$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: V8Bt9gH6v0qDkevCErmB+zHcKmJCVqlywaLtyi7ddhw= Subject key identifier: 6D:C7:27:30:6C:FD:54:ED:A6:8D:4D:7A:10:88:02:E4:A0:BB:9F:8E Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 138D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1376 Signing time: Tue 04 Nov 2025 17:05:41 +0000 Manifest this update: Tue 04 Nov 2025 17:05:41 +0000 Manifest next update: Tue 11 Nov 2025 17:05:41 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: npFJvmKOhYRTwvx84h2kKi3Z9RujtJ5+WSc08VLAUVs=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Nov 4 17:05:41 2025 GMT Not After : Nov 11 17:05:41 2025 GMT Subject: CN=690a3265-bb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:25:45:f4:61:1b:86:65:17:8f:de:c7:69: f5:18:c3:1f:80:47:6f:7e:1b:0e:b0:3f:f3:70:b3: 5c:7c:4d:82:20:71:f5:da:35:00:1b:3f:77:c0:c2: 8d:a4:96:8f:3f:5e:35:a4:3e:fd:d3:90:2b:91:55: 96:29:cc:e3:1a:03:77:6d:be:fb:ed:64:69:48:99: 89:3b:b5:bc:75:12:e1:03:a3:12:06:db:7a:3e:a4: 9c:b5:72:66:bc:0a:e3:38:eb:2c:82:51:25:54:95: 98:fe:9e:4b:e9:4a:cd:20:7e:74:c2:ab:c8:e1:2b: c8:06:17:5c:63:6e:8c:29:4e:0a:b1:a4:30:e3:bc: f1:64:ac:a0:8e:ff:23:82:bd:39:61:28:fb:9e:73: 02:41:db:19:23:10:eb:fe:c5:b5:ac:21:e2:7c:9e: 92:d2:f1:48:35:2e:d5:b4:9d:ba:cf:69:7f:df:39: 7b:93:38:ab:f6:c5:e9:78:d1:40:82:80:29:64:8b: 06:53:d1:c6:a3:0c:f9:de:20:a9:e7:51:77:39:06: c6:e4:a9:e6:29:aa:9e:54:e8:b5:28:21:be:82:bd: 31:97:6f:bc:09:f1:11:9c:5a:f3:7a:84:47:a1:7e: 76:0c:7a:3a:c6:4e:83:63:d0:b8:e4:28:b1:93:7e: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C7:27:30:6C:FD:54:ED:A6:8D:4D:7A:10:88:02:E4:A0:BB:9F:8E X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2f:b2:18:24:e4:4f:55:fe:0d:94:4b:fa:f8:e4:80:d2:8b: 6e:11:9f:74:3d:5a:8f:c8:62:14:08:cc:cd:00:79:05:9e:56: 5b:ff:99:f3:9f:66:10:40:bc:25:07:6f:d2:12:67:9c:63:b9: 49:84:ef:4b:28:f6:20:29:bc:59:7d:d3:d2:6a:76:84:22:de: 23:ce:55:2f:33:8f:d7:99:2e:e0:3d:42:cb:ba:d4:ac:45:19: 48:fa:27:96:32:75:50:bd:26:38:8e:74:28:12:0e:d9:cb:51: 04:93:f8:60:8f:33:3c:18:12:37:0a:2d:09:47:92:78:1d:5b: 6f:a6:a3:92:01:f3:a4:e3:4b:eb:f4:d0:d3:b8:e1:08:12:d3: 57:f5:fa:34:ce:0e:2d:fa:c9:1b:d0:81:b8:52:92:47:e6:24: 04:32:5f:48:72:ba:e4:aa:6f:c6:74:79:ab:4c:f1:4a:6f:a5: 5d:2a:50:89:7e:97:81:b2:ef:e7:52:dd:d8:02:ca:b1:48:29: 55:05:08:7f:7c:87:a4:33:06:f9:8c:c2:46:2a:1b:3e:a1:24: 4a:ec:e9:26:b5:4c:fa:bd:0a:35:f0:6b:56:b4:5c:2d:b2:65: da:4e:be:61:a1:bd:d6:9e:04:f3:4f:1d:01:75:b5:51:02:73: 6d:82:4f:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUxMTA0MTcwNTQxWhcNMjUxMTExMTcwNTQxWjAYMRYwFAYD VQQDEw02OTBhMzI2NS1iYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuklRfRhG4ZlF4/ex2n1GMMfgEdvfhsOsD/zcLNcfE2CIHH12jUAGz93wMKN pJaPP141pD7905ArkVWWKczjGgN3bb777WRpSJmJO7W8dRLhA6MSBtt6PqSctXJm vArjOOssglElVJWY/p5L6UrNIH50wqvI4SvIBhdcY26MKU4KsaQw47zxZKygjv8j gr05YSj7nnMCQdsZIxDr/sW1rCHifJ6S0vFINS7VtJ26z2l/3zl7kzir9sXpeNFA goApZIsGU9HGowz53iCp51F3OQbG5KnmKaqeVOi1KCG+gr0xl2+8CfERnFrzeoRH oX52DHo6xk6DY9C45Cixk34vyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3HJzBs /VTtpo1NehCIAuSgu5+OMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXL7IYJORPVf4NlEv6+OSA0otuEZ90PVqPyGIUCMzNAHkFnlZb/5nz n2YQQLwlB2/SEmecY7lJhO9LKPYgKbxZfdPSanaEIt4jzlUvM4/XmS7gPULLutSs RRlI+ieWMnVQvSY4jnQoEg7Zy1EEk/hgjzM8GBI3Ci0JR5J4HVtvpqOSAfOk40vr 9NDTuOEIEtNX9fo0zg4t+skb0IG4UpJH5iQEMl9Icrrkqm/GdHmrTPFKb6VdKlCJ fpeBsu/nUt3YAsqxSClVBQh/fIekMwb5jMJGKhs+oSRK7OkmtUz6vQo18GtWtFwt smXaTr5hob3WngTzTx0BdbVRAnNtgk8p -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:51 2025 by rpki-client