$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft File: RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json) Hash identifier: c2sCVoWwFBy3ZqeZ3FHHE6mUGFNoaCDvZFZoaL9GagA= Subject key identifier: 5A:04:6C:66:7E:0E:10:3B:86:8D:16:FA:99:09:E7:2D:08:8A:95:E5 Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft Manifest number: 0602 Signing time: Tue 04 Nov 2025 23:00:52 +0000 Manifest this update: Tue 04 Nov 2025 23:00:52 +0000 Manifest next update: Tue 11 Nov 2025 23:00:52 +0000 Files and hashes: 1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: GLdwMlzqsaUhGj6UIl+vDfzI8GNjTiNyACZG/gqTCL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD0B2, serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Validity Not Before: Nov 4 23:00:52 2025 GMT Not After : Nov 11 23:00:52 2025 GMT Subject: CN=690a85a4-8dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:6e:0a:70:0b:3e:77:1c:cf:5c:71:50:39: 00:72:cb:ce:d5:3b:d8:2d:3d:5d:de:5f:0f:be:6c: ad:ad:e5:01:1c:14:58:b7:c9:bc:2d:99:dc:d5:b2: 80:6a:aa:9e:b3:b4:58:f5:32:7c:1a:ef:ff:36:f6: 73:ff:19:60:89:f9:1d:78:07:34:c0:97:bf:3b:f3: d1:62:e5:75:69:d1:d2:7e:7f:1a:13:3a:8d:d4:ba: 05:70:2d:2e:83:27:69:9c:9c:f8:fb:5b:13:cb:6f: 08:5c:66:5a:33:25:53:b0:f8:fb:77:7a:fa:f8:c3: ca:42:72:d8:6c:69:66:36:eb:31:8a:7b:a9:0a:2e: 44:0f:19:cc:d6:11:2a:78:bf:45:23:68:b8:60:2b: be:8d:2b:a5:7a:e3:88:82:c8:8b:e0:06:7c:2f:5e: 9d:46:4f:65:02:09:2e:b5:bc:ba:ef:b9:51:af:f1: ee:5b:7a:8c:80:70:20:86:50:f2:80:5d:99:d6:6b: 05:2d:77:e0:6d:a6:83:53:18:8b:77:1c:28:96:c5: 1a:a2:69:b7:c0:36:d0:2e:67:d1:92:48:67:ef:6e: 91:7f:52:7a:0a:d7:37:44:0b:3c:f8:48:14:06:80: 90:11:f9:8f:c4:e8:78:bc:44:8e:0a:89:dc:d7:9a: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:04:6C:66:7E:0E:10:3B:86:8D:16:FA:99:09:E7:2D:08:8A:95:E5 X509v3 Authority Key Identifier: keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6f:ad:df:c9:c4:07:f8:77:79:16:30:08:7b:46:12:39:e1: dc:03:4d:3b:4a:b8:81:a2:2f:28:d5:ea:ca:d9:fd:a4:92:52: 88:6c:86:af:df:67:03:eb:18:6e:5c:c3:f1:f7:9e:b0:70:d0: 56:fe:4c:fd:46:03:18:27:6a:96:77:1a:3c:fb:96:d3:0c:81: ae:39:dd:79:6e:56:84:5d:62:70:24:5c:5b:36:12:9a:0d:46: fc:94:61:11:fc:0e:9e:71:e7:dd:71:df:fb:57:c5:36:1e:f6: ed:2e:2f:61:e0:ab:ed:71:13:83:10:17:5e:e9:21:26:dc:ab: 4f:21:93:b0:a6:8b:34:30:75:2c:18:05:60:c9:50:fb:ec:b1: f3:7d:e0:b3:c7:51:19:f9:5f:d3:5e:1a:03:23:85:88:ae:67: 10:ea:69:7d:0f:38:85:76:66:bd:ac:cd:ca:64:d3:e9:54:40: da:fe:44:4d:d8:13:8d:70:5a:1d:ea:64:01:cc:f3:f5:1b:37: 29:40:ed:d8:c9:b8:cd:e9:0b:29:75:fe:49:e0:1c:9e:48:de: 67:7f:02:ba:a4:0c:e3:8f:67:19:e0:0e:91:89:83:4f:fc:5b: 7e:9f:8a:94:80:9b:00:16:49:a5:a8:00:9a:87:b5:27:05:08: 56:e5:9b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy RDM0RUI3MDcwHhcNMjUxMTA0MjMwMDUyWhcNMjUxMTExMjMwMDUyWjAYMRYwFAYD VQQDEw02OTBhODVhNC04ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nVuCnALPnccz1xxUDkAcsvO1TvYLT1d3l8PvmytreUBHBRYt8m8LZnc1bKA aqqes7RY9TJ8Gu//NvZz/xlgifkdeAc0wJe/O/PRYuV1adHSfn8aEzqN1LoFcC0u gydpnJz4+1sTy28IXGZaMyVTsPj7d3r6+MPKQnLYbGlmNusxinupCi5EDxnM1hEq eL9FI2i4YCu+jSuleuOIgsiL4AZ8L16dRk9lAgkutby677lRr/HuW3qMgHAghlDy gF2Z1msFLXfgbaaDUxiLdxwolsUaomm3wDbQLmfRkkhn726Rf1J6Ctc3RAs8+EgU BoCQEfmPxOh4vESOConc15r6jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoEbGZ+ DhA7ho0W+pkJ5y0IipXlMB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdb63fycQH+Hd5FjAIe0YSOeHcA007SriBoi8o1erK2f2kklKIbIav 32cD6xhuXMPx956wcNBW/kz9RgMYJ2qWdxo8+5bTDIGuOd15blaEXWJwJFxbNhKa DUb8lGER/A6ecefdcd/7V8U2HvbtLi9h4KvtcRODEBde6SEm3KtPIZOwpos0MHUs GAVgyVD77LHzfeCzx1EZ+V/TXhoDI4WIrmcQ6ml9DziFdma9rM3KZNPpVEDa/kRN 2BONcFod6mQBzPP1GzcpQO3YybjN6Qspdf5J4ByeSN5nfwK6pAzjj2cZ4A6RiYNP /Ft+n4qUgJsAFkmlqACah7UnBQhW5Ztc -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:03 2025 by rpki-client