$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: n7bpqEGYvr8XxRCWzQJLdoVsy8En5sa2qQQIH38J2lw= Subject key identifier: 17:D2:E2:4D:1F:19:07:E0:2C:C0:CA:4A:D1:AE:B5:89:87:B4:23:EF Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: CD Signing time: Mon 03 Nov 2025 05:44:41 +0000 Manifest this update: Mon 03 Nov 2025 05:44:40 +0000 Manifest next update: Mon 10 Nov 2025 05:44:40 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: tIEjQyxdpO0g4pkgFI3heV/uDpSRlYEMwo19h2UxD/4=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: VrKew/904a7WGaHwfTfVmRygoJsUgD+2JGEhLd8TxAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Nov 3 05:44:40 2025 GMT Not After : Nov 10 05:44:40 2025 GMT Subject: CN=69084149-7b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:c0:7e:0c:e9:9c:c2:07:87:e8:3f:ff:71: 31:ef:a4:2b:11:79:9a:94:1b:72:f1:92:c9:8d:36: 9e:66:16:45:1c:36:65:6e:1d:49:75:cd:a1:52:9b: 3b:bb:16:27:6a:d1:54:71:9d:df:b3:2f:b1:32:1f: ed:48:e2:8a:4e:5c:e5:1e:30:bf:a3:d6:ea:3e:44: 8d:5e:ed:31:80:8c:8d:09:30:fe:f7:84:db:8a:a0: 31:95:4b:d4:2b:d4:2f:a5:79:dd:c9:74:64:a6:d7: 72:34:59:e4:a6:a6:b5:c4:21:ec:4c:ff:b2:99:d1: 9c:49:71:71:c2:18:d6:20:b4:52:47:46:78:91:72: ea:16:2e:a3:be:31:d5:14:19:e1:61:f7:b6:db:a9: 83:41:2c:63:6a:2b:d4:ae:48:78:13:00:7d:16:eb: c1:e9:1c:f7:f5:b7:01:86:9e:89:a1:71:24:a8:c5: 46:1e:08:de:83:ca:06:bf:79:2d:b6:e9:40:15:c7: 0b:df:0e:ed:4a:46:2f:a2:68:3b:11:4c:b7:b9:a1: dd:52:75:dd:06:18:76:70:7d:1c:cc:1c:54:82:32: f8:89:06:f0:42:ae:c8:36:d7:f7:70:f3:c6:04:bb: e4:24:13:c9:bb:11:9b:11:54:42:97:8a:7f:8c:e0: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D2:E2:4D:1F:19:07:E0:2C:C0:CA:4A:D1:AE:B5:89:87:B4:23:EF X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5f:9b:ea:2e:5a:71:bd:c6:f0:56:6d:66:b7:ad:e8:f8:90: 7a:00:f0:e6:e2:e5:89:16:66:6a:63:65:35:66:61:31:7d:aa: d6:bf:00:b1:f5:cf:43:43:22:35:8f:b7:b9:25:98:71:01:00: 54:8c:c6:2e:14:51:eb:1e:97:fc:2a:4d:52:3a:de:94:b4:c4: df:5e:97:44:60:02:53:3f:52:4b:1e:52:07:4b:8a:95:3d:93: e6:87:7f:a0:b1:24:e9:9d:84:ad:80:7c:22:90:1f:84:39:a8: 87:90:8a:27:9b:0b:1b:c6:0d:20:47:4c:ff:06:15:5b:54:9b: da:0e:9f:ec:30:a2:05:ad:68:bb:da:25:f7:77:36:b9:29:ac: a5:29:fe:3e:0c:04:15:9b:47:b6:8d:ca:fc:2b:df:b7:61:1f: 1b:f2:83:2b:44:29:af:5a:18:a7:49:3a:7f:c5:f8:cf:31:28: 23:4f:29:48:ea:07:e5:74:fc:1b:14:63:e7:d6:11:be:88:68: 60:a0:f1:fc:16:cb:df:05:1b:ec:e7:b3:c8:3b:05:ef:3d:49: af:20:47:21:be:18:59:0e:eb:82:be:96:18:06:7f:94:a8:21: f9:f7:08:a1:93:ef:b6:cf:ed:e6:ce:6f:6c:ba:8a:d7:75:6b: 84:da:9f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD QTJFODM0NkYwHhcNMjUxMTAzMDU0NDQwWhcNMjUxMTEwMDU0NDQwWjAYMRYwFAYD VQQDEw02OTA4NDE0OS03YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OTAfgzpnMIHh+g//3Ex76QrEXmalBty8ZLJjTaeZhZFHDZlbh1Jdc2hUps7 uxYnatFUcZ3fsy+xMh/tSOKKTlzlHjC/o9bqPkSNXu0xgIyNCTD+94TbiqAxlUvU K9QvpXndyXRkptdyNFnkpqa1xCHsTP+ymdGcSXFxwhjWILRSR0Z4kXLqFi6jvjHV FBnhYfe226mDQSxjaivUrkh4EwB9FuvB6Rz39bcBhp6JoXEkqMVGHgjeg8oGv3kt tulAFccL3w7tSkYvomg7EUy3uaHdUnXdBhh2cH0czBxUgjL4iQbwQq7INtf3cPPG BLvkJBPJuxGbEVRCl4p/jOAUdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfS4k0f GQfgLMDKStGutYmHtCPvMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0 NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1 aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAX5vqLlpxvcbwVm1mt63o+JB6APDm4uWJFmZqY2U1ZmExfarWvwCx 9c9DQyI1j7e5JZhxAQBUjMYuFFHrHpf8Kk1SOt6UtMTfXpdEYAJTP1JLHlIHS4qV PZPmh3+gsSTpnYStgHwikB+EOaiHkIonmwsbxg0gR0z/BhVbVJvaDp/sMKIFrWi7 2iX3dza5KaylKf4+DAQVm0e2jcr8K9+3YR8b8oMrRCmvWhinSTp/xfjPMSgjTylI 6gfldPwbFGPn1hG+iGhgoPH8FsvfBRvs57PIOwXvPUmvIEchvhhZDuuCvpYYBn+U qCH59wihk++2z+3mzm9suorXdWuE2p+B -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:48 2025 by rpki-client