$ rpki-client -vvf rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft File: 9wpgFV53FUM_JUSW4nuAimPIyXQ.mft (raw, json) Hash identifier: EsfLL4yiZHVlIVU7WhItw6wdNTPy/bImv5QzakLmQBE= Subject key identifier: 22:63:38:27:04:FA:7D:71:BC:F6:82:9E:2F:87:A7:93:1E:CC:FC:03 Authority key identifier: F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 Certificate issuer: /CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Certificate serial: 0EAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft Manifest number: 0E9D Signing time: Sun 02 Nov 2025 17:41:40 +0000 Manifest this update: Sun 02 Nov 2025 17:41:39 +0000 Manifest next update: Sun 09 Nov 2025 17:41:39 +0000 Files and hashes: 1: 9wpgFV53FUM_JUSW4nuAimPIyXQ.crl (hash: +2en8ftrJuuh8Bu4VIauaOS0H4cFEFTrrKd1ptwHLhY=) 2: A4DF63AA9E1B11E9AE66905DC4F9AE02.roa (hash: 4WHPjB+m4yRCXMy3983Y9jSkNEd4vDiMQ+e+khb3JCk=) 3: A44F5CE29E1B11E9AE66905DC4F9AE02.roa (hash: v/1JOuF1wbI90UcR7urzQr8Y5tNoqPwF+BDce/tPjb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F83E, serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Validity Not Before: Nov 2 17:41:39 2025 GMT Not After : Nov 9 17:41:39 2025 GMT Subject: CN=690797d3-2377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:3e:57:c5:14:da:92:9a:4a:fe:53:9e:1a: af:d9:b4:6e:84:c8:37:c3:38:17:9f:ef:33:ed:b9: 69:99:7b:8b:a1:a5:b8:1a:30:dc:cf:45:02:cc:39: c8:f0:36:76:28:5c:08:ad:ab:bf:56:3e:87:18:a8: df:0d:6c:cf:ae:f8:81:64:6f:91:20:b9:52:3e:5c: c7:c7:96:b4:d2:0e:7a:51:9e:74:80:c0:e8:ee:ca: 2d:c9:da:dd:c4:02:f6:7a:89:df:49:d3:00:cc:dd: a4:be:fe:99:ea:5d:37:d8:db:5a:e5:0c:cb:80:75: 97:76:01:3d:94:ed:ff:f0:ef:9e:28:14:7c:23:2c: 0e:af:70:da:65:67:5b:23:e6:69:0d:bb:83:04:24: 01:1d:4b:f2:db:cb:a2:32:d4:1c:51:01:a1:41:7d: 1c:2d:0b:ca:22:07:d0:d2:37:de:72:74:4b:09:74: e3:9c:70:91:33:a2:46:0b:c8:8d:5c:59:77:a4:99: 75:3b:3c:11:45:97:c4:68:e8:f4:32:26:24:c5:f8: d6:39:2f:ad:e8:3a:25:3a:6d:98:d4:f1:3d:c2:2b: 41:b3:b2:1e:f1:b3:7f:90:34:f6:37:c2:0f:68:e1: 6d:1b:24:f3:fe:f6:d3:64:05:8d:ff:9f:f2:68:1e: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:63:38:27:04:FA:7D:71:BC:F6:82:9E:2F:87:A7:93:1E:CC:FC:03 X509v3 Authority Key Identifier: keyid:F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b6:e3:4e:b7:75:87:d6:f2:6a:cb:db:a8:ab:2f:59:6c:d3: 69:f0:f1:dd:de:fb:a7:a0:06:f6:01:f8:32:7f:bf:fb:db:07: d7:52:c2:76:71:82:ac:de:bb:98:09:0c:e2:a9:4a:ed:0b:10: 7f:81:bc:5f:f0:c9:a3:8c:43:ce:17:4b:f4:e5:61:f2:db:0f: 2e:31:69:33:ef:82:af:02:91:2c:f9:c0:c0:c9:30:0b:af:c7: e4:b1:7f:95:99:a9:a8:4d:ff:cf:57:d0:ea:c9:e2:53:c1:1a: bf:39:56:e8:be:c1:56:3b:0b:2a:52:cc:6b:fc:ba:eb:83:24: d0:4f:11:e1:45:4c:c6:f0:a6:53:75:77:c9:97:de:53:40:06: 98:99:a1:d8:2a:46:a8:33:74:67:9d:0d:c9:a6:1d:bb:3e:bc: 73:b1:de:28:62:06:59:5f:4f:68:d8:fb:94:67:ac:6b:f3:0d: 90:ef:46:8c:a1:22:bf:69:fd:d3:9f:fe:23:87:e2:fb:6b:1f: 40:17:1a:23:64:06:4c:5d:a6:e0:c9:5e:23:8d:09:aa:33:9a: 92:e9:13:8d:74:c2:a8:7b:11:36:05:c2:e1:98:7b:54:21:df: 9d:57:6d:36:ad:80:b0:9b:11:5a:41:17:d7:6b:15:e2:8e:3e: b5:26:3e:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4M0UxMTAvBgNVBAUTKEY3MEE2MDE1NUU3NzE1NDMzRjI1NDQ5NkUyN0I4MDhB NjNDOEM5NzQwHhcNMjUxMTAyMTc0MTM5WhcNMjUxMTA5MTc0MTM5WjAYMRYwFAYD VQQDEw02OTA3OTdkMy0yMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0U+V8UU2pKaSv5Tnhqv2bRuhMg3wzgXn+8z7blpmXuLoaW4GjDcz0UCzDnI 8DZ2KFwIrau/Vj6HGKjfDWzPrviBZG+RILlSPlzHx5a00g56UZ50gMDo7sotydrd xAL2eonfSdMAzN2kvv6Z6l032Nta5QzLgHWXdgE9lO3/8O+eKBR8IywOr3DaZWdb I+ZpDbuDBCQBHUvy28uiMtQcUQGhQX0cLQvKIgfQ0jfecnRLCXTjnHCRM6JGC8iN XFl3pJl1OzwRRZfEaOj0MiYkxfjWOS+t6DolOm2Y1PE9witBs7Ie8bN/kDT2N8IP aOFtGyTz/vbTZAWN/5/yaB74ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJjOCcE +n1xvPaCni+Hp5MezPwDMB8GA1UdIwQYMBaAFPcKYBVedxVDPyVEluJ7gIpjyMl0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjgzRS81MzczOEZFMjlF MUExMUU5QUVDRTAzNThDNEY5QUUwMi85d3BnRlY1M0ZVTV9KVVNXNG51QWltUEl5 WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl3cGdGVjUzRlVNX0pVU1c0bnVBaW1QSXlYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjgzRS81MzczOEZFMjlFMUExMUU5QUVDRTAzNThDNEY5QUUwMi85d3BnRlY1M0ZV TV9KVVNXNG51QWltUEl5WFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHtuNOt3WH1vJqy9uoqy9ZbNNp8PHd3vunoAb2Afgyf7/72wfXUsJ2 cYKs3ruYCQziqUrtCxB/gbxf8MmjjEPOF0v05WHy2w8uMWkz74KvApEs+cDAyTAL r8fksX+VmamoTf/PV9DqyeJTwRq/OVbovsFWOwsqUsxr/LrrgyTQTxHhRUzG8KZT dXfJl95TQAaYmaHYKkaoM3RnnQ3Jph27Prxzsd4oYgZZX09o2PuUZ6xr8w2Q70aM oSK/af3Tn/4jh+L7ax9AFxojZAZMXabgyV4jjQmqM5qS6RONdMKoexE2BcLhmHtU Id+dV202rYCwmxFaQRfXaxXijj61Jj5j -----END CERTIFICATE-----Generated at Tue Nov 4 08:08:11 2025 by rpki-client