$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: z54TS4plOOcYOKc2YgnjRCpK0X7N6HeXRKLx8fMgjF0= Subject key identifier: B1:53:24:00:0F:2B:79:40:65:F9:4B:16:B7:7B:FE:92:83:9F:57:BA Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 01AF Signing time: Wed 05 Nov 2025 03:24:48 +0000 Manifest this update: Wed 05 Nov 2025 03:24:48 +0000 Manifest next update: Wed 12 Nov 2025 03:24:47 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: tKipzIBoCkSGT37YhYe+KAlN2APl0nWODUaV5WiRkyQ=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: d0hrWabvEDExci5t6WU7rsD4gdFR7O4tRXZR37UM1GQ=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: UyfMMb1+MxfY9sz24UI+SyQxwGOXE8nJHXlCf8yhy2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Nov 5 03:24:48 2025 GMT Not After : Nov 12 03:24:47 2025 GMT Subject: CN=690ac380-e0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:d2:4b:a8:42:1e:7f:db:5d:ae:31:ac:f7: 1c:2f:b9:29:3b:dd:51:67:cc:93:88:7e:20:d6:3a: c8:a9:6a:56:7c:a7:f2:83:c0:12:9e:eb:cd:6e:c1: f7:3c:04:3a:96:b0:71:9d:df:67:f8:e1:5e:e7:f0: c5:78:10:36:b7:6c:99:1e:a7:21:aa:2d:85:48:2f: c4:4b:a6:80:e1:2b:af:e5:6d:22:bd:8d:42:ed:f2: ac:37:c1:45:3c:0c:07:8a:8a:fa:eb:07:5a:64:5e: 18:d5:af:4d:86:fd:34:85:d2:b0:72:b2:46:22:6f: fc:1e:2d:80:ec:16:b8:b4:bd:e3:96:ee:eb:3b:5e: 76:e2:3f:f4:6f:05:72:b4:d2:66:61:d7:0f:fc:b6: bb:d4:de:3f:b8:5e:96:30:e9:5c:aa:7a:67:00:a6: 54:e9:33:96:36:92:7f:a4:c0:05:7f:d9:0c:9b:20: 4b:30:ae:62:ad:85:75:91:7a:cb:df:6a:0d:b1:01: d1:e0:c1:3c:b8:69:d1:62:98:06:f4:18:f8:6e:a2: fc:fb:03:b3:70:5e:5e:f9:96:d3:9e:d4:9f:7c:64: c1:6c:1d:ac:ea:0a:34:77:e0:d0:4f:07:be:09:69: 0f:ab:ef:0c:18:2b:94:e4:3e:8b:19:27:11:14:17: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:53:24:00:0F:2B:79:40:65:F9:4B:16:B7:7B:FE:92:83:9F:57:BA X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9c:10:77:a3:22:41:90:22:3f:33:7d:9d:79:33:00:48:80: 0a:50:e4:33:eb:35:62:74:e4:5e:bf:6b:eb:f3:58:c0:5e:f4: 57:a5:5c:4c:88:e1:78:54:6b:34:89:8e:06:f8:dc:ae:14:8b: a1:4f:9b:a7:ae:73:0e:0c:98:0c:f6:31:6a:66:92:4d:81:0b: 8b:2e:13:04:a3:9b:26:e7:aa:91:51:84:5f:ca:60:4e:b7:b4: 4c:0b:eb:83:dc:32:54:11:68:7d:f9:c4:57:8d:08:96:ad:49: c8:e2:b8:d5:8f:9d:fb:1e:94:32:5c:88:bd:9a:e9:bc:53:a5: 92:a4:1d:1c:3c:7f:ff:e8:9f:af:6a:21:7c:93:7d:c0:10:3d: 24:84:8b:4c:f8:3b:ec:7d:26:16:02:e7:8b:05:74:86:ac:5b: a5:1f:88:96:37:46:f0:3d:18:7b:49:f3:f0:0d:4d:c1:b5:9c: ca:12:2d:33:ac:2f:5e:77:52:54:da:e8:58:50:38:11:86:ca: c7:ec:b9:70:53:da:36:79:53:3b:45:c8:4b:01:1a:0b:4b:3a: 52:5c:67:7d:fc:f0:c8:a8:9f:28:e0:4e:34:1b:3a:b1:83:62: 27:cf:29:cd:fa:32:2f:92:21:12:60:87:dc:96:29:b2:73:13: 3b:e4:8e:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUxMTA1MDMyNDQ4WhcNMjUxMTEyMDMyNDQ3WjAYMRYwFAYD VQQDEw02OTBhYzM4MC1lMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CPSS6hCHn/bXa4xrPccL7kpO91RZ8yTiH4g1jrIqWpWfKfyg8ASnuvNbsH3 PAQ6lrBxnd9n+OFe5/DFeBA2t2yZHqchqi2FSC/ES6aA4Suv5W0ivY1C7fKsN8FF PAwHior66wdaZF4Y1a9Nhv00hdKwcrJGIm/8Hi2A7Ba4tL3jlu7rO1524j/0bwVy tNJmYdcP/La71N4/uF6WMOlcqnpnAKZU6TOWNpJ/pMAFf9kMmyBLMK5irYV1kXrL 32oNsQHR4ME8uGnRYpgG9Bj4bqL8+wOzcF5e+ZbTntSffGTBbB2s6go0d+DQTwe+ CWkPq+8MGCuU5D6LGScRFBc6HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFTJAAP K3lAZflLFrd7/pKDn1e6MB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOnBB3oyJBkCI/M32deTMASIAKUOQz6zVidORev2vr81jAXvRXpVxM iOF4VGs0iY4G+NyuFIuhT5unrnMODJgM9jFqZpJNgQuLLhMEo5sm56qRUYRfymBO t7RMC+uD3DJUEWh9+cRXjQiWrUnI4rjVj537HpQyXIi9mum8U6WSpB0cPH//6J+v aiF8k33AED0khItM+DvsfSYWAueLBXSGrFulH4iWN0bwPRh7SfPwDU3BtZzKEi0z rC9ed1JU2uhYUDgRhsrH7LlwU9o2eVM7RchLARoLSzpSXGd9/PDIqJ8o4E40Gzqx g2InzynN+jIvkiESYIfclimycxM75I5t -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:12 2025 by rpki-client