$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: 19JuN1Gf8gQbu4oZRCkJcDeLPSEvNlTKQjx2uernufk= Subject key identifier: 5B:A9:E6:F3:4D:39:C6:70:DB:FE:CA:A1:D7:5E:E0:28:1F:89:3F:10 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 4A Signing time: Mon 03 Nov 2025 07:23:08 +0000 Manifest this update: Mon 03 Nov 2025 07:23:07 +0000 Manifest next update: Mon 10 Nov 2025 07:23:07 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: B8eH1kZ9ex40WBLgY0Io9OwV9l7w2abMGMzMn2sjcJk=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Nov 3 07:23:07 2025 GMT Not After : Nov 10 07:23:07 2025 GMT Subject: CN=6908585c-ad23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:1e:23:87:49:4e:99:53:ed:7d:23:81:66: ce:a8:6d:90:8a:e4:d2:03:77:2d:e4:84:c2:25:8f: c1:c8:0b:51:db:84:f8:d0:87:d5:50:be:c9:0d:18: aa:7b:c2:4d:2b:9d:57:2f:ca:ea:7e:52:3e:b9:05: 17:9d:c6:a8:89:e4:97:ef:39:18:a4:81:24:5d:2d: b3:cf:cc:a0:33:c9:9a:99:da:6d:6d:c3:a9:b4:00: 30:d9:02:db:ab:16:c2:a5:94:08:5b:d5:55:55:3f: 66:35:9c:a9:d0:30:52:f5:b6:37:bc:fb:58:8f:a5: 18:d4:a2:2d:0a:6b:a0:a9:c3:85:40:79:f1:fa:95: b7:8c:3a:44:77:4b:0d:f1:84:90:b1:91:62:89:ee: ad:99:7a:d8:14:76:06:f9:2c:d7:85:27:c1:c4:12: 8f:41:cb:e8:3c:79:e0:45:84:71:60:e5:2d:0f:05: be:3e:a5:ee:cf:f2:60:34:6f:ac:d3:4a:84:42:c3: ef:93:ac:02:fe:73:51:eb:b4:c7:c3:ad:47:12:e1: dd:c1:fc:9a:90:7c:6e:72:7a:4e:76:35:1f:fe:eb: 0b:80:f6:bc:38:d2:e8:f1:c4:8e:51:90:49:a5:7b: e9:d0:42:50:32:7c:81:43:94:cc:0b:7c:8b:bf:5c: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A9:E6:F3:4D:39:C6:70:DB:FE:CA:A1:D7:5E:E0:28:1F:89:3F:10 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7a:c8:e7:e4:f8:0a:c4:9e:07:1d:6e:06:13:7d:a7:b1:41: c0:6e:52:e4:d3:ab:14:aa:5f:41:fb:73:2c:59:05:33:a9:a5: bc:4f:79:be:ca:f0:d9:f3:04:19:97:c0:d8:3d:98:1d:04:32: 3b:23:10:ed:bc:7e:75:cd:c3:f4:3b:36:d2:69:40:0e:6b:76: 4e:e2:48:99:7f:93:4c:33:cc:73:76:53:fa:8e:bb:59:71:46: f2:54:2b:70:e1:7c:14:59:3f:20:ff:cd:ae:20:ec:9e:35:6e: 92:8a:20:bf:d8:f4:5a:58:2b:0d:e9:79:9b:de:09:d2:70:3b: 8d:71:0f:66:2f:8a:ce:8f:71:6f:9a:56:da:4f:cb:47:85:72: db:10:d0:a5:21:ee:a3:6d:11:ea:24:67:cb:07:4c:72:9e:9c: 04:fa:33:17:aa:4b:79:e2:34:8c:6a:ff:83:c8:42:ad:3a:cf: 47:7d:a0:1b:88:02:ce:d4:c7:b6:c6:47:c8:15:b7:1d:5d:78: 36:fe:ad:74:54:44:08:d7:58:98:f6:7c:fe:ff:95:ad:61:c1: de:f9:70:a4:fd:3c:e5:ac:d8:ff:7e:15:ab:33:e5:60:0a:58: 7c:92:c6:67:8f:75:d4:58:1a:56:02:d4:68:4f:82:79:9d:3e: f5:4d:a3:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTExMDMwNzIzMDdaFw0yNTExMTAwNzIzMDdaMBgxFjAUBgNV BAMTDTY5MDg1ODVjLWFkMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj2h4jh0lOmVPtfSOBZs6obZCK5NIDdy3khMIlj8HIC1HbhPjQh9VQvskNGKp7 wk0rnVcvyup+Uj65BRedxqiJ5JfvORikgSRdLbPPzKAzyZqZ2m1tw6m0ADDZAtur FsKllAhb1VVVP2Y1nKnQMFL1tje8+1iPpRjUoi0Ka6Cpw4VAefH6lbeMOkR3Sw3x hJCxkWKJ7q2ZetgUdgb5LNeFJ8HEEo9By+g8eeBFhHFg5S0PBb4+pe7P8mA0b6zT SoRCw++TrAL+c1HrtMfDrUcS4d3B/JqQfG5yek52NR/+6wuA9rw40ujxxI5RkEml e+nQQlAyfIFDlMwLfIu/XNu5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW6nm8005 xnDb/sqh117gKB+JPxAwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHF6yOfk+ArEngcdbgYTfaexQcBuUuTTqxSqX0H7cyxZBTOppbxPeb7K 8NnzBBmXwNg9mB0EMjsjEO28fnXNw/Q7NtJpQA5rdk7iSJl/k0wzzHN2U/qOu1lx RvJUK3DhfBRZPyD/za4g7J41bpKKIL/Y9FpYKw3peZveCdJwO41xD2Yvis6PcW+a VtpPy0eFctsQ0KUh7qNtEeokZ8sHTHKenAT6MxeqS3niNIxq/4PIQq06z0d9oBuI As7Ux7bGR8gVtx1deDb+rXRURAjXWJj2fP7/la1hwd75cKT9POWs2P9+Fasz5WAK WHySxmePddRYGlYC1GhPgnmdPvVNo4A= -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:14 2025 by rpki-client