$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: KPz5a1BJ5ldP4m2VzOKTr6lNx1IqrKDoYzU/Gl369jk= Subject key identifier: BA:34:84:CE:58:EF:5F:69:32:F1:A6:7C:1E:A6:EF:4F:A3:C1:EB:B5 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 050D Signing time: Sun 02 Nov 2025 23:40:36 +0000 Manifest this update: Sun 02 Nov 2025 23:40:36 +0000 Manifest next update: Sun 09 Nov 2025 23:40:36 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: zN1uuKELn9ipfqObI7qxjV02naVLG33kdPmhe3B8jAU=) 2: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: au2wuZlStRAiQIz6GHb6zEgbdpYBgkZrv7Xcs6eeF3c=) 3: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: ZqfsDoVxPPlDBErW76OplgU+s6rrOgPc04UOswio6BA=) 4: 1CC78D4651B911F097C15C49C4F9AE02.roa (hash: eTkkjeUWF+laUxu3hlPAVMSxjb/tJZE5KKWsck/tHH4=) 5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: uvWCOvomLN/7hlVYLp/jcmXt9zO2kyVBg9I1lGQNm1w=) 6: 1D854DF451B911F097C15C49C4F9AE02.roa (hash: nW399cZU57cUehuWqrSPp5Ss8HGWsGUyXyuMRoZuVYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Nov 2 23:40:36 2025 GMT Not After : Nov 9 23:40:36 2025 GMT Subject: CN=6907ebf4-6262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:75:0e:83:b3:db:3c:db:62:e7:9e:73:b1:6c: 00:eb:29:67:7b:3a:4a:ca:75:e9:3d:9e:e1:e4:d2: 79:fd:f5:93:f9:c5:c8:cd:a9:05:2c:4f:fe:01:d5: ec:38:39:f6:cd:ce:5c:11:89:e2:d5:9c:a6:62:e4: bd:a9:3c:6d:fb:30:e8:c6:3d:d7:7d:ce:3a:90:42: b0:27:17:9e:95:6b:15:b1:bb:7c:d0:c7:a2:93:15: df:a4:21:32:86:19:52:b9:29:ee:d0:d8:c8:42:ee: e4:15:03:e0:68:4e:28:58:22:68:2d:e4:c0:aa:a6: 82:68:74:4b:ee:f3:8f:e4:d2:36:73:56:4b:1f:dd: 8c:8d:9c:7a:5a:ed:9b:3c:2d:b0:e1:59:b0:6a:a8: 62:6e:1d:48:ac:ba:18:2d:e4:55:5e:f5:a7:6a:9f: c8:37:af:10:bb:78:7b:55:10:ca:26:8b:5c:2e:c9: 42:92:ad:59:c1:62:9b:27:63:53:40:76:db:05:a9: 54:84:0d:5e:73:fb:b4:14:7d:97:00:fd:8e:e6:bc: 5d:93:7b:93:e8:bf:ae:3a:28:0a:e7:05:82:b4:cd: 4b:70:a3:03:7b:37:fd:e7:bd:a1:79:76:03:35:12: 13:65:03:21:9b:c7:23:95:c9:05:68:fb:0a:fd:40: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:84:CE:58:EF:5F:69:32:F1:A6:7C:1E:A6:EF:4F:A3:C1:EB:B5 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:73:8a:66:24:04:33:87:2b:9d:49:36:f5:3e:c2:31:c2:0c: e8:0e:94:b3:8e:a0:0f:99:00:c1:8c:8b:b8:fb:b8:3f:f5:ff: 58:9f:ab:f0:13:ea:b0:c7:8e:15:5c:ed:91:9b:29:d4:a2:f1: ca:c6:d0:1a:e1:84:49:50:16:0b:6a:e2:a5:04:40:9b:fe:25: 6a:2d:19:e0:7a:e7:12:77:a4:e6:b0:b9:4c:fe:34:52:e9:d6: ba:8a:e6:6e:b4:b8:10:5b:4b:5d:90:bb:70:78:56:f2:16:30: 0c:bf:d2:2e:1a:06:21:d3:27:d4:0b:70:71:56:1c:60:e7:e6: 3c:71:6a:df:05:35:69:50:f0:90:78:38:cc:dc:e3:95:49:de: 44:1c:53:bb:7a:17:6b:31:c8:3d:87:15:68:f1:90:ea:7d:a7: a7:79:af:d8:39:84:4a:1a:cc:eb:48:2d:c2:e8:3b:fc:9f:f7: ab:b0:4a:c6:0f:06:89:0e:dd:45:0d:62:15:20:a7:e6:10:48: cf:29:7a:cb:74:89:b8:89:f3:1c:12:40:cd:db:e8:eb:19:4c: 0a:57:16:60:e4:c5:5b:73:e9:89:35:fd:73:8b:34:fb:26:1f: f7:85:ea:89:86:a1:bc:3a:5c:5c:b8:a0:8e:38:21:aa:ef:f9: f4:87:6a:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUxMTAyMjM0MDM2WhcNMjUxMTA5MjM0MDM2WjAYMRYwFAYD VQQDEw02OTA3ZWJmNC02MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HUOg7PbPNti555zsWwA6ylnezpKynXpPZ7h5NJ5/fWT+cXIzakFLE/+AdXs ODn2zc5cEYni1ZymYuS9qTxt+zDoxj3Xfc46kEKwJxeelWsVsbt80MeikxXfpCEy hhlSuSnu0NjIQu7kFQPgaE4oWCJoLeTAqqaCaHRL7vOP5NI2c1ZLH92MjZx6Wu2b PC2w4Vmwaqhibh1IrLoYLeRVXvWnap/IN68Qu3h7VRDKJotcLslCkq1ZwWKbJ2NT QHbbBalUhA1ec/u0FH2XAP2O5rxdk3uT6L+uOigK5wWCtM1LcKMDezf9572heXYD NRITZQMhm8cjlckFaPsK/UDhzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo0hM5Y 719pMvGmfB6m70+jweu1MB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjc4pmJAQzhyudSTb1PsIxwgzoDpSzjqAPmQDBjIu4+7g/9f9Yn6vw E+qwx44VXO2RmynUovHKxtAa4YRJUBYLauKlBECb/iVqLRngeucSd6TmsLlM/jRS 6da6iuZutLgQW0tdkLtweFbyFjAMv9IuGgYh0yfUC3BxVhxg5+Y8cWrfBTVpUPCQ eDjM3OOVSd5EHFO7ehdrMcg9hxVo8ZDqfaenea/YOYRKGszrSC3C6Dv8n/ersErG DwaJDt1FDWIVIKfmEEjPKXrLdIm4ifMcEkDN2+jrGUwKVxZg5MVbc+mJNf1zizT7 Jh/3heqJhqG8OlxcuKCOOCGq7/n0h2qX -----END CERTIFICATE-----Generated at Tue Nov 4 20:06:51 2025 by rpki-client