$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json) Hash identifier: Svcu3Kiam0X9XrPNrtB4iATU2cECxwZr/SaAW9RU90g= Subject key identifier: 9A:1B:9D:89:61:CA:A8:CE:B9:E5:8F:2F:BC:78:E5:9F:69:75:A0:56 Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft Manifest number: 02C5 Signing time: Wed 05 Nov 2025 01:30:30 +0000 Manifest this update: Wed 05 Nov 2025 01:30:30 +0000 Manifest next update: Wed 12 Nov 2025 01:30:30 +0000 Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: gz+YVYYa9EQEGivR6vz4l3kspfNOzEPxVbneoy6lbkY=) 2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: vW2EZP2Cwb4m+zHwX4dxc62MHLuj24Kv3gEJBseD9aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Validity Not Before: Nov 5 01:30:30 2025 GMT Not After : Nov 12 01:30:30 2025 GMT Subject: CN=690aa8b6-1c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:82:f3:39:d2:0e:91:b8:df:39:27:ad:21: 2b:79:8d:50:11:15:18:a8:b6:ca:3e:65:d1:fd:8e: 0c:36:4f:93:22:72:3e:cc:13:00:b1:7f:8c:15:af: 7f:22:4d:7e:3a:be:2b:a9:dd:88:2b:2b:26:d0:58: 40:d9:2f:ab:b5:47:6a:d6:75:89:29:b0:f4:a0:ae: ef:05:41:95:66:4a:1b:60:44:aa:27:97:19:0e:ec: 09:ec:68:79:4e:8d:89:62:73:46:9a:1f:8c:72:53: 2f:89:11:0f:26:d0:ef:f6:5e:cd:d1:c8:9f:f6:4c: c6:ff:41:7e:91:78:a1:1f:ec:89:90:31:41:a1:a6: 7a:45:04:26:bc:03:5f:68:aa:0a:c0:36:b4:16:82: 00:15:18:80:84:54:c1:bf:94:64:5c:d0:f1:62:15: 24:07:1f:44:ed:22:ef:1a:ec:48:69:bb:62:c3:93: 66:8f:a8:9c:e5:7f:15:b6:76:37:a3:79:51:cb:e2: da:25:e1:97:c9:48:f5:ea:88:74:4b:1f:ee:96:5f: d3:ba:72:a5:86:76:be:d3:4a:ff:9b:2c:aa:be:ca: 8a:a8:16:b5:7d:cc:6b:af:5b:c7:f0:11:62:99:5c: 37:84:98:e4:7b:4f:f1:18:ee:d1:c8:48:3b:b9:16: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:9D:89:61:CA:A8:CE:B9:E5:8F:2F:BC:78:E5:9F:69:75:A0:56 X509v3 Authority Key Identifier: keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8f:e8:3c:b6:c2:31:bf:40:46:1b:3b:2c:c6:92:26:dc:61: 4b:d8:4f:59:85:ac:73:9b:ba:f8:cb:c4:32:c1:11:81:6f:f0: a5:56:63:68:7d:95:da:c6:19:f5:81:e5:07:a2:48:21:00:b7: 68:cd:8e:37:55:90:96:20:0b:af:2a:0f:a1:40:49:42:60:e7: ba:02:0e:64:8a:23:92:89:52:d5:09:a1:2d:f8:89:ff:eb:bc: 7e:92:03:6b:95:24:37:f6:39:72:f8:89:24:87:d2:2d:80:d3: 74:7e:63:dd:e9:f8:7e:05:3a:70:cd:78:c8:12:25:26:cf:91: 81:b3:01:e2:29:85:1f:a4:3c:dc:52:e8:a1:8b:1b:da:19:49: 66:28:9b:82:54:d5:e7:cb:e8:e0:b9:75:d8:b6:bd:92:a2:d1: 88:1d:f8:67:58:10:42:6c:82:24:1f:5e:b9:ce:f8:da:a4:ac: d9:71:be:0a:c0:c2:7d:df:60:bd:22:38:9d:58:71:df:bf:a0: 63:a8:1d:98:18:4e:65:42:73:6a:26:07:75:27:75:ff:59:fc: d4:02:c0:ed:5d:66:4c:8d:8c:53:4f:ec:f6:29:03:80:6e:a8: 5f:be:22:cb:7c:b3:4b:39:21:9b:b9:4d:71:1a:6c:3d:3b:1b: 69:80:71:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx Qzg4MzdBQzYwHhcNMjUxMTA1MDEzMDMwWhcNMjUxMTEyMDEzMDMwWjAYMRYwFAYD VQQDEw02OTBhYThiNi0xYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUqC8znSDpG43zknrSEreY1QERUYqLbKPmXR/Y4MNk+TInI+zBMAsX+MFa9/ Ik1+Or4rqd2IKysm0FhA2S+rtUdq1nWJKbD0oK7vBUGVZkobYESqJ5cZDuwJ7Gh5 To2JYnNGmh+MclMviREPJtDv9l7N0cif9kzG/0F+kXihH+yJkDFBoaZ6RQQmvANf aKoKwDa0FoIAFRiAhFTBv5RkXNDxYhUkBx9E7SLvGuxIabtiw5Nmj6ic5X8VtnY3 o3lRy+LaJeGXyUj16oh0Sx/ull/TunKlhna+00r/myyqvsqKqBa1fcxrr1vH8BFi mVw3hJjke0/xGO7RyEg7uRYugwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJobnYlh yqjOueWPL7x45Z9pdaBWMB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVDMS9DQkU2QkM3NDBGMDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYz bU1uT1FjSEY1MG9jaURlc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaj+g8tsIxv0BGGzssxpIm3GFL2E9Zhaxzm7r4y8QywRGBb/ClVmNo fZXaxhn1geUHokghALdozY43VZCWIAuvKg+hQElCYOe6Ag5kiiOSiVLVCaEt+In/ 67x+kgNrlSQ39jly+Ikkh9ItgNN0fmPd6fh+BTpwzXjIEiUmz5GBswHiKYUfpDzc UuihixvaGUlmKJuCVNXny+jguXXYtr2SotGIHfhnWBBCbIIkH165zvjapKzZcb4K wMJ932C9IjidWHHfv6BjqB2YGE5lQnNqJgd1J3X/WfzUAsDtXWZMjYxTT+z2KQOA bqhfviLLfLNLOSGbuU1xGmw9OxtpgHHF -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:04 2025 by rpki-client