$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: 9jn98MYUIfvBS3+OQDT+ddXT/GLoambp7CShQrY0BmI= Subject key identifier: 9B:45:63:37:3A:11:8E:8D:61:36:29:B0:69:C5:7F:BA:23:26:D6:8D Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 0214 Signing time: Wed 05 Nov 2025 02:20:40 +0000 Manifest this update: Wed 05 Nov 2025 02:20:39 +0000 Manifest next update: Wed 12 Nov 2025 02:20:39 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: MakS+bHgXwvZxL/ZY83ry032wtrphEobZPPbxzWkj0I=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Nov 5 02:20:39 2025 GMT Not After : Nov 12 02:20:39 2025 GMT Subject: CN=690ab478-bac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:6b:0b:95:e6:74:ba:1a:ed:f6:ab:6f:a7: b8:aa:03:9d:2e:50:96:18:e8:34:26:6b:a9:30:3b: d4:b5:4f:d7:80:bb:23:db:f3:c5:b7:ad:58:4c:f9: ea:e7:19:e0:1b:4d:2f:24:8c:6c:43:15:4c:58:4f: d8:49:df:b3:d4:fa:3a:1f:8e:26:20:3f:8f:28:66: df:c9:50:b8:2e:d3:52:02:83:c9:cb:57:b7:11:ac: e3:93:6a:99:27:5b:f7:18:f6:c9:97:89:df:74:20: b5:f0:69:4b:3c:5c:75:4d:a5:5d:06:00:c7:2d:81: 25:9e:1b:3b:15:bf:b4:d0:2f:19:21:a6:85:75:77: 58:74:30:4f:e0:03:d4:66:bf:0a:b8:8e:a9:07:a3: e1:9e:13:bb:49:f9:89:c2:d2:38:d4:80:5a:32:31: 96:eb:0b:3a:7d:63:97:e0:d9:99:19:6a:ae:f2:c4: d7:07:a4:9b:9f:6c:01:5f:ee:61:b5:df:46:3d:77: 04:c0:7a:7d:29:15:5e:87:ec:fd:d3:8d:56:70:2f: 10:36:60:5f:d9:2a:89:52:35:33:94:55:dd:de:8c: df:e9:00:44:7a:20:f9:9d:e5:97:43:6f:0d:7e:40: 26:31:e6:d5:8e:84:83:37:43:8f:2d:64:1f:4e:2e: ec:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:45:63:37:3A:11:8E:8D:61:36:29:B0:69:C5:7F:BA:23:26:D6:8D X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:31:f8:fe:3b:a3:4a:1f:54:f1:15:1c:70:c3:7f:f2:39:d3: c0:31:e9:4b:be:8d:ce:eb:42:ef:72:f9:7e:44:9f:4e:72:fc: ac:e5:e2:f6:98:5a:01:54:16:f8:77:bc:f2:b8:83:50:11:fd: 60:a0:92:5c:a4:b2:bb:30:f6:6e:9f:41:6f:73:2f:80:f2:a1: a1:d2:3c:75:f7:7d:99:47:bc:57:36:a9:87:c2:58:5d:43:a6: 59:b1:d1:a5:33:81:1e:69:a8:d0:93:3e:b8:29:5d:96:70:ea: 0b:e4:06:1b:84:2b:53:ed:e1:1a:40:52:66:e6:90:e4:8c:5b: c6:39:37:c9:8b:f9:60:ea:3f:0f:01:19:40:10:25:72:9d:27: f7:a4:1e:3d:57:25:f8:17:6b:e9:29:ab:ce:9c:20:ee:f6:d6: cd:86:8c:b0:aa:5f:7a:aa:07:05:b1:59:5b:0e:c7:54:57:c6: 36:a6:9a:59:06:bc:c7:d8:03:62:a5:ac:63:28:0a:1e:01:97: 9e:e3:d4:b6:7c:a4:c3:fa:a0:12:4a:a0:f8:c5:06:09:fe:c3: 5c:bf:d9:ae:8d:5a:33:f4:8b:9a:1a:9e:53:47:20:d6:ea:fc: df:3a:03:18:da:87:0c:34:8f:db:79:31:22:2b:a8:51:98:b7: cd:db:3e:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUxMTA1MDIyMDM5WhcNMjUxMTEyMDIyMDM5WjAYMRYwFAYD VQQDEw02OTBhYjQ3OC1iYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0VrC5XmdLoa7farb6e4qgOdLlCWGOg0JmupMDvUtU/XgLsj2/PFt61YTPnq 5xngG00vJIxsQxVMWE/YSd+z1Po6H44mID+PKGbfyVC4LtNSAoPJy1e3Eazjk2qZ J1v3GPbJl4nfdCC18GlLPFx1TaVdBgDHLYElnhs7Fb+00C8ZIaaFdXdYdDBP4APU Zr8KuI6pB6PhnhO7SfmJwtI41IBaMjGW6ws6fWOX4NmZGWqu8sTXB6Sbn2wBX+5h td9GPXcEwHp9KRVeh+z9041WcC8QNmBf2SqJUjUzlFXd3ozf6QBEeiD5neWXQ28N fkAmMebVjoSDN0OPLWQfTi7sHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtFYzc6 EY6NYTYpsGnFf7ojJtaNMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5Mfj+O6NKH1TxFRxww3/yOdPAMelLvo3O60Lvcvl+RJ9Ocvys5eL2 mFoBVBb4d7zyuINQEf1goJJcpLK7MPZun0Fvcy+A8qGh0jx1932ZR7xXNqmHwlhd Q6ZZsdGlM4EeaajQkz64KV2WcOoL5AYbhCtT7eEaQFJm5pDkjFvGOTfJi/lg6j8P ARlAECVynSf3pB49VyX4F2vpKavOnCDu9tbNhoywql96qgcFsVlbDsdUV8Y2pppZ BrzH2ANipaxjKAoeAZee49S2fKTD+qASSqD4xQYJ/sNcv9mujVoz9IuaGp5TRyDW 6vzfOgMY2ocMNI/beTEiK6hRmLfN2z43 -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:43 2025 by rpki-client