$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: S8cr0DiabHSRaHgXX9IwItvT+wYawpoTWXNiu9OouEQ= Subject key identifier: BB:DB:75:02:31:A8:11:E4:96:7C:7F:EE:96:E9:3C:67:CC:53:59:0E Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 040F Signing time: Wed 05 Nov 2025 00:30:15 +0000 Manifest this update: Wed 05 Nov 2025 00:30:15 +0000 Manifest next update: Wed 12 Nov 2025 00:30:15 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: pPnGzx7GTs1Nkfl3I/TH6vS2oW7LV9XroSiqKwp4cVk=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Nov 5 00:30:15 2025 GMT Not After : Nov 12 00:30:15 2025 GMT Subject: CN=690a9a97-c3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:ee:55:8d:b2:0b:c6:d6:fa:45:47:d1:8a: b0:55:c6:6a:47:a3:e7:3e:9b:3d:13:a2:a4:98:ac: f7:b8:ff:ca:3e:89:d1:7a:50:fe:47:5f:89:03:88: 25:24:46:db:45:36:00:5e:ab:2b:9d:cb:9f:e5:6b: 77:2c:16:d8:c4:8c:42:54:82:34:e5:2e:bf:e1:30: 09:f8:60:d9:ed:6e:9c:66:85:9a:5a:41:9c:a4:66: d4:fc:3e:74:41:66:f6:d7:9b:f2:ac:5c:e4:1d:92: a1:e6:c4:96:a3:25:bb:60:9c:0a:d4:ec:1b:96:30: 2f:43:d0:19:e1:23:71:92:39:d3:ed:73:f2:af:d8: dc:e3:06:ea:f3:a4:e5:ff:b0:a5:f7:4b:ea:34:d0: 8f:f8:b6:5c:bd:da:18:a1:b7:5b:63:fa:0a:b6:92: 5d:a7:c3:b9:ca:dd:09:7e:27:ef:b7:ef:34:9b:a3: 8d:88:8d:7b:42:e5:7a:58:36:57:02:c4:6f:60:d2: dd:68:bd:93:9a:dc:fe:3f:67:9d:e4:b1:87:ab:da: cf:c4:55:48:de:3a:e9:df:d9:9c:d6:21:8d:d1:ca: 63:58:9e:96:fe:2d:4d:25:6d:61:12:05:27:60:56: f4:2d:23:30:31:4f:cc:8f:b7:00:11:36:32:97:df: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DB:75:02:31:A8:11:E4:96:7C:7F:EE:96:E9:3C:67:CC:53:59:0E X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4c:ea:df:47:68:88:0f:ee:79:70:2d:67:68:0e:9f:a4:41: d7:38:a5:05:c2:50:17:de:b7:48:54:90:cf:42:3f:57:b1:b9: 27:47:2a:05:f4:c4:f3:bf:2a:be:4a:70:51:16:3f:db:50:e8: 5b:ae:53:5f:2e:f2:5f:9d:7c:be:6e:52:fb:e9:eb:f0:ad:b5: f6:b7:bf:29:40:86:03:a3:0d:d7:95:15:30:28:9b:9c:bc:06: 2c:45:67:97:f1:5b:7e:a3:22:7f:06:f6:1f:1a:67:d7:91:fe: ba:2d:bd:96:e5:6f:87:09:cc:08:6d:84:0e:d6:bb:ae:a3:10: cc:de:c6:8a:54:09:53:52:74:f7:bf:d9:44:58:c8:e0:99:ed: f2:9c:e3:0f:01:82:1c:96:83:6a:60:67:b5:43:8c:a8:f4:3d: bc:24:26:cd:54:22:cf:8c:02:00:76:95:14:60:04:54:f8:2f: 92:75:d3:74:0d:fd:c8:22:5b:43:3a:f6:70:bf:85:18:9d:6b: 99:f8:b0:1b:7e:ae:ab:4e:53:88:a7:0b:b8:2f:44:33:68:88: 7e:79:6c:71:5a:f5:eb:fc:98:b9:b1:05:84:2c:fb:c2:88:51: 5f:ea:9f:1a:a3:19:48:a7:8f:e3:21:a8:b3:46:a8:a5:7a:4e: 14:80:cf:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUxMTA1MDAzMDE1WhcNMjUxMTEyMDAzMDE1WjAYMRYwFAYD VQQDEw02OTBhOWE5Ny1jM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw3uVY2yC8bW+kVH0YqwVcZqR6PnPps9E6KkmKz3uP/KPonRelD+R1+JA4gl JEbbRTYAXqsrncuf5Wt3LBbYxIxCVII05S6/4TAJ+GDZ7W6cZoWaWkGcpGbU/D50 QWb215vyrFzkHZKh5sSWoyW7YJwK1OwbljAvQ9AZ4SNxkjnT7XPyr9jc4wbq86Tl /7Cl90vqNNCP+LZcvdoYobdbY/oKtpJdp8O5yt0Jfifvt+80m6ONiI17QuV6WDZX AsRvYNLdaL2Tmtz+P2ed5LGHq9rPxFVI3jrp39mc1iGN0cpjWJ6W/i1NJW1hEgUn YFb0LSMwMU/Mj7cAETYyl9864QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvbdQIx qBHklnx/7pbpPGfMU1kOMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApTOrfR2iID+55cC1naA6fpEHXOKUFwlAX3rdIVJDPQj9XsbknRyoF 9MTzvyq+SnBRFj/bUOhbrlNfLvJfnXy+blL76evwrbX2t78pQIYDow3XlRUwKJuc vAYsRWeX8Vt+oyJ/BvYfGmfXkf66Lb2W5W+HCcwIbYQO1ruuoxDM3saKVAlTUnT3 v9lEWMjgme3ynOMPAYIcloNqYGe1Q4yo9D28JCbNVCLPjAIAdpUUYARU+C+SddN0 Df3IIltDOvZwv4UYnWuZ+LAbfq6rTlOIpwu4L0QzaIh+eWxxWvXr/Ji5sQWELPvC iFFf6p8aoxlIp4/jIaizRqilek4UgM9T -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:25 2025 by rpki-client