$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: RsYOb3JTe9oM/JSoDFCLY/gXob2na4KlBjRtSqncr20= Subject key identifier: 07:63:97:77:BB:D3:AC:AA:FE:51:CE:08:FA:FB:95:0A:6C:4A:25:EB Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: D0 Signing time: Mon 03 Nov 2025 05:50:29 +0000 Manifest this update: Mon 03 Nov 2025 05:50:29 +0000 Manifest next update: Mon 10 Nov 2025 05:50:29 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: +O7KHgmx4rSIyLVmOsAgiFRb9Z+EzdFUjhMIoZHTQsw=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Nov 3 05:50:29 2025 GMT Not After : Nov 10 05:50:29 2025 GMT Subject: CN=690842a5-9e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:60:47:a6:a9:56:b5:f5:aa:cc:66:79:a5: a6:e1:21:e6:da:4b:95:51:78:e4:e3:05:76:48:6f: e3:ed:2c:f1:02:2a:18:d6:87:ff:2e:c9:fa:59:9e: 52:b3:bf:21:73:9f:28:ce:d7:18:3a:5b:62:80:c4: 71:ba:fe:75:8f:c2:86:12:30:b8:5b:a4:cc:e2:bb: 4b:d6:90:49:5f:64:28:56:30:9a:79:1d:5a:de:6e: a9:51:ba:fb:7c:d3:84:48:a5:6b:69:d9:c3:94:dc: 08:1d:2a:20:21:af:a8:b9:95:a4:fc:4a:12:68:36: 66:bb:e7:f9:cf:93:ce:24:a3:6e:4d:61:46:b8:49: 48:3c:b8:97:0f:d8:fd:c8:95:cf:04:d2:c3:95:48: 3d:49:37:78:6a:e4:41:35:e6:25:86:e7:c3:24:e3: a7:56:15:a9:f2:0e:b8:a0:e7:fe:0a:8c:51:ce:be: 5e:97:a7:c1:43:bc:72:de:1f:fb:fd:89:b9:9d:f7: 1c:d6:85:52:87:d4:e9:eb:84:5d:d3:c1:7a:cc:8e: 2f:b1:fc:7a:d2:cb:c6:7d:ae:e2:10:36:0c:b4:c7: bd:ac:1b:3f:20:dd:2c:e2:e4:99:45:a5:c8:dd:7d: 86:0d:22:45:e0:9a:62:6e:ed:d8:f7:23:8e:43:a4: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:63:97:77:BB:D3:AC:AA:FE:51:CE:08:FA:FB:95:0A:6C:4A:25:EB X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2c:fd:e4:0b:dc:f1:b4:98:11:3b:16:88:f6:91:91:18:70: 26:f0:62:69:d2:9b:85:d3:02:86:2f:6a:23:b8:6f:38:a6:90: 2c:7f:3a:c9:8b:2b:ef:3d:34:ff:51:90:b0:bc:a4:af:ed:25: c7:d9:0a:a9:80:c7:11:f3:9a:cf:48:42:cd:89:11:f5:90:7d: e4:9f:bf:18:d6:cd:36:9b:07:4e:69:da:bb:9d:6a:a3:9d:9c: 4b:a9:fd:a0:71:cf:27:7a:39:be:d6:7a:e2:94:f2:c2:cf:d9: f6:6a:4a:21:32:8b:b3:a2:e3:20:c4:e2:66:aa:2b:02:09:03: 62:5a:6b:84:d8:09:1f:58:e4:df:ba:83:79:01:a7:e3:2a:e0: 57:f7:4a:69:5a:2d:07:62:ec:cc:1d:d5:f1:6a:77:67:9a:46: 3b:4c:b8:4a:9a:26:39:48:a0:2f:bf:fc:7a:0a:36:a8:63:ad: b0:72:12:72:86:f9:68:b2:b5:68:8a:6d:02:cc:dc:b9:37:5c: 74:5b:bf:7d:ad:90:ea:75:7c:63:7b:db:2e:c0:23:f6:06:41: d8:d7:43:e1:f3:90:27:ca:33:a7:3f:e4:2a:f0:8d:7a:04:35: d0:99:f8:16:19:15:15:b9:d6:cb:63:c7:01:5e:7a:96:b0:f7: bf:9d:9f:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMTAzMDU1MDI5WhcNMjUxMTEwMDU1MDI5WjAYMRYwFAYD VQQDEw02OTA4NDJhNS05ZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AlgR6apVrX1qsxmeaWm4SHm2kuVUXjk4wV2SG/j7SzxAioY1of/Lsn6WZ5S s78hc58oztcYOltigMRxuv51j8KGEjC4W6TM4rtL1pBJX2QoVjCaeR1a3m6pUbr7 fNOESKVradnDlNwIHSogIa+ouZWk/EoSaDZmu+f5z5POJKNuTWFGuElIPLiXD9j9 yJXPBNLDlUg9STd4auRBNeYlhufDJOOnVhWp8g64oOf+CoxRzr5el6fBQ7xy3h/7 /Ym5nfcc1oVSh9Tp64Rd08F6zI4vsfx60svGfa7iEDYMtMe9rBs/IN0s4uSZRaXI 3X2GDSJF4Jpibu3Y9yOOQ6SqFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdjl3e7 06yq/lHOCPr7lQpsSiXrMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeLP3kC9zxtJgROxaI9pGRGHAm8GJp0puF0wKGL2ojuG84ppAsfzrJ iyvvPTT/UZCwvKSv7SXH2QqpgMcR85rPSELNiRH1kH3kn78Y1s02mwdOadq7nWqj nZxLqf2gcc8nejm+1nrilPLCz9n2akohMouzouMgxOJmqisCCQNiWmuE2AkfWOTf uoN5AafjKuBX90ppWi0HYuzMHdXxandnmkY7TLhKmiY5SKAvv/x6CjaoY62wchJy hvlosrVoim0CzNy5N1x0W799rZDqdXxje9suwCP2BkHY10Ph85AnyjOnP+Qq8I16 BDXQmfgWGRUVudbLY8cBXnqWsPe/nZ8Q -----END CERTIFICATE-----Generated at Wed Nov 5 05:12:59 2025 by rpki-client