$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: oMxkqbaVJvgxAvWw7Fk+7xScwSDIxFNTScvULMot32Q= Subject key identifier: CA:72:76:DD:BC:52:F3:BF:AE:DC:53:E7:AA:F5:FC:E4:0E:96:C8:EF Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: DA Signing time: Mon 03 Nov 2025 05:35:28 +0000 Manifest this update: Mon 03 Nov 2025 05:35:27 +0000 Manifest next update: Mon 10 Nov 2025 05:35:27 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: tQMQpzwvR2td2Mt+WzrJU1qZA979PhvL8YAevisnKl4=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Nov 3 05:35:27 2025 GMT Not After : Nov 10 05:35:27 2025 GMT Subject: CN=69083f20-47f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:f7:d4:2b:0c:4e:01:81:8c:f3:d0:6c:b3: 30:1e:c6:84:8f:88:ea:7c:5d:42:59:1c:60:bc:5c: 02:cf:b9:c7:07:4f:93:ae:5c:04:a8:ca:10:ce:cf: 75:53:51:7a:ee:b7:8f:fa:52:61:0e:60:c2:e8:9f: f4:cd:60:25:87:d6:c2:9a:71:b6:e3:59:78:d8:e0: 98:cf:2f:af:57:e6:4b:d7:b1:ba:28:ce:5d:59:e0: 5f:1f:cd:3e:e5:b8:1f:d0:89:97:8f:0e:0b:f2:e6: f7:6f:7f:52:53:d9:68:d6:45:93:c7:70:76:53:6c: 14:d1:59:aa:7f:5e:c5:37:ac:98:95:25:ee:99:18: 91:78:fd:8f:f7:68:b6:e5:3d:45:11:aa:a3:a9:8f: 2c:d8:84:6a:6c:d5:d7:1f:11:ec:14:61:31:89:68: fb:dc:af:ba:eb:0e:53:36:12:e3:4a:39:f8:bc:f2: c7:1f:6c:a4:ba:d2:67:79:4c:4b:68:e7:50:15:ff: a7:86:0c:6d:0d:3e:5d:78:46:eb:34:67:ca:49:b0: 67:50:99:f7:5a:ca:d5:82:81:a2:ac:a3:07:74:26: 88:04:af:71:81:fb:5a:b9:73:75:e8:9c:84:1c:10: 67:38:77:06:95:53:23:60:6d:9b:92:a9:de:78:07: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:76:DD:BC:52:F3:BF:AE:DC:53:E7:AA:F5:FC:E4:0E:96:C8:EF X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:83:dc:c0:ca:01:43:c4:43:b6:ab:51:98:9b:35:eb:f5:ac: 0b:50:db:25:8b:db:17:e9:c9:58:00:58:4f:02:55:91:16:38: b9:da:e7:78:fc:20:70:bf:2a:bf:5b:f0:28:44:80:c0:ac:8a: df:3f:c9:a1:dc:a7:63:c8:bb:1f:ba:89:2c:ad:f5:cc:3c:22: a0:0e:97:8d:da:ee:af:67:7f:f8:9a:9f:d0:c9:b4:61:cb:a3: df:4a:9c:5a:5d:2a:45:39:ff:16:42:21:79:cb:4b:a6:60:2b: d7:4c:9a:df:0a:33:5b:ba:51:88:f4:6f:5f:ba:3a:ac:82:da: 91:a2:4f:da:5e:a3:3f:b9:df:d8:f8:10:a2:a1:ad:9c:41:26: ca:b2:77:95:aa:2b:3f:1c:f1:b2:79:9c:e5:fe:2a:af:4a:48: d1:af:74:f0:c6:7d:ac:5d:6d:83:5b:92:19:35:13:6d:d8:2e: 97:25:2a:ff:15:8c:bb:d5:6b:25:33:f9:51:a1:74:c8:03:b3: 7e:23:66:a5:eb:62:e8:b6:06:9d:75:7b:83:a2:f1:9b:1f:cf: 3f:41:e0:d2:00:5d:da:a6:55:73:7d:d1:52:15:e9:f2:0e:34: 19:70:42:cc:e7:5b:3c:fa:cd:b3:e5:15:73:15:55:b3:21:86: 97:37:73:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUxMTAzMDUzNTI3WhcNMjUxMTEwMDUzNTI3WjAYMRYwFAYD VQQDEw02OTA4M2YyMC00N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NL31CsMTgGBjPPQbLMwHsaEj4jqfF1CWRxgvFwCz7nHB0+TrlwEqMoQzs91 U1F67reP+lJhDmDC6J/0zWAlh9bCmnG241l42OCYzy+vV+ZL17G6KM5dWeBfH80+ 5bgf0ImXjw4L8ub3b39SU9lo1kWTx3B2U2wU0Vmqf17FN6yYlSXumRiReP2P92i2 5T1FEaqjqY8s2IRqbNXXHxHsFGExiWj73K+66w5TNhLjSjn4vPLHH2ykutJneUxL aOdQFf+nhgxtDT5deEbrNGfKSbBnUJn3WsrVgoGirKMHdCaIBK9xgftauXN16JyE HBBnOHcGlVMjYG2bkqneeAec8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpydt28 UvO/rtxT56r1/OQOlsjvMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMg9zAygFDxEO2q1GYmzXr9awLUNsli9sX6clYAFhPAlWRFji52ud4 /CBwvyq/W/AoRIDArIrfP8mh3KdjyLsfuoksrfXMPCKgDpeN2u6vZ3/4mp/QybRh y6PfSpxaXSpFOf8WQiF5y0umYCvXTJrfCjNbulGI9G9fujqsgtqRok/aXqM/ud/Y +BCioa2cQSbKsneVqis/HPGyeZzl/iqvSkjRr3Twxn2sXW2DW5IZNRNt2C6XJSr/ FYy71WslM/lRoXTIA7N+I2al62LotgaddXuDovGbH88/QeDSAF3aplVzfdFSFeny DjQZcELM51s8+s2z5RVzFVWzIYaXN3OC -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:19 2025 by rpki-client