$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: wiY7Cy+MXehpBd0KEhPzA8AtOEuAEXe4UtXLeKDQNdM= Subject key identifier: 6A:9E:03:17:98:1E:B5:CA:71:74:BA:85:D3:63:5C:04:F9:43:50:D7 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01A8 Signing time: Wed 05 Nov 2025 03:23:18 +0000 Manifest this update: Wed 05 Nov 2025 03:23:18 +0000 Manifest next update: Wed 12 Nov 2025 03:23:18 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: aJQV9DwjPrWrZ6zTDUzWHuh7QkYC25rC0we51oSssME=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Nov 5 03:23:18 2025 GMT Not After : Nov 12 03:23:18 2025 GMT Subject: CN=690ac326-1dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:b3:a1:eb:39:f7:4a:33:82:18:1b:65:8d: 4d:cd:1c:92:34:fe:67:8b:cc:78:06:0e:e1:6b:96: b5:56:a7:c8:23:20:d2:43:13:4b:7e:55:c3:31:07: 9e:96:42:52:38:29:15:a0:5e:85:d1:a6:59:92:d0: f3:55:84:00:76:fd:c2:6c:74:e3:d0:fa:9a:67:fd: 13:0a:6f:ef:a9:77:88:b2:27:ff:4b:4b:ab:9b:ac: 10:9f:f8:bb:29:67:27:9a:e5:b2:12:66:fc:06:24: cd:e0:e1:74:88:9c:66:57:86:24:5b:f2:e1:f3:51: 9f:ed:b2:a8:17:24:e4:14:ae:8a:50:f5:e7:14:08: 63:7a:f7:04:8c:df:c5:e1:aa:d2:f2:d6:f6:07:13: 10:b5:74:14:bf:2c:2d:76:aa:13:79:9a:65:1c:de: f6:ce:cf:90:c7:8d:eb:93:7e:93:cb:99:0d:a4:b6: 63:6e:23:d3:b7:22:9d:01:57:f5:3f:89:ee:55:f8: b4:dc:00:b7:fa:24:bc:fd:c1:4a:ba:40:cf:eb:17: e0:92:6b:a5:18:01:d1:ef:19:67:2e:23:4c:d5:bf: 3b:ab:59:47:c3:47:10:9d:c6:9a:78:2b:38:d4:de: 4a:ba:c3:2e:56:ef:f1:bb:0d:4d:8d:30:72:16:d9: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9E:03:17:98:1E:B5:CA:71:74:BA:85:D3:63:5C:04:F9:43:50:D7 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:85:ef:66:90:58:5a:88:42:98:9b:4a:6a:66:ff:e5:aa:bc: 09:87:64:81:0d:b5:12:3d:31:9f:f0:df:c9:de:c5:db:dc:09: 91:05:2c:d3:05:e1:74:ec:2c:e0:4e:27:b2:3f:9a:aa:c3:74: 36:09:9b:3c:a7:dc:dd:29:95:2e:e4:ad:59:a7:34:60:7c:9a: a1:e0:a9:fd:6c:ec:d0:5c:6f:38:25:a4:6a:d0:3f:e5:d3:f7: aa:49:dd:0d:46:8e:3e:7b:a0:ba:fe:3f:7f:78:fc:06:6f:6f: ff:85:20:25:e6:eb:6b:7b:0d:bf:13:27:39:d1:d5:1b:67:81: e0:a4:18:fa:0f:75:93:b1:50:7e:1c:be:f5:6e:e8:18:a5:56: ef:a0:3c:a4:c3:f2:82:e0:82:29:20:df:90:6a:bb:34:f2:91: 73:14:39:4b:eb:c7:12:e7:0e:08:3f:58:cd:fb:bd:07:49:f6: 00:ef:78:84:5b:d0:cf:57:27:cc:bf:88:7e:e6:8b:bd:16:56: 30:4d:25:c7:97:38:a4:4d:1a:f5:15:25:6a:ef:57:aa:d0:d5: 3f:88:71:a9:f8:3e:e7:f1:21:ce:a5:79:a8:9a:ed:e8:db:6c: 2a:21:ee:04:e7:fa:53:cc:a0:17:84:53:b7:d9:66:93:c5:f4: f8:98:ba:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUxMTA1MDMyMzE4WhcNMjUxMTEyMDMyMzE4WjAYMRYwFAYD VQQDEw02OTBhYzMyNi0xZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8izoes590ozghgbZY1NzRySNP5ni8x4Bg7ha5a1VqfIIyDSQxNLflXDMQee lkJSOCkVoF6F0aZZktDzVYQAdv3CbHTj0PqaZ/0TCm/vqXeIsif/S0urm6wQn/i7 KWcnmuWyEmb8BiTN4OF0iJxmV4YkW/Lh81Gf7bKoFyTkFK6KUPXnFAhjevcEjN/F 4arS8tb2BxMQtXQUvywtdqoTeZplHN72zs+Qx43rk36Ty5kNpLZjbiPTtyKdAVf1 P4nuVfi03AC3+iS8/cFKukDP6xfgkmulGAHR7xlnLiNM1b87q1lHw0cQncaaeCs4 1N5KusMuVu/xuw1NjTByFtlaaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqeAxeY HrXKcXS6hdNjXAT5Q1DXMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxhe9mkFhaiEKYm0pqZv/lqrwJh2SBDbUSPTGf8N/J3sXb3AmRBSzT BeF07CzgTieyP5qqw3Q2CZs8p9zdKZUu5K1ZpzRgfJqh4Kn9bOzQXG84JaRq0D/l 0/eqSd0NRo4+e6C6/j9/ePwGb2//hSAl5utrew2/Eyc50dUbZ4HgpBj6D3WTsVB+ HL71bugYpVbvoDykw/KC4IIpIN+Qars08pFzFDlL68cS5w4IP1jN+70HSfYA73iE W9DPVyfMv4h+5ou9FlYwTSXHlzikTRr1FSVq71eq0NU/iHGp+D7n8SHOpXmomu3o 22wqIe4E5/pTzKAXhFO32WaTxfT4mLrN -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:17 2025 by rpki-client