$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: cmT6RareqlDXZfwiVnixMBg9+gexpAtZ+RlG4BTKF+k= Subject key identifier: 60:0D:4C:43:FA:33:F0:DC:98:2A:1B:CD:3A:FA:38:45:16:8C:56:63 Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: 0122 Signing time: Wed 05 Nov 2025 04:56:11 +0000 Manifest this update: Wed 05 Nov 2025 04:56:11 +0000 Manifest next update: Wed 12 Nov 2025 04:56:11 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 41llNalsf/BKoN5jr1/DbLxX76vQM6RIgbduoCtCTXc=) 2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: SSYQhoePXSEZdBWsz2dSUFdjtoPBSwBZmvZLvzmRmE0=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: P3/wZ7DQvbJJfKWvdajqCfHfPIC9vT8MvrKGyjWYukc=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo=) 5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Nov 5 04:56:11 2025 GMT Not After : Nov 12 04:56:11 2025 GMT Subject: CN=690ad8eb-0d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:7c:53:19:a4:fd:1d:ef:4e:99:d8:43:bb: 56:89:26:d5:be:b0:f2:ee:18:3e:fc:6d:6c:ef:e4: 94:8d:c5:62:cf:df:f2:cd:db:6d:39:7e:82:8c:43: bb:7f:17:80:35:15:ce:6d:08:49:ed:ed:dc:e0:a9: 4b:e1:9d:65:c8:1e:f1:68:e5:c1:54:90:73:7a:5c: ed:7a:6b:28:74:99:ed:da:30:5d:8a:9f:6a:51:19: 2b:55:d8:a9:2f:db:90:14:9e:6f:b6:fc:0f:2d:be: d0:be:01:63:71:68:4b:30:ed:76:5e:31:f7:a2:5f: 5c:48:ab:5f:50:4f:e6:e2:4b:e7:30:53:a4:19:69: 48:4f:c8:7f:9c:ae:b7:df:d7:fb:a4:b7:c8:08:16: 23:47:07:e9:2a:25:0d:a3:26:0f:fa:3d:13:03:36: 85:6c:c9:81:ab:d7:88:40:02:e2:07:79:7e:66:79: 02:3f:69:e3:9a:f4:b0:93:5a:de:ba:57:59:a4:cb: 05:f1:ba:8f:43:43:84:17:95:07:72:e8:84:a6:e9: de:7f:d0:30:91:9a:34:db:28:f3:5d:19:60:83:0a: a4:38:67:a1:b7:7e:54:58:1c:5d:dd:9d:30:c1:a7: ea:21:3b:54:be:24:48:b5:99:7f:05:07:b2:34:4c: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0D:4C:43:FA:33:F0:DC:98:2A:1B:CD:3A:FA:38:45:16:8C:56:63 X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:76:e1:da:75:57:0e:88:a7:76:f3:2c:4c:7a:78:95:c3:49: 16:75:ca:6d:75:e3:f1:95:82:35:40:1d:97:14:ad:c9:6c:bb: 6e:e3:4d:73:c8:2b:5f:c3:e4:de:42:a9:64:24:2b:2e:48:a3: 76:8a:69:f9:1b:af:32:58:07:57:d9:c3:1c:fd:a7:0f:ec:8a: 92:e5:20:96:02:cf:fa:67:19:31:89:f5:73:74:e6:ed:1f:bb: 07:87:93:c5:05:69:aa:8f:53:5b:66:e6:ed:3d:c6:50:e8:d6: 36:b4:fa:a5:90:64:1b:c9:d9:6e:c0:54:f2:76:c1:c7:bd:80: fb:cf:5c:f7:24:3e:b7:f3:b9:e1:a2:71:26:51:02:53:73:92: 0b:c4:79:28:ef:70:f2:9d:91:6f:73:4b:d6:63:b5:1e:62:5c: 85:23:84:c2:35:da:8d:f6:58:dd:bf:e7:98:c9:ec:bf:09:e9: 90:ca:71:f9:61:72:90:d3:c8:ad:4f:f3:24:1c:ce:3a:02:00: df:fb:f1:87:6a:ed:e9:49:38:0d:58:43:92:1d:f0:a9:d9:be: d0:72:c1:c4:ba:dd:1b:23:c6:53:fc:21:59:89:60:09:c3:c3: 9e:8b:72:9d:91:90:c6:25:3e:a4:f1:d7:f3:a3:b6:b8:e5:85: 93:1d:e4:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUxMTA1MDQ1NjExWhcNMjUxMTEyMDQ1NjExWjAYMRYwFAYD VQQDEw02OTBhZDhlYi0wZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08R8Uxmk/R3vTpnYQ7tWiSbVvrDy7hg+/G1s7+SUjcViz9/yzdttOX6CjEO7 fxeANRXObQhJ7e3c4KlL4Z1lyB7xaOXBVJBzelztemsodJnt2jBdip9qURkrVdip L9uQFJ5vtvwPLb7QvgFjcWhLMO12XjH3ol9cSKtfUE/m4kvnMFOkGWlIT8h/nK63 39f7pLfICBYjRwfpKiUNoyYP+j0TAzaFbMmBq9eIQALiB3l+ZnkCP2njmvSwk1re uldZpMsF8bqPQ0OEF5UHcuiEpunef9AwkZo02yjzXRlggwqkOGeht35UWBxd3Z0w wafqITtUviRItZl/BQeyNEweqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGANTEP6 M/DcmCobzTr6OEUWjFZjMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJduHadVcOiKd28yxMeniVw0kWdcptdePxlYI1QB2XFK3JbLtu401z yCtfw+TeQqlkJCsuSKN2imn5G68yWAdX2cMc/acP7IqS5SCWAs/6ZxkxifVzdObt H7sHh5PFBWmqj1NbZubtPcZQ6NY2tPqlkGQbydluwFTydsHHvYD7z1z3JD6387nh onEmUQJTc5ILxHko73DynZFvc0vWY7UeYlyFI4TCNdqN9ljdv+eYyey/CemQynH5 YXKQ08itT/MkHM46AgDf+/GHau3pSTgNWEOSHfCp2b7QcsHEut0bI8ZT/CFZiWAJ w8Oei3KdkZDGJT6k8dfzo7a45YWTHeSn -----END CERTIFICATE-----Generated at Wed Nov 5 14:36:04 2025 by rpki-client