$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: s3hU7AA1wQRIdNget8bbpKiEZaH6BS0gCDELfNo/Jzw= Subject key identifier: F7:5E:BE:35:90:55:0B:45:A1:32:BF:2E:1C:6C:6B:D1:92:98:02:FA Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 03F8 Signing time: Wed 05 Nov 2025 00:35:54 +0000 Manifest this update: Wed 05 Nov 2025 00:35:53 +0000 Manifest next update: Wed 12 Nov 2025 00:35:53 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: HCB+g+VUfxhX+9jWNQYtlLI365bvJGpZVr47SkgeyvU=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Nov 5 00:35:53 2025 GMT Not After : Nov 12 00:35:53 2025 GMT Subject: CN=690a9bea-d09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:26:81:e0:28:14:eb:0e:ea:7f:ca:a9:6c: 0f:3c:63:78:85:9f:ad:20:8c:72:eb:ab:f1:93:c6: 79:d5:2c:7e:76:a2:d6:28:64:d2:a1:9a:f1:d8:6f: ff:0e:8e:01:35:08:35:f9:0f:77:3f:d7:b4:aa:6e: 9c:9f:75:65:08:c8:9f:0d:ee:34:0d:01:9f:cd:37: dd:0d:da:22:2a:73:34:ec:1f:1c:ed:a9:8a:bb:20: a2:37:33:6f:7e:30:08:60:86:64:67:37:d4:59:07: 11:50:36:69:49:29:7b:d5:bc:94:2e:32:24:51:e3: b0:10:0c:f6:83:e5:2c:82:32:11:56:bd:1b:eb:df: 84:eb:69:55:b4:63:80:bb:b0:7c:9f:35:6b:5e:cd: 76:5d:c2:6b:50:81:25:32:45:cb:af:97:ea:0c:85: f0:c3:51:0a:19:46:51:e8:57:57:df:ee:bf:56:d9: b2:2f:8f:7f:48:29:f2:bb:f2:dd:53:ba:a4:d9:7c: 0d:22:c8:fa:c7:fc:5d:5a:4a:6f:c5:97:08:1f:d6: 6b:72:4c:18:a9:28:6d:46:50:bc:ef:70:f7:87:56: b0:9a:a6:ed:37:b0:cc:80:19:dc:2d:62:5a:3e:54: ec:f0:43:5c:74:1f:1d:76:1c:76:bd:1e:f8:f3:29: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5E:BE:35:90:55:0B:45:A1:32:BF:2E:1C:6C:6B:D1:92:98:02:FA X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ce:87:48:62:a1:76:44:3c:1d:71:13:2b:50:13:e0:ca:0c: 32:88:52:7b:a0:d3:ea:cf:57:3a:1d:6e:21:5d:85:be:f6:69: a2:ed:4e:8e:30:1e:ef:82:0c:a0:6b:2c:df:30:94:de:99:70: 0a:46:d8:db:7b:18:67:50:86:89:b3:2e:0c:d3:cb:df:62:1f: 91:14:64:64:d6:6b:5f:06:6f:c4:ed:81:ee:da:99:f8:25:d5: 5c:d2:65:5b:f9:20:f0:70:22:79:00:4a:0b:6e:fb:1d:3a:f6: dd:6f:49:0f:b3:3d:78:4b:6e:07:f1:63:c1:33:e4:7c:ae:d8: af:67:d1:6d:3d:81:b5:19:05:9b:4c:1e:03:3c:e4:45:fb:26: 3a:90:2d:87:14:15:80:0c:af:ba:6f:1b:82:f6:a0:98:68:10: 40:00:c1:ab:b4:41:4d:36:e6:a5:76:bc:15:fe:25:d2:89:41: 35:49:f5:07:9d:a8:8a:d2:4c:42:6a:14:cc:2d:a0:5a:20:64: 63:8f:dd:1e:81:b0:8e:bd:7a:b0:32:5e:bc:68:c1:9e:6e:55: af:e6:f3:0e:02:33:2f:df:09:c2:82:cd:34:86:08:e3:4e:31: f5:02:81:66:0d:ae:55:e8:ff:d5:d7:d9:95:e7:bb:34:c6:8f: 92:be:d2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUxMTA1MDAzNTUzWhcNMjUxMTEyMDAzNTUzWjAYMRYwFAYD VQQDEw02OTBhOWJlYS1kMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFUmgeAoFOsO6n/KqWwPPGN4hZ+tIIxy66vxk8Z51Sx+dqLWKGTSoZrx2G// Do4BNQg1+Q93P9e0qm6cn3VlCMifDe40DQGfzTfdDdoiKnM07B8c7amKuyCiNzNv fjAIYIZkZzfUWQcRUDZpSSl71byULjIkUeOwEAz2g+UsgjIRVr0b69+E62lVtGOA u7B8nzVrXs12XcJrUIElMkXLr5fqDIXww1EKGUZR6FdX3+6/VtmyL49/SCnyu/Ld U7qk2XwNIsj6x/xdWkpvxZcIH9ZrckwYqShtRlC873D3h1awmqbtN7DMgBncLWJa PlTs8ENcdB8ddhx2vR748ykgawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdevjWQ VQtFoTK/Lhxsa9GSmAL6MB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkzodIYqF2RDwdcRMrUBPgygwyiFJ7oNPqz1c6HW4hXYW+9mmi7U6O MB7vggygayzfMJTemXAKRtjbexhnUIaJsy4M08vfYh+RFGRk1mtfBm/E7YHu2pn4 JdVc0mVb+SDwcCJ5AEoLbvsdOvbdb0kPsz14S24H8WPBM+R8rtivZ9FtPYG1GQWb TB4DPORF+yY6kC2HFBWADK+6bxuC9qCYaBBAAMGrtEFNNualdrwV/iXSiUE1SfUH naiK0kxCahTMLaBaIGRjj90egbCOvXqwMl68aMGeblWv5vMOAjMv3wnCgs00hgjj TjH1AoFmDa5V6P/V19mV57s0xo+SvtLE -----END CERTIFICATE-----Generated at Wed Nov 5 08:03:05 2025 by rpki-client