$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft File: 7N0mV0PpIRvOCq3LsCLObzO-CwY.mft (raw, json) Hash identifier: sbvruTwtZzgmNsTWOWONg35VMQhDdT+Vq8BEwgkAWpE= Subject key identifier: 5F:5B:DD:99:14:BA:39:C2:EF:0A:44:B8:F2:BA:FF:17:D3:F0:7E:EE Authority key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 Certificate issuer: /CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft Manifest number: 082C Signing time: Wed 05 Nov 2025 00:24:24 +0000 Manifest this update: Wed 05 Nov 2025 00:24:23 +0000 Manifest next update: Wed 12 Nov 2025 00:24:23 +0000 Files and hashes: 1: 7N0mV0PpIRvOCq3LsCLObzO-CwY.crl (hash: wELimwYWNnSj61Aq6ojtP5jx3iUQC6vK6OM0YwrBaUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Validity Not Before: Nov 5 00:24:23 2025 GMT Not After : Nov 12 00:24:23 2025 GMT Subject: CN=690a9938-6e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:88:45:e8:ec:a0:76:97:17:97:4c:f6:17:fc: d5:73:90:ec:cf:6e:f4:c7:35:42:72:1d:81:0f:c3: 23:14:cb:ea:4b:4f:49:be:69:30:ff:f2:c5:d0:be: e4:d3:43:28:c3:4d:06:f5:1e:f4:87:55:e1:2a:08: 98:e3:b5:c4:cf:62:ec:4f:65:cd:cd:89:ab:33:ee: f8:9d:e8:b7:c1:c4:1d:98:05:d5:3f:5f:e1:fe:8c: 9a:01:ae:72:85:73:d4:25:95:ef:21:9e:9b:94:95: a1:8e:06:97:bd:93:4f:b3:79:7f:4e:1a:73:fa:83: a0:1a:52:99:25:35:da:b9:74:dc:a5:bd:13:7c:43: 00:18:aa:fa:b0:3e:ad:5a:17:b7:03:77:c3:51:cf: f9:7e:3f:a0:1e:4c:0e:3d:bc:26:3b:df:aa:83:19: f6:e1:ac:33:ae:3a:ca:a1:10:5d:67:a7:2f:f7:67: 9c:8f:b5:45:d1:4b:2a:e7:d8:53:7b:48:8d:5c:4b: 43:b9:b4:e2:2d:88:02:05:16:a2:f6:da:4f:33:e4: a6:d2:e1:e8:0b:b7:60:b3:00:63:2a:bf:0d:f9:8f: 42:9f:59:f9:3b:41:bb:0c:10:c8:ed:31:3d:e6:86: 17:5e:c6:0f:29:26:c2:3c:78:c1:24:66:db:14:30: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5B:DD:99:14:BA:39:C2:EF:0A:44:B8:F2:BA:FF:17:D3:F0:7E:EE X509v3 Authority Key Identifier: keyid:EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e3:57:35:16:e7:7b:97:47:84:8a:af:e6:31:f6:98:c3:2f: d7:dc:5a:c5:45:72:4d:25:5b:a1:3c:ef:09:a7:53:2e:b5:66: ef:a4:b8:b7:20:ca:5c:10:13:fc:5e:78:b8:fd:70:c5:14:d3: 93:8e:fc:fd:56:2e:bc:e9:d2:5c:f9:b9:97:28:fd:38:40:c3: 60:35:5c:fe:b4:ad:22:b9:8e:54:66:18:ad:5f:3d:42:f4:9e: c1:70:27:71:fe:47:0f:32:9b:a6:8c:31:3a:aa:83:b0:2d:4d: 89:2f:cc:e9:c1:ed:ff:75:09:d3:1a:67:be:50:c8:f9:ad:6f: 7d:6d:9e:fe:07:f9:c8:77:ef:04:bf:9a:c7:eb:bb:56:ea:6c: bf:24:db:47:a5:4b:4e:1a:f0:0b:5b:73:8e:d8:fe:9d:b1:7b: e8:79:97:d3:2b:62:72:26:5e:1f:06:c7:75:c4:ca:19:2b:2e: 09:a6:8c:2f:84:48:45:3c:76:9d:98:b5:cb:64:bd:c1:22:ca: 40:e2:9b:64:3d:cb:99:ae:5f:3f:fa:65:86:5e:c8:90:c3:17: ce:4e:e5:16:a7:35:06:81:40:b9:fa:30:07:9d:cf:de:ee:5e: ff:ac:30:b1:b1:4a:7d:63:ee:41:dd:f9:83:58:32:ab:e2:01: b7:21:d2:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEVDREQyNjU3NDNFOTIxMUJDRTBBQURDQkIwMjJDRTZG MzNCRTBCMDYwHhcNMjUxMTA1MDAyNDIzWhcNMjUxMTEyMDAyNDIzWjAYMRYwFAYD VQQDEw02OTBhOTkzOC02ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YhF6OygdpcXl0z2F/zVc5Dsz270xzVCch2BD8MjFMvqS09Jvmkw//LF0L7k 00Mow00G9R70h1XhKgiY47XEz2LsT2XNzYmrM+74nei3wcQdmAXVP1/h/oyaAa5y hXPUJZXvIZ6blJWhjgaXvZNPs3l/Thpz+oOgGlKZJTXauXTcpb0TfEMAGKr6sD6t Whe3A3fDUc/5fj+gHkwOPbwmO9+qgxn24awzrjrKoRBdZ6cv92ecj7VF0Usq59hT e0iNXEtDubTiLYgCBRai9tpPM+Sm0uHoC7dgswBjKr8N+Y9Cn1n5O0G7DBDI7TE9 5oYXXsYPKSbCPHjBJGbbFDAlaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9b3ZkU ujnC7wpEuPK6/xfT8H7uMB8GA1UdIwQYMBaAFOzdJldD6SEbzgqty7Aizm8zvgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElSdk9DcTNMc0NMT2J6Ty1D d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOMG1WMFBwSVJ2T0NxM0xzQ0xPYnpPLUN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElS dk9DcTNMc0NMT2J6Ty1Dd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq41c1Fud7l0eEiq/mMfaYwy/X3FrFRXJNJVuhPO8Jp1MutWbvpLi3 IMpcEBP8Xni4/XDFFNOTjvz9Vi686dJc+bmXKP04QMNgNVz+tK0iuY5UZhitXz1C 9J7BcCdx/kcPMpumjDE6qoOwLU2JL8zpwe3/dQnTGme+UMj5rW99bZ7+B/nId+8E v5rH67tW6my/JNtHpUtOGvALW3OO2P6dsXvoeZfTK2JyJl4fBsd1xMoZKy4Jpowv hEhFPHadmLXLZL3BIspA4ptkPcuZrl8/+mWGXsiQwxfOTuUWpzUGgUC5+jAHnc/e 7l7/rDCxsUp9Y+5B3fmDWDKr4gG3IdKB -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:25 2025 by rpki-client