$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: 85L60kKGFRCdz8g5L8PGTi+TSCqqOvrLuTMQ/J5c4AM= Subject key identifier: 62:3C:96:8B:19:35:C6:AE:A5:81:71:07:38:9B:9B:EA:D5:36:A7:02 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 34E5 Signing time: Tue 04 Nov 2025 15:19:40 +0000 Manifest this update: Tue 04 Nov 2025 15:19:40 +0000 Manifest next update: Tue 11 Nov 2025 15:19:40 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: s59+KPADS3VGIwbY74msBY0hUP/lAtrfb6iIuAyhG7M=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Nov 4 15:19:40 2025 GMT Not After : Nov 11 15:19:40 2025 GMT Subject: CN=690a198c-840c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:86:28:f6:81:c0:27:a2:92:dd:3f:eb:c7: ad:cf:c8:28:3c:3d:77:26:24:1f:a9:6a:87:32:dd: 9b:ff:7a:91:c6:6b:c9:d6:99:40:be:2b:ab:fe:34: 15:d6:b2:a4:cd:d0:8b:77:de:a9:49:90:5e:7d:ed: 0d:a2:64:16:8f:7c:e4:80:f5:c8:31:f9:db:b8:47: 5c:77:36:f5:3d:1e:3d:f0:59:d6:4d:a5:72:de:b3: df:13:75:55:64:55:77:c7:19:79:47:ae:ae:c7:e0: 29:5a:29:9f:a8:6f:df:d9:56:4b:b2:13:78:72:dd: fe:e8:cc:b5:5c:78:55:e4:33:29:26:d1:da:db:7a: 8c:f3:9d:67:e3:70:df:71:1d:c8:8e:21:b1:30:4b: 55:e0:eb:01:8a:72:c5:8d:65:36:85:c5:ff:14:bb: 8a:44:44:05:52:60:33:0d:22:dc:e6:d8:38:19:5f: 69:a8:91:4c:64:c0:ba:7c:32:13:4a:f3:f3:59:b6: 28:7b:12:7e:a2:86:c0:86:9e:5c:f8:0c:87:93:7a: b3:62:5c:8d:c8:9d:fe:ab:64:26:bc:41:44:b6:5b: 61:0f:7a:f4:cb:6b:ed:71:2f:43:fd:7f:15:c5:7f: e6:bb:b1:c3:a7:4c:e9:e8:38:c8:4a:63:00:c0:e3: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3C:96:8B:19:35:C6:AE:A5:81:71:07:38:9B:9B:EA:D5:36:A7:02 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d9:e8:76:2c:95:8a:65:d1:96:b4:5c:75:59:97:c2:17:4a: d3:a5:5e:28:72:a3:ff:ca:76:1c:6e:af:e3:2e:97:f0:c4:5f: 6a:41:b1:19:3e:7f:3d:f5:f7:3c:65:be:c6:6e:77:00:c7:09: c9:61:5c:1b:4f:2d:7e:b1:7a:85:51:57:b6:b5:3f:b5:22:d5: 0c:cb:0d:f0:da:e8:ca:12:ac:cb:b6:f2:6b:61:e4:b1:77:7e: 3f:f5:c9:55:a7:e1:7d:f2:34:3e:e9:71:b9:33:1e:a8:42:18: 68:b5:0f:a5:5e:d9:ed:b5:0f:37:3b:57:0f:91:9d:b1:ae:be: e6:06:72:dc:6a:64:74:94:52:c6:ae:f6:18:bb:a5:4d:a6:d0: 45:b9:bc:2a:8b:1b:e1:20:35:e7:02:20:3a:cb:cc:67:a7:ec: 10:88:b9:9a:c6:c2:84:89:6f:14:eb:16:1b:80:11:e3:42:4d: 53:c5:10:c8:66:42:5c:f7:5b:07:29:06:94:d5:1b:74:30:b5: d8:e4:06:4f:41:77:dc:c1:a2:79:ea:41:b3:2e:a0:20:17:3d: 94:85:b4:3e:76:34:d5:1f:41:10:7a:f3:57:1a:e1:98:20:fc: 21:42:37:c0:ab:9c:d3:79:e3:54:d1:58:fa:a7:0a:c2:41:82: 98:48:f5:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUxMTA0MTUxOTQwWhcNMjUxMTExMTUxOTQwWjAYMRYwFAYD VQQDEw02OTBhMTk4Yy04NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdKGKPaBwCeikt0/68etz8goPD13JiQfqWqHMt2b/3qRxmvJ1plAviur/jQV 1rKkzdCLd96pSZBefe0NomQWj3zkgPXIMfnbuEdcdzb1PR498FnWTaVy3rPfE3VV ZFV3xxl5R66ux+ApWimfqG/f2VZLshN4ct3+6My1XHhV5DMpJtHa23qM851n43Df cR3IjiGxMEtV4OsBinLFjWU2hcX/FLuKREQFUmAzDSLc5tg4GV9pqJFMZMC6fDIT SvPzWbYoexJ+oobAhp5c+AyHk3qzYlyNyJ3+q2QmvEFEtlthD3r0y2vtcS9D/X8V xX/mu7HDp0zp6DjISmMAwOP32wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI8losZ NcaupYFxBzibm+rVNqcCMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH2eh2LJWKZdGWtFx1WZfCF0rTpV4ocqP/ynYcbq/jLpfwxF9qQbEZ Pn899fc8Zb7GbncAxwnJYVwbTy1+sXqFUVe2tT+1ItUMyw3w2ujKEqzLtvJrYeSx d34/9clVp+F98jQ+6XG5Mx6oQhhotQ+lXtnttQ83O1cPkZ2xrr7mBnLcamR0lFLG rvYYu6VNptBFubwqixvhIDXnAiA6y8xnp+wQiLmaxsKEiW8U6xYbgBHjQk1TxRDI ZkJc91sHKQaU1Rt0MLXY5AZPQXfcwaJ56kGzLqAgFz2UhbQ+djTVH0EQevNXGuGY IPwhQjfAq5zTeeNU0Vj6pwrCQYKYSPW9 -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:56 2025 by rpki-client