$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: LQNHMMvTsXARohiwwzDC976a7XtgDILyh+Zos44Cofw= Subject key identifier: 5C:A7:B7:C4:6D:E8:F6:56:F3:0D:42:CB:8B:68:E9:12:B9:BB:D7:02 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 19D8 Signing time: Tue 04 Nov 2025 17:23:56 +0000 Manifest this update: Tue 04 Nov 2025 17:23:56 +0000 Manifest next update: Tue 11 Nov 2025 17:23:56 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: fg9o+09ftXCuAvU73Nn7mHaCwDVTsOIoVS3ydHOhB+Q=) 2: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: I0UwUhNOM9UD9C8spTt2KELyT5sspCh/FuCrUf/DLxg=) 3: A460F59AB30111F0870CBA50C4F9AE02.roa (hash: OniChjyeEXj5cVvVwWs//hBr0jYalsY+nH9sGBE3ExQ=) 4: 52703058B29211F0A466572FC4F9AE02.roa (hash: EAnnXLdoBap6sg9ETuzgpTeeWcNHp5G/1/Gi4frw3fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Nov 4 17:23:56 2025 GMT Not After : Nov 11 17:23:56 2025 GMT Subject: CN=690a36ac-0d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:f6:e7:1c:3e:6c:b7:c3:78:79:e2:80:ab: ca:d1:c7:20:2d:3c:24:82:c5:cf:ef:3c:00:aa:3b: 73:7d:2d:30:02:64:b3:21:01:bf:43:3f:6e:08:99: 47:32:80:15:10:4a:e8:a8:f4:91:37:9a:c2:0a:ce: db:d2:8c:e3:75:c4:3e:94:e3:de:d8:01:a7:39:a3: 36:c0:0e:15:52:6f:fb:85:6b:5a:2e:08:9f:d2:e1: de:71:fc:b6:27:ab:ad:11:f5:e7:87:39:8c:d2:af: 3b:f8:12:2f:b8:80:4a:bc:ff:83:6d:87:a9:58:cc: 8a:a2:c0:3d:61:93:8e:e2:64:50:cc:5c:b0:6d:44: 93:08:71:50:31:0f:11:cc:de:05:b5:7e:ef:6c:f2: b1:24:2e:b9:f0:70:5e:41:ee:ee:81:61:8c:02:97: f6:6a:73:ba:53:54:78:a4:a9:f6:86:16:64:ab:71: 4b:c6:10:43:19:bf:92:bf:ec:d5:d5:76:53:b0:da: 76:96:c4:cf:70:68:7e:0d:6f:fa:38:1e:eb:d7:7c: f3:79:8a:a9:e9:3b:e0:1c:f3:1f:97:ad:da:b3:6e: f2:eb:79:eb:9d:d8:0e:dd:48:4f:2c:76:79:13:21: db:4c:f3:57:94:f0:f0:b6:8e:05:52:7a:43:cb:c7: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:B7:C4:6D:E8:F6:56:F3:0D:42:CB:8B:68:E9:12:B9:BB:D7:02 X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1a:3a:cb:ac:0b:fc:90:91:bb:ae:f9:52:f5:9b:58:51:5c: 02:2a:a0:d2:cc:71:ae:d6:fa:2f:e5:e2:bc:d3:e0:7e:62:f2: ae:9c:fa:85:df:a6:fd:cd:ea:02:2a:2c:8c:f2:0c:2f:01:3b: e1:d4:49:0a:26:09:c8:f3:ab:b6:26:de:a4:21:a3:d9:d0:51: ee:08:2f:94:96:67:28:a6:f7:41:03:19:9a:fb:78:16:aa:f2: 25:d6:4c:b8:07:66:7b:43:ac:c9:91:a5:27:9c:cd:b5:ad:4d: 3d:65:78:ca:dd:32:51:79:b9:46:34:84:30:0c:73:a4:69:fb: 50:5b:aa:cc:05:33:7c:1d:e8:04:10:b5:8c:10:9c:b0:01:56: 60:12:22:06:f8:59:ed:12:5e:ed:8e:59:3a:dd:32:41:04:a0: 53:87:13:a6:45:aa:c5:5a:ec:c4:a8:89:a4:bf:8b:91:89:26: 2c:3b:69:79:69:2e:57:e3:18:a5:12:c7:69:b4:88:93:11:15: f3:ff:ab:0b:cf:39:29:ba:03:32:88:b0:7c:3b:6e:f3:92:c5: 03:2d:8c:d7:7a:e9:f6:d7:74:6a:57:44:26:4e:af:fa:2c:ea: fd:ef:61:07:8e:05:2b:ae:45:ee:eb:1f:98:03:03:5b:3e:b2: ad:3d:fe:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUxMTA0MTcyMzU2WhcNMjUxMTExMTcyMzU2WjAYMRYwFAYD VQQDEw02OTBhMzZhYy0wZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4D25xw+bLfDeHnigKvK0ccgLTwkgsXP7zwAqjtzfS0wAmSzIQG/Qz9uCJlH MoAVEEroqPSRN5rCCs7b0ozjdcQ+lOPe2AGnOaM2wA4VUm/7hWtaLgif0uHecfy2 J6utEfXnhzmM0q87+BIvuIBKvP+DbYepWMyKosA9YZOO4mRQzFywbUSTCHFQMQ8R zN4FtX7vbPKxJC658HBeQe7ugWGMApf2anO6U1R4pKn2hhZkq3FLxhBDGb+Sv+zV 1XZTsNp2lsTPcGh+DW/6OB7r13zzeYqp6TvgHPMfl63as27y63nrndgO3UhPLHZ5 EyHbTPNXlPDwto4FUnpDy8eLJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFynt8Rt 6PZW8w1Cy4to6RK5u9cCMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfGjrLrAv8kJG7rvlS9ZtYUVwCKqDSzHGu1vov5eK80+B+YvKunPqF 36b9zeoCKiyM8gwvATvh1EkKJgnI86u2Jt6kIaPZ0FHuCC+UlmcopvdBAxma+3gW qvIl1ky4B2Z7Q6zJkaUnnM21rU09ZXjK3TJReblGNIQwDHOkaftQW6rMBTN8HegE ELWMEJywAVZgEiIG+FntEl7tjlk63TJBBKBThxOmRarFWuzEqImkv4uRiSYsO2l5 aS5X4xilEsdptIiTERXz/6sLzzkpugMyiLB8O27zksUDLYzXeun213RqV0QmTq/6 LOr972EHjgUrrkXu6x+YAwNbPrKtPf4T -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:19 2025 by rpki-client