:51:54:68:2c:86:53:7b:66:e0:cc: b3:3c:ea:1b:b7:ad:89:94:21:29:fb:70:9f:46:53: d8:28:12:67:9d:65:3b:15:0a:64:d9:67:cc:32:50: e1:b0:62:21:d8:19:a4:6c:c4:5e:26:31:6e:6e:df: 4d:91:d4:18:8a:16:a1:ff:62:f2:a1:59:23:b9:54: 5b:44:83:5b:63:b2:75:bb:28:88:90:4b:b4:99:3c: cc:74:82:58:ca:a5:85:e9:72:72:5c:b5:9d:ba:43: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F8:71:85:04:4D:9A:C4:3A:E9:C4:C1:FF:40:1F:FE:AC:74:AC:8C X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:4a:b4:e1:cb:4c:2f:d6:86:04:d1:50:10:bc:ed:f6:20:ea: 1a:30:25:f4:4c:4d:1e:3a:5a:24:53:6c:50:62:b5:24:23:dc: c7:c8:1e:23:53:26:41:77:0c:9a:27:03:73:a5:83:fa:7a:ef: a0:e3:e4:8e:94:72:c6:86:78:64:54:75:b4:a9:56:8f:57:71: 6f:cc:13:8e:40:3f:b2:05:6b:34:59:da:4e:b6:4f:18:61:22: 38:da:af:b1:82:5e:d1:fa:5d:9f:8b:e7:3d:cd:96:56:3f:a8: 49:d9:54:73:68:23:31:73:4a:1d:80:0c:ad:d6:db:a9:53:5e: fd:d3:98:28:d4:da:c5:cd:5c:52:b1:69:10:94:1d:8b:b8:30: d3:d1:a2:85:a8:6c:70:61:4d:f8:73:02:04:d6:31:56:3b:e3: d7:36:23:71:cb:d1:57:1b:bf:ff:63:af:09:ee:64:a3:bf:9b: 11:40:d3:9b:49:42:16:dc:f2:5c:a7:13:95:08:ba:ed:a8:91: 5d:4a:3b:67:c0:0b:90:01:2d:ef:97:05:8b:aa:0f:c4:0c:44: f6:63:a2:e1:33:fe:5d:e6:02:22:41:44:6e:16:54:4a:86:69: ea:1a:bf:1e:5d:6d:47:89:e1:a1:9b:8a:0c:00:55:3b:14:1a: a6:da:54:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUxMTA1MDI1NTI0WhcNMjUxMTEyMDI1NTI0WjAYMRYwFAYD VQQDEw02OTBhYmM5Yy04YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH6dKhPH+6D2KMeX6r4QT10cTHfr7KPhG8/VsbC2I3498UQEI3svY1GpC3iU rc3jpPstvR4gSzvfjq5ip2foNGxRod0huvvv+JQozU9o7srzHKpoaVmYrA9LznTt x1qvQHfsAzK8ep5PIh0UHxK57BSlOQ9u2Ywe8NpAnT6kr1CkF0y+ECKOi9GpcqFS VwRPNO5WB/2S8QXcN1FUaCyGU3tm4MyzPOobt62JlCEp+3CfRlPYKBJnnWU7FQpk 2WfMMlDhsGIh2BmkbMReJjFubt9NkdQYihah/2LyoVkjuVRbRINbY7J1uyiIkEu0 mTzMdIJYyqWF6XJyXLWdukM0ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF74cYUE TZrEOunEwf9AH/6sdKyMMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYSrThy0wv1oYE0VAQvO32IOoaMCX0TE0eOlokU2xQYrUkI9zHyB4j UyZBdwyaJwNzpYP6eu+g4+SOlHLGhnhkVHW0qVaPV3FvzBOOQD+yBWs0WdpOtk8Y YSI42q+xgl7R+l2fi+c9zZZWP6hJ2VRzaCMxc0odgAyt1tupU17905go1NrFzVxS sWkQlB2LuDDT0aKFqGxwYU34cwIE1jFWO+PXNiNxy9FXG7//Y68J7mSjv5sRQNOb SUIW3PJcpxOVCLrtqJFdSjtnwAuQAS3vlwWLqg/EDET2Y6LhM/5d5gIiQURuFlRK hmnqGr8eXW1HieGhm4oMAFU7FBqm2lTF -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:17 2025 by rpki-client