$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: lmzR6aXOb9Ke5AEwA6bGQzW59wqNsU68XNTY5jN8qlU= Subject key identifier: 72:7C:22:E8:8C:57:D0:04:D9:50:F9:D9:5A:FC:0E:64:16:11:40:17 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 04DB Signing time: Sun 02 Nov 2025 23:45:43 +0000 Manifest this update: Sun 02 Nov 2025 23:45:42 +0000 Manifest next update: Sun 09 Nov 2025 23:45:42 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: uBBvnXwbhxsT+UgvLd/aJlplwOh/Rj1li43vQu8iSCI=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: jYyif5XzvidlG1gkLHEZCka6sLKHMVLL3uaZPQUQSWU=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: aIqnIQInPJrCMj5K0+1zGOgCOM0xLmrh4KbjkSzgqVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Nov 2 23:45:42 2025 GMT Not After : Nov 9 23:45:42 2025 GMT Subject: CN=6907ed26-b299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:e5:5b:8c:2d:cb:a2:c4:66:10:17:be:72: 36:75:cd:5b:b5:b6:e4:50:22:6f:4c:01:c7:8e:41: 2b:fb:c4:59:35:dc:74:83:98:98:bf:8a:cd:7f:f0: cc:86:06:05:48:bf:f5:1e:99:75:e1:1d:93:af:de: da:cf:13:c9:6b:80:3b:d6:90:3b:62:1e:84:4c:25: d4:28:0d:0c:34:a0:91:b8:1b:0e:f9:28:86:b9:3c: 6b:6d:31:6e:02:73:3d:ab:f7:d8:f4:1e:76:db:6a: 34:70:8e:37:8a:bc:5d:81:e3:d7:83:1f:04:93:5d: 38:f1:1b:f9:96:4a:77:e4:99:69:b3:a6:fb:d5:91: f1:aa:4f:70:e9:e3:43:a8:46:8f:bf:99:5e:e2:c1: 4b:52:a3:7f:24:b9:31:15:ee:33:d2:79:d1:48:40: f6:ae:fd:8b:17:14:95:be:3c:0e:82:77:0a:51:32: 30:30:a6:7b:b9:76:e9:1d:c4:17:da:a1:f1:d0:20: 3c:e7:53:01:09:75:82:7f:d9:c5:63:7a:38:3e:f1: 08:b0:0b:8f:8f:3e:52:ea:8c:56:c3:ad:b1:64:46: a1:4d:53:98:2c:c3:d9:44:78:d0:15:45:f6:46:ea: b1:6a:48:f5:0f:ee:76:cd:6b:76:29:17:b9:6c:79: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7C:22:E8:8C:57:D0:04:D9:50:F9:D9:5A:FC:0E:64:16:11:40:17 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6b:ff:fc:07:cf:e5:ad:11:70:2d:74:5f:39:8c:b0:9a:ea: 10:84:da:6e:43:e6:1b:d2:69:22:89:1c:b5:21:f9:18:b8:2f: fa:7f:2e:e7:fd:65:cb:7e:7b:1e:aa:80:1f:ba:ec:34:d3:fe: 12:2b:14:03:b1:b9:0b:2c:e9:09:11:fd:21:d6:fc:10:ab:1c: ac:f4:35:ea:68:ef:80:70:df:8a:ae:0a:08:07:ab:29:4d:0a: ab:48:0a:b1:4d:99:a8:3e:b9:55:c3:3d:a8:08:fa:e9:71:4f: 06:43:39:e3:50:ae:62:11:02:88:e6:b3:65:cd:75:19:75:52: d2:be:11:77:db:69:32:9d:4c:cf:36:ae:72:d7:6c:c7:9f:f5: df:c2:9c:8d:60:05:f9:b3:e8:66:59:f9:49:f2:66:ab:9b:a0: 63:04:f2:07:69:ed:26:a4:75:3e:7f:9e:d0:75:50:06:0b:c9: 86:3f:82:20:b0:9a:8e:38:2e:36:6d:69:7d:4f:ea:9d:17:df: bd:16:0e:be:18:42:ea:d6:e8:6d:13:81:6c:8f:2e:c4:6c:f8: 83:b3:7e:ef:35:05:20:0b:cf:ec:4d:1b:b2:ac:73:14:41:28: 53:5d:39:28:98:36:2e:1f:d0:60:a2:47:7f:a7:66:2b:78:16: 08:5f:b1:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUxMTAyMjM0NTQyWhcNMjUxMTA5MjM0NTQyWjAYMRYwFAYD VQQDEw02OTA3ZWQyNi1iMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujPlW4wty6LEZhAXvnI2dc1btbbkUCJvTAHHjkEr+8RZNdx0g5iYv4rNf/DM hgYFSL/1Hpl14R2Tr97azxPJa4A71pA7Yh6ETCXUKA0MNKCRuBsO+SiGuTxrbTFu AnM9q/fY9B5222o0cI43irxdgePXgx8Ek1048Rv5lkp35Jlps6b71ZHxqk9w6eND qEaPv5le4sFLUqN/JLkxFe4z0nnRSED2rv2LFxSVvjwOgncKUTIwMKZ7uXbpHcQX 2qHx0CA851MBCXWCf9nFY3o4PvEIsAuPjz5S6oxWw62xZEahTVOYLMPZRHjQFUX2 Ruqxakj1D+52zWt2KRe5bHmIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJ8IuiM V9AE2VD52Vr8DmQWEUAXMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBea//8B8/lrRFwLXRfOYywmuoQhNpuQ+Yb0mkiiRy1IfkYuC/6fy7n /WXLfnseqoAfuuw00/4SKxQDsbkLLOkJEf0h1vwQqxys9DXqaO+AcN+KrgoIB6sp TQqrSAqxTZmoPrlVwz2oCPrpcU8GQznjUK5iEQKI5rNlzXUZdVLSvhF322kynUzP Nq5y12zHn/XfwpyNYAX5s+hmWflJ8marm6BjBPIHae0mpHU+f57QdVAGC8mGP4Ig sJqOOC42bWl9T+qdF9+9Fg6+GELq1uhtE4Fsjy7EbPiDs37vNQUgC8/sTRuyrHMU QShTXTkomDYuH9Bgokd/p2YreBYIX7GK -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:22 2025 by rpki-client