$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: mTrixXPVfqXq5qGCb4Vs1FtftMJZ5/3alIa0wSR6FdA= Subject key identifier: 0F:83:D8:9D:B0:B5:7B:3C:FB:53:B0:EE:2F:A9:5E:3E:34:DD:31:B6 Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: 01F5 Signing time: Wed 05 Nov 2025 02:37:26 +0000 Manifest this update: Wed 05 Nov 2025 02:37:25 +0000 Manifest next update: Wed 12 Nov 2025 02:37:25 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: Xg1HcoZm9DaSdicujdm1NzmCL7daHFI1qYkZF97UYZY=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: Nov 5 02:37:25 2025 GMT Not After : Nov 12 02:37:25 2025 GMT Subject: CN=690ab866-fb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:ee:7f:be:a6:d1:e6:f4:e1:11:78:6b:ea: 01:87:e2:91:17:e3:35:9e:92:02:54:2d:b7:9b:b6: a6:8e:71:74:1e:96:89:4c:07:c1:ae:56:9e:69:21: f7:ed:5a:4e:2f:26:ea:d8:e6:ff:6e:5d:c0:40:0a: 2c:39:35:dd:c8:ac:b0:ea:8f:a7:58:52:35:64:68: b6:c9:5a:a0:02:5c:34:f5:ef:b7:d0:23:a7:12:81: 66:db:20:d2:fe:dd:b3:bc:1f:d8:a9:26:8c:5e:c1: 23:88:6a:8f:b0:31:c0:a0:72:fb:32:c9:ca:a7:70: 4e:25:9d:b4:12:21:68:8a:03:a7:4a:13:81:0d:9f: 2d:c6:65:1c:08:77:81:db:84:a1:45:2e:b4:67:91: 10:95:a4:67:00:80:5c:1d:53:fe:ab:68:86:6a:77: b6:42:19:fe:65:a5:06:15:20:a4:71:17:a4:16:05: d5:d0:20:13:4a:d5:b3:ad:8c:74:af:28:af:92:cc: f5:49:2b:c1:d9:97:73:27:73:03:4f:03:4a:df:fb: 88:b7:73:25:f6:b0:4e:88:f3:82:83:74:82:3c:e1: 60:0b:63:0c:00:b3:4f:4b:fe:3c:04:f2:57:ca:40: 3a:7e:d2:cf:2a:e6:28:f2:34:d1:c2:03:12:2a:68: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:83:D8:9D:B0:B5:7B:3C:FB:53:B0:EE:2F:A9:5E:3E:34:DD:31:B6 X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3b:e6:c6:1c:b0:0d:c1:24:91:f7:e7:81:40:e1:1f:40:b3: 21:d0:72:2b:fb:dc:74:e1:a0:93:d8:8b:0a:f3:53:8e:e8:91: 5f:c5:3b:d9:c6:1b:a7:47:b1:f2:96:00:3d:29:b4:25:dc:ad: d4:a1:47:df:3a:64:43:1c:27:4d:69:5c:f8:e0:f4:40:3d:b5: 9c:fe:95:4c:20:bb:e2:00:05:e7:1e:aa:31:b5:f2:15:6c:94: 6c:05:ae:3c:ce:d9:98:08:60:d0:fa:aa:55:3c:3c:81:09:7d: ef:5d:49:7e:57:05:52:93:e6:a2:62:fd:de:1a:45:b6:31:51: c2:c1:df:19:d3:fc:57:b8:8b:df:75:7b:5d:95:31:7a:ae:94: 33:02:df:56:4c:75:6f:09:d6:1f:35:23:c4:47:67:76:b4:21: 87:ef:6e:ee:3a:16:66:cf:b3:55:0e:e4:31:2f:4c:21:28:a0: 54:7b:09:f8:ef:08:9d:d0:c2:a4:7f:6a:05:4d:f3:ce:ef:40: 9d:64:4c:99:96:57:0f:67:e9:21:83:84:51:58:d1:0f:73:4f: c6:cb:64:30:6c:13:ac:9c:2c:c9:8c:52:2e:48:de:a7:f8:69: 4b:22:d9:a3:0d:95:d8:75:f1:d2:78:4e:24:a7:1c:56:02:a1: 5c:aa:ce:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjUxMTA1MDIzNzI1WhcNMjUxMTEyMDIzNzI1WjAYMRYwFAYD VQQDEw02OTBhYjg2Ni1mYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7Xuf76m0eb04RF4a+oBh+KRF+M1npICVC23m7amjnF0HpaJTAfBrlaeaSH3 7VpOLybq2Ob/bl3AQAosOTXdyKyw6o+nWFI1ZGi2yVqgAlw09e+30COnEoFm2yDS /t2zvB/YqSaMXsEjiGqPsDHAoHL7MsnKp3BOJZ20EiFoigOnShOBDZ8txmUcCHeB 24ShRS60Z5EQlaRnAIBcHVP+q2iGane2Qhn+ZaUGFSCkcRekFgXV0CATStWzrYx0 ryivksz1SSvB2ZdzJ3MDTwNK3/uIt3Ml9rBOiPOCg3SCPOFgC2MMALNPS/48BPJX ykA6ftLPKuYo8jTRwgMSKmiqywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+D2J2w tXs8+1Ow7i+pXj403TG2MB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfO+bGHLANwSSR9+eBQOEfQLMh0HIr+9x04aCT2IsK81OO6JFfxTvZ xhunR7HylgA9KbQl3K3UoUffOmRDHCdNaVz44PRAPbWc/pVMILviAAXnHqoxtfIV bJRsBa48ztmYCGDQ+qpVPDyBCX3vXUl+VwVSk+aiYv3eGkW2MVHCwd8Z0/xXuIvf dXtdlTF6rpQzAt9WTHVvCdYfNSPER2d2tCGH727uOhZmz7NVDuQxL0whKKBUewn4 7wid0MKkf2oFTfPO70CdZEyZllcPZ+khg4RRWNEPc0/Gy2QwbBOsnCzJjFIuSN6n +GlLItmjDZXYdfHSeE4kpxxWAqFcqs4G -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:20 2025 by rpki-client