$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: mj5hSe+6NPt2B5zRTUtnFuNhx+e29aTID2MFwMBZaSE= Subject key identifier: 4A:9E:EE:20:C6:6E:4B:77:B7:14:75:5B:A6:C9:51:B9:75:51:22:43 Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 080A Signing time: Sun 02 Nov 2025 20:54:52 +0000 Manifest this update: Sun 02 Nov 2025 20:54:51 +0000 Manifest next update: Sun 09 Nov 2025 20:54:51 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: chInqurFCRT8xHK4evOOBiKhkdvE/1DDelGD5jvA/84=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: +xXZdocc+DAKSGVr9i3J1ZCcXvPRm7qfVi4qSp6nPXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Nov 2 20:54:51 2025 GMT Not After : Nov 9 20:54:51 2025 GMT Subject: CN=6907c51b-71a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:bf:9d:9b:e1:6a:a6:29:f5:29:b1:0f:cb: 06:03:90:57:cf:6f:22:57:2e:2b:1a:ca:ef:73:4a: 35:46:44:a8:c8:ea:83:d3:6b:43:ba:54:51:a7:c8: a1:52:91:ba:55:3d:7e:cf:4d:7f:85:fc:e5:04:fd: 4e:3f:9e:f1:85:3c:54:2c:09:dc:56:11:41:94:9e: 81:89:65:fd:1c:26:80:17:27:6d:41:4b:04:7c:96: 8a:59:3e:a6:46:c4:8c:30:0a:70:a7:20:16:83:87: db:b8:2b:1f:d4:50:3e:4c:f7:b2:4b:10:8f:cf:68: 53:e1:00:d6:86:16:95:3b:ff:c6:b8:37:c1:65:ed: ba:5b:50:78:27:e3:03:de:1e:27:f7:c1:ed:2f:41: fd:02:32:26:38:4e:1f:7a:0d:c3:d7:35:74:b9:12: a6:16:35:72:87:4f:ef:a8:cc:8e:ba:b5:93:ce:a4: 05:68:c0:dd:84:fe:3c:28:6f:11:b6:7e:29:ab:5e: f8:38:5c:14:dc:b1:56:9f:76:a8:fe:24:e8:89:75: 6f:21:88:49:25:a8:d7:29:cd:fe:c0:17:9e:bb:28: 65:c7:00:a4:08:ce:74:c1:37:c8:c3:fa:54:ac:ab: 8c:ba:82:06:81:05:b3:51:47:b1:2d:89:bb:b2:b7: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:EE:20:C6:6E:4B:77:B7:14:75:5B:A6:C9:51:B9:75:51:22:43 X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:47:b5:ec:e9:d0:ee:31:81:eb:c3:15:a5:33:b1:29:fe:d6: 08:fb:95:f1:09:75:ae:09:c3:37:01:72:9f:fb:8c:3d:d6:5d: b7:be:22:b7:6a:bd:cd:95:ab:b9:da:a3:bd:bf:4a:bd:18:08: 75:40:6f:33:41:ac:c3:cb:72:e4:e0:61:90:0f:5c:77:00:45: 8e:dc:9a:56:c1:39:9c:d9:77:aa:6e:e3:e4:36:1d:c6:b3:d3: 5d:84:ab:79:a5:bd:48:c4:35:2e:59:f7:c5:37:4d:78:c9:77: b1:95:84:d4:2e:0a:5d:c0:84:76:49:9f:5f:54:c9:bf:1b:b1: 2f:3d:2e:a3:b9:47:01:1c:b3:62:99:e4:74:9d:cf:e7:95:47: f2:d8:b6:e0:cb:26:90:83:f1:da:bc:f9:33:7c:8a:3c:f8:bd: 57:8c:b8:98:06:ef:97:47:84:b1:d7:3d:fc:f5:f6:cc:d3:5e: b8:7c:d4:66:f6:d3:b0:e5:3c:54:f8:91:44:a5:15:24:b3:d7: 0b:46:11:65:82:e7:ab:9a:99:53:98:c1:64:e1:cc:ad:ea:06: d7:3f:fa:bf:00:bf:fc:3b:67:8a:bf:1d:e8:38:85:13:ef:76: cc:a2:45:e7:88:ec:cc:80:27:c3:83:fd:e9:94:e8:c1:8f:7d: 8d:e0:95:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUxMTAyMjA1NDUxWhcNMjUxMTA5MjA1NDUxWjAYMRYwFAYD VQQDEw02OTA3YzUxYi03MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fK/nZvhaqYp9SmxD8sGA5BXz28iVy4rGsrvc0o1RkSoyOqD02tDulRRp8ih UpG6VT1+z01/hfzlBP1OP57xhTxULAncVhFBlJ6BiWX9HCaAFydtQUsEfJaKWT6m RsSMMApwpyAWg4fbuCsf1FA+TPeySxCPz2hT4QDWhhaVO//GuDfBZe26W1B4J+MD 3h4n98HtL0H9AjImOE4feg3D1zV0uRKmFjVyh0/vqMyOurWTzqQFaMDdhP48KG8R tn4pq174OFwU3LFWn3ao/iToiXVvIYhJJajXKc3+wBeeuyhlxwCkCM50wTfIw/pU rKuMuoIGgQWzUUexLYm7srdp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqe7iDG bkt3txR1W6bJUbl1USJDMB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKR7Xs6dDuMYHrwxWlM7Ep/tYI+5XxCXWuCcM3AXKf+4w91l23viK3 ar3Nlau52qO9v0q9GAh1QG8zQazDy3Lk4GGQD1x3AEWO3JpWwTmc2XeqbuPkNh3G s9NdhKt5pb1IxDUuWffFN014yXexlYTULgpdwIR2SZ9fVMm/G7EvPS6juUcBHLNi meR0nc/nlUfy2LbgyyaQg/HavPkzfIo8+L1XjLiYBu+XR4Sx1z389fbM0164fNRm 9tOw5TxU+JFEpRUks9cLRhFlguermplTmMFk4cyt6gbXP/q/AL/8O2eKvx3oOIUT 73bMokXniOzMgCfDg/3plOjBj32N4JWj -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:22 2025 by rpki-client