$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: as3g8m33Fx/3Cswu2hwfNoqW7kC+UWXYHm46UrnaKdg= Subject key identifier: 2A:DD:A1:9F:F1:F0:0C:1E:B4:B0:C6:65:9F:2C:0A:C0:2D:42:50:27 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: 0109 Signing time: Mon 03 Nov 2025 04:58:09 +0000 Manifest this update: Mon 03 Nov 2025 04:58:08 +0000 Manifest next update: Mon 10 Nov 2025 04:58:08 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: XyCqGsNRdb11Nc2IBvqN+QvmX5nZMVRxO0b3JQkvvvE=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Nov 3 04:58:08 2025 GMT Not After : Nov 10 04:58:08 2025 GMT Subject: CN=69083660-930e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:3b:d1:d2:d8:17:12:84:65:00:95:99:cc: d8:2e:a9:09:a4:ef:99:9d:65:02:5e:70:1c:ab:50: b0:7c:49:4a:45:00:2d:b0:c3:e0:16:c5:cd:42:4d: 9b:4b:8e:46:26:0d:ee:1e:e7:16:5f:96:9e:a6:44: 7b:57:29:5c:aa:fe:43:e2:5c:83:cd:a6:65:77:44: 44:26:90:73:6a:30:35:30:de:31:dd:e5:95:f3:5e: 3c:e1:3a:b7:9a:4e:69:97:9f:59:50:b0:aa:47:97: fa:48:bd:ce:b0:b4:00:be:87:12:f7:c1:d6:16:a1: 83:e5:0f:19:27:ad:84:dc:27:32:6d:42:49:b9:9f: ae:d0:6c:2b:b5:c0:cd:52:bc:67:13:a1:58:bf:7e: eb:20:8d:63:17:ed:f0:cb:99:a9:b3:2e:a2:eb:e7: 24:19:4b:a9:41:d7:4a:59:8a:8b:af:14:30:b7:db: 65:84:e8:40:f6:ed:c8:56:2b:25:8f:bf:68:57:c7: 0f:d0:3e:0d:77:22:68:ed:fc:8c:d6:5d:8d:7f:80: 54:96:6e:28:d4:52:44:ee:53:56:4a:7d:71:16:50: 1b:ab:1a:8a:ad:8d:ec:75:b2:09:d0:93:24:b3:69: d7:1a:bb:1e:bb:92:f1:27:95:dc:52:8a:04:72:bb: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DD:A1:9F:F1:F0:0C:1E:B4:B0:C6:65:9F:2C:0A:C0:2D:42:50:27 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0e:3b:90:40:17:1f:aa:6d:e2:3f:81:8a:12:f8:37:65:7a: f8:e2:82:b7:3e:1c:95:da:3e:c4:69:63:50:9e:0b:33:63:85: fc:4d:d8:52:62:d5:1c:fc:02:a1:50:c7:97:e6:a1:1a:06:01: 2a:04:7c:f7:62:83:09:4e:b7:3c:1f:0c:68:4e:9b:a8:09:24: 4c:40:dc:60:73:2b:ec:67:b5:0a:ee:16:b5:fb:67:ec:bf:34: d9:1c:70:d9:a8:19:ee:98:61:1d:53:9e:59:c5:8b:61:30:85: c1:5d:7d:df:1a:0a:5f:d2:3c:bc:3c:53:36:d8:32:35:d2:a2: 3c:3c:d7:fc:85:46:59:12:76:80:f7:1a:46:12:86:ae:e6:89: 44:80:e5:95:63:47:5c:e1:0f:65:18:f5:fe:79:50:8c:08:a9: 9d:f6:7e:f9:d5:49:6d:cd:09:b6:6b:cc:b7:1d:9d:9c:b2:17: a6:a1:f5:5a:c1:d8:d5:27:f6:a3:21:2f:14:87:ac:25:b0:d1: 10:8a:60:58:8a:7b:66:28:47:b4:8d:8b:d8:f2:12:86:44:65: 3e:8c:83:29:57:d4:cd:77:3a:a0:3e:b8:28:a8:80:08:52:7c: f1:a2:88:94:1b:21:a9:8d:4f:c8:5c:f1:29:5c:3d:c1:2f:c8: 9f:f6:f4:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUxMTAzMDQ1ODA4WhcNMjUxMTEwMDQ1ODA4WjAYMRYwFAYD VQQDEw02OTA4MzY2MC05MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9A70dLYFxKEZQCVmczYLqkJpO+ZnWUCXnAcq1CwfElKRQAtsMPgFsXNQk2b S45GJg3uHucWX5aepkR7Vylcqv5D4lyDzaZld0REJpBzajA1MN4x3eWV81484Tq3 mk5pl59ZULCqR5f6SL3OsLQAvocS98HWFqGD5Q8ZJ62E3CcybUJJuZ+u0GwrtcDN UrxnE6FYv37rII1jF+3wy5mpsy6i6+ckGUupQddKWYqLrxQwt9tlhOhA9u3IVisl j79oV8cP0D4NdyJo7fyM1l2Nf4BUlm4o1FJE7lNWSn1xFlAbqxqKrY3sdbIJ0JMk s2nXGrseu5LxJ5XcUooEcrv/nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrdoZ/x 8AwetLDGZZ8sCsAtQlAnMB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHDjuQQBcfqm3iP4GKEvg3ZXr44oK3PhyV2j7EaWNQngszY4X8TdhS YtUc/AKhUMeX5qEaBgEqBHz3YoMJTrc8HwxoTpuoCSRMQNxgcyvsZ7UK7ha1+2fs vzTZHHDZqBnumGEdU55ZxYthMIXBXX3fGgpf0jy8PFM22DI10qI8PNf8hUZZEnaA 9xpGEoau5olEgOWVY0dc4Q9lGPX+eVCMCKmd9n751UltzQm2a8y3HZ2cshemofVa wdjVJ/ajIS8Uh6wlsNEQimBYintmKEe0jYvY8hKGRGU+jIMpV9TNdzqgPrgoqIAI UnzxooiUGyGpjU/IXPEpXD3BL8if9vQh -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:14 2025 by rpki-client