$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json) Hash identifier: DmCbdN4AKGzqxST6RuPyp05wfVAgdX0A/Wslj7ajTPs= Subject key identifier: A4:42:D7:36:FC:0C:04:1D:00:17:A4:F8:75:C9:C1:A0:8C:86:D6:1C Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft Manifest number: 8A Signing time: Wed 05 Nov 2025 06:46:57 +0000 Manifest this update: Wed 05 Nov 2025 06:46:57 +0000 Manifest next update: Wed 12 Nov 2025 06:46:57 +0000 Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: gADu7UzF5HOGqR8Ki8xw5f0nyRhYrtKomrVpNiKTuFU=) 2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=) 3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=) 4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Validity Not Before: Nov 5 06:46:57 2025 GMT Not After : Nov 12 06:46:57 2025 GMT Subject: CN=690af2e1-375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:a5:03:01:cd:13:ad:bc:b5:05:8a:82:a6: 96:9e:24:17:3b:af:b6:36:76:24:b4:e5:b9:b1:13: 7e:e1:1b:9e:e7:79:9a:66:0c:c6:f5:e3:37:2e:9b: 2a:97:18:92:a4:61:58:b6:ba:48:d2:05:4b:de:b8: 76:27:38:40:d9:a5:59:4b:ab:97:f9:f5:67:c3:fc: 2f:eb:ec:d4:59:34:8c:e6:a2:a8:4a:8b:85:5d:a9: 3d:70:36:52:d0:46:ca:1a:88:9f:4b:61:4c:d9:30: 0a:bd:a5:80:13:9a:4d:99:75:74:73:a5:ac:5b:61: a6:2b:ea:9c:f3:40:ba:aa:d0:09:68:ca:87:ee:a8: 69:64:ae:44:5a:cd:a8:95:87:33:71:2d:d7:b2:26: 27:42:97:0c:e1:e6:69:ab:89:f5:a8:6d:c4:c3:38: 05:2c:bc:39:84:c1:aa:bd:0a:a0:04:ba:13:53:ee: 13:67:0c:a1:a7:2e:8a:3f:eb:7c:4c:34:1c:e9:8b: 38:7e:17:78:cb:bc:4a:be:d1:5d:fa:29:21:5a:26: 83:4c:16:6a:66:bd:f8:3c:66:c0:9c:3f:2c:b5:28: d9:94:98:ce:29:05:9c:7e:60:65:e4:bd:de:2a:e7: 11:ca:d3:14:97:ad:fb:eb:8e:f0:1f:88:d5:dc:fc: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:42:D7:36:FC:0C:04:1D:00:17:A4:F8:75:C9:C1:A0:8C:86:D6:1C X509v3 Authority Key Identifier: keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:06:7b:7b:47:48:a9:41:03:ae:b0:b2:da:2d:e4:cf:c6:79: e8:2d:be:a2:25:60:d7:80:c2:64:15:6d:41:42:18:b5:22:c9: 6d:1d:ec:72:4c:68:5c:7b:84:45:81:22:11:7d:98:73:d5:65: bb:68:5f:9c:fa:9f:c5:12:20:63:17:81:91:bf:de:a6:54:13: 51:d9:10:30:f9:c5:b2:3d:89:27:07:48:28:74:fb:1c:fd:c0: 70:a1:13:3a:7b:26:45:6b:9e:be:25:38:6c:b0:38:5d:64:af: 33:ea:97:d8:f1:f8:9e:5b:4c:66:84:f4:88:f6:24:49:a5:00: e2:b6:42:90:05:91:a2:0b:4a:54:af:be:59:d8:16:06:62:dc: be:a1:66:5e:81:85:ac:ef:d2:89:44:7c:66:14:6b:05:30:d5: 3f:cd:37:bb:3f:4d:c1:be:1e:6e:e1:4d:6a:90:d6:e7:4f:91: e7:55:d0:6d:35:ad:91:96:7d:a8:8d:6f:04:c7:26:b4:a6:6c: 25:56:f3:1b:b5:ad:9e:c3:d2:21:e0:b5:8d:39:cc:b9:34:f8: aa:e1:04:98:9d:cc:15:63:4b:e5:cc:56:ff:c7:2d:8e:92:c6: ae:2c:dc:8f:df:2a:ea:d0:db:fe:93:2e:21:cc:df:52:4c:fd: 7a:3c:53:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBMkUxMTAvBgNVBAUTKDZBM0VGNjcxODJEQkIwRjZDQ0YzQ0E0MTM3OEMwMTE5 ODA2QUU5QkQwHhcNMjUxMTA1MDY0NjU3WhcNMjUxMTEyMDY0NjU3WjAYMRYwFAYD VQQDEw02OTBhZjJlMS0zNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfylAwHNE628tQWKgqaWniQXO6+2NnYktOW5sRN+4Rue53maZgzG9eM3Lpsq lxiSpGFYtrpI0gVL3rh2JzhA2aVZS6uX+fVnw/wv6+zUWTSM5qKoSouFXak9cDZS 0EbKGoifS2FM2TAKvaWAE5pNmXV0c6WsW2GmK+qc80C6qtAJaMqH7qhpZK5EWs2o lYczcS3XsiYnQpcM4eZpq4n1qG3EwzgFLLw5hMGqvQqgBLoTU+4TZwyhpy6KP+t8 TDQc6Ys4fhd4y7xKvtFd+ikhWiaDTBZqZr34PGbAnD8stSjZlJjOKQWcfmBl5L3e KucRytMUl637647wH4jV3PzyuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRC1zb8 DAQdABek+HXJwaCMhtYcMB8GA1UdIwQYMBaAFGo+9nGC27D2zPPKQTeMARmAaum9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEEyRS9DODM2QzdCMkU5 MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQYk04OHBCTjR3QkdZQnE2 YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEEyRS9DODM2QzdCMkU5MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQ Yk04OHBCTjR3QkdZQnE2YjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLBnt7R0ipQQOusLLaLeTPxnnoLb6iJWDXgMJkFW1BQhi1IsltHexy TGhce4RFgSIRfZhz1WW7aF+c+p/FEiBjF4GRv96mVBNR2RAw+cWyPYknB0godPsc /cBwoRM6eyZFa56+JThssDhdZK8z6pfY8fieW0xmhPSI9iRJpQDitkKQBZGiC0pU r75Z2BYGYty+oWZegYWs79KJRHxmFGsFMNU/zTe7P03Bvh5u4U1qkNbnT5HnVdBt Na2Rln2ojW8Exya0pmwlVvMbta2ew9Ih4LWNOcy5NPiq4QSYncwVY0vlzFb/xy2O ksauLNyP3yrq0Nv+ky4hzN9STP16PFPa -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:34 2025 by rpki-client