$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: SgLoxGcdSOkxXGPZACYfish9wlcHgpVNEBzwdmIVCgQ= Subject key identifier: B5:9F:B1:CF:A5:8F:CD:A6:53:8B:8E:0D:03:59:92:C0:EB:4B:FA:34 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0B32 Signing time: Tue 04 Nov 2025 19:21:50 +0000 Manifest this update: Tue 04 Nov 2025 19:21:50 +0000 Manifest next update: Tue 11 Nov 2025 19:21:50 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: tIcGR6VfypVd8Z8DDvbU3LVvKJZQWpB/euqApQRySbg=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Nov 4 19:21:50 2025 GMT Not After : Nov 11 19:21:50 2025 GMT Subject: CN=690a524e-da33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:bc:ed:84:66:3c:bc:c1:71:54:f7:2a:70: df:27:d6:d8:9e:21:73:1a:f5:9c:e0:b3:d5:2f:e2: eb:26:3e:9b:2b:b7:fc:49:7f:ac:10:53:3a:4f:f7: b4:9a:17:fe:8e:c7:09:56:70:b5:ce:e5:81:ff:9a: 67:7f:53:dd:3c:78:fd:b9:2d:1d:b3:00:5b:15:39: d1:e3:eb:d7:13:b2:4e:1f:2a:5c:12:f3:de:46:c4: 68:d0:49:dd:73:4b:b6:96:e7:0c:52:cc:a2:f3:7f: 82:ca:21:01:f5:25:4e:12:0a:c6:ea:1d:ab:6e:61: 34:bb:00:eb:0c:e4:20:a8:27:76:1d:b9:05:b5:0b: 87:88:59:64:8a:01:96:8e:f3:82:62:eb:42:0a:70: e8:83:23:3a:e0:3d:c3:77:f6:40:f0:84:03:77:cc: 09:89:d2:0d:dd:99:f8:0d:13:d0:0d:39:86:a6:0e: 7a:b3:f8:d7:74:6e:12:2b:80:e9:fd:02:66:6e:6a: a3:74:b0:d8:b4:26:e1:99:64:4e:25:4f:a0:e3:70: 57:63:db:77:db:20:20:4d:31:2d:00:1a:6d:22:e0: 7c:94:a8:88:f8:52:f0:ec:6a:bf:00:e1:2a:69:6a: 38:c5:ca:0f:61:7d:b4:3a:11:22:f2:c4:b8:54:26: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:B1:CF:A5:8F:CD:A6:53:8B:8E:0D:03:59:92:C0:EB:4B:FA:34 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:5f:72:12:2a:f0:c9:a6:27:39:e3:b8:33:b8:87:d7:71:4c: 75:20:99:0c:4c:1b:78:b8:17:e1:5b:8a:50:51:eb:7f:8f:4f: 42:bb:45:5f:64:85:d3:29:4b:29:54:62:c6:3f:0c:62:9a:e8: 0a:00:70:6b:84:22:9f:e0:80:c4:99:54:b8:f0:48:9d:3c:1c: 7e:37:7c:10:43:07:0d:05:0b:72:50:94:6c:69:8e:58:49:6f: c4:7b:82:df:50:da:b2:d9:10:41:05:d0:8a:e1:32:ff:4d:48: 5b:ff:f7:a0:79:8c:d3:1d:7d:47:d7:59:91:11:2d:1d:24:53: 37:7f:00:1c:4a:66:45:d1:d2:f3:e0:40:ac:79:c3:9a:f2:1c: 85:51:93:65:39:81:92:36:b7:41:6b:d6:ff:29:05:ba:e7:b6: 66:69:ba:d2:86:c7:50:15:dd:14:f2:d1:3a:1a:81:20:9f:d6: 5c:5c:b2:c8:3d:d2:2b:d4:fc:76:26:8b:df:2a:3a:3e:4e:95: f8:57:e6:89:92:7a:6e:39:b4:40:be:06:65:d7:76:a7:5c:48: 22:8c:f3:d3:4f:c7:0c:02:db:79:2e:1d:3f:91:ad:85:71:f3: c8:fe:5a:b8:a3:c2:27:b7:aa:1f:88:92:f6:5c:3a:5f:ba:cd: 53:eb:8c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUxMTA0MTkyMTUwWhcNMjUxMTExMTkyMTUwWjAYMRYwFAYD VQQDEw02OTBhNTI0ZS1kYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFG87YRmPLzBcVT3KnDfJ9bYniFzGvWc4LPVL+LrJj6bK7f8SX+sEFM6T/e0 mhf+jscJVnC1zuWB/5pnf1PdPHj9uS0dswBbFTnR4+vXE7JOHypcEvPeRsRo0End c0u2lucMUsyi83+CyiEB9SVOEgrG6h2rbmE0uwDrDOQgqCd2HbkFtQuHiFlkigGW jvOCYutCCnDogyM64D3Dd/ZA8IQDd8wJidIN3Zn4DRPQDTmGpg56s/jXdG4SK4Dp /QJmbmqjdLDYtCbhmWROJU+g43BXY9t32yAgTTEtABptIuB8lKiI+FLw7Gq/AOEq aWo4xcoPYX20OhEi8sS4VCaTDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWfsc+l j82mU4uODQNZksDrS/o0MB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClX3ISKvDJpic547gzuIfXcUx1IJkMTBt4uBfhW4pQUet/j09Cu0Vf ZIXTKUspVGLGPwximugKAHBrhCKf4IDEmVS48EidPBx+N3wQQwcNBQtyUJRsaY5Y SW/Ee4LfUNqy2RBBBdCK4TL/TUhb//egeYzTHX1H11mRES0dJFM3fwAcSmZF0dLz 4ECsecOa8hyFUZNlOYGSNrdBa9b/KQW657ZmabrShsdQFd0U8tE6GoEgn9ZcXLLI PdIr1Px2JovfKjo+TpX4V+aJknpuObRAvgZl13anXEgijPPTT8cMAtt5Lh0/ka2F cfPI/lq4o8Int6ofiJL2XDpfus1T64xV -----END CERTIFICATE-----Generated at Wed Nov 5 10:08:03 2025 by rpki-client