$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: XpvgMTrurnW1gk4yZ8sjopxzbsmsV6GlWtd04rCo3+4= Subject key identifier: 2E:45:23:2A:B7:98:BE:CA:38:A3:77:2D:E6:A3:57:D5:9D:FA:DB:4C Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: E4 Signing time: Mon 03 Nov 2025 05:32:19 +0000 Manifest this update: Mon 03 Nov 2025 05:32:19 +0000 Manifest next update: Mon 10 Nov 2025 05:32:19 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: dkX2k8B9OBmUfewD815hbljaO4eNpcaQ2WevPHdvzF8=) 2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: 2L9u9YUqO00U34mq8XNoVmN+3ZHp6ekSDH71ZMwwS68=) 3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: 8BNbqhDSj5zwZRpetUourvgFN3LcAIxoiLxOQgq3beM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Nov 3 05:32:19 2025 GMT Not After : Nov 10 05:32:19 2025 GMT Subject: CN=69083e63-6914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:1d:83:a0:fb:04:99:c4:a4:99:ce:89:4f: a4:1b:01:b6:53:61:d7:78:d7:aa:ef:03:56:3f:ab: e2:33:c5:f5:b6:25:68:ee:2f:f1:ac:a3:a2:de:68: c2:13:25:7e:8b:ce:0f:f9:6d:d7:f7:6a:1d:19:71: a9:96:cc:5e:83:bc:6c:1f:c5:68:18:c6:6c:14:c9: 1c:c7:76:fd:69:80:d8:f3:e5:53:c4:bb:89:39:db: 89:45:2f:55:1c:7c:7a:f0:16:e8:df:d2:11:27:f9: 03:27:26:53:32:03:f1:e1:2c:44:6f:f3:3b:b9:93: fe:0d:fc:d5:c6:09:69:85:8b:4e:d1:47:7a:a8:bc: 49:0c:af:c6:96:69:64:9b:77:e8:62:02:5a:b6:5e: e6:7c:5b:22:5b:76:f4:3e:d5:05:e4:96:ca:02:e8: 6f:c4:4b:cd:ea:23:5c:84:ec:04:a7:23:b4:1d:f6: 86:cb:b0:c6:77:67:9f:e9:eb:36:91:b3:66:91:31: 44:57:c4:ab:80:91:00:3e:d6:35:7d:42:d1:aa:8c: e3:76:2b:3e:0d:bc:a8:bc:85:81:13:22:17:2e:ab: 2f:b9:d1:c4:16:cf:23:53:fd:82:46:98:cc:69:c7: 87:18:c5:f3:fd:74:9d:3b:58:91:0c:d3:50:9a:04: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:23:2A:B7:98:BE:CA:38:A3:77:2D:E6:A3:57:D5:9D:FA:DB:4C X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:cb:e7:5a:5c:2c:5f:48:5f:78:04:9c:6a:8f:bf:02:60:14: 29:6d:97:8d:f3:1e:46:95:a9:6f:d2:6c:07:66:1c:a2:d9:8a: 73:ae:55:5a:7b:24:be:22:6e:7c:e6:7a:c5:5e:79:d9:26:e9: 24:7f:ee:01:8b:0f:c6:49:0e:9a:dd:40:90:de:e5:b0:1c:0a: 3d:5c:4a:15:7e:1d:9b:b0:a2:6e:28:5c:0f:53:1f:de:ae:f1: 21:8a:8e:bf:ee:99:c5:57:5e:9d:5b:96:a7:10:ba:63:13:77: 3d:1f:57:a9:bf:a6:07:a1:1c:d2:4f:98:a4:37:19:70:ea:e6: 70:ff:90:f4:61:18:6f:88:dc:9e:c4:04:5f:e4:df:97:0b:a8: 10:47:b6:2b:1d:40:e3:7d:01:d3:36:76:b6:72:61:65:44:02: ce:11:5c:8d:d1:e4:22:44:cc:50:da:fd:97:82:33:a9:8d:5f: ad:16:fa:a4:c9:2d:37:d5:57:5e:5e:3e:f3:65:b7:68:99:ae: 3f:2c:86:13:75:b3:6d:8d:34:cf:5a:86:7c:b1:83:a6:28:0d: fc:be:70:c6:21:a6:1d:b4:f3:1a:0c:e1:1d:3a:0a:10:bd:66: 7e:ec:20:e6:1c:a5:b0:66:2d:96:77:71:ab:72:f1:c1:ad:b8: 10:b9:05:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUxMTAzMDUzMjE5WhcNMjUxMTEwMDUzMjE5WjAYMRYwFAYD VQQDEw02OTA4M2U2My02OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf8dg6D7BJnEpJnOiU+kGwG2U2HXeNeq7wNWP6viM8X1tiVo7i/xrKOi3mjC EyV+i84P+W3X92odGXGplsxeg7xsH8VoGMZsFMkcx3b9aYDY8+VTxLuJOduJRS9V HHx68Bbo39IRJ/kDJyZTMgPx4SxEb/M7uZP+DfzVxglphYtO0Ud6qLxJDK/Glmlk m3foYgJatl7mfFsiW3b0PtUF5JbKAuhvxEvN6iNchOwEpyO0HfaGy7DGd2ef6es2 kbNmkTFEV8SrgJEAPtY1fULRqozjdis+DbyovIWBEyIXLqsvudHEFs8jU/2CRpjM aceHGMXz/XSdO1iRDNNQmgQdZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5FIyq3 mL7KOKN3LeajV9Wd+ttMMB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUy+daXCxfSF94BJxqj78CYBQpbZeN8x5Glalv0mwHZhyi2YpzrlVa eyS+Im585nrFXnnZJukkf+4Biw/GSQ6a3UCQ3uWwHAo9XEoVfh2bsKJuKFwPUx/e rvEhio6/7pnFV16dW5anELpjE3c9H1epv6YHoRzST5ikNxlw6uZw/5D0YRhviNye xARf5N+XC6gQR7YrHUDjfQHTNna2cmFlRALOEVyN0eQiRMxQ2v2XgjOpjV+tFvqk yS031VdeXj7zZbdoma4/LIYTdbNtjTTPWoZ8sYOmKA38vnDGIaYdtPMaDOEdOgoQ vWZ+7CDmHKWwZi2Wd3GrcvHBrbgQuQWe -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:40 2025 by rpki-client