$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: VrxR0cgMsmdLap9OcbXwM0qE1RkE8/5dbOlKFBpXVhE= Subject key identifier: 48:0F:38:E3:36:EA:CE:34:A7:B5:84:12:78:4C:E3:43:B7:FF:B3:6C Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 4D Signing time: Wed 05 Nov 2025 07:41:25 +0000 Manifest this update: Wed 05 Nov 2025 07:41:24 +0000 Manifest next update: Wed 12 Nov 2025 07:41:24 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: aTwGFc9sQaZCOBxy23KDDaHr0rts1QMh2v9GnaO6eaQ=) 2: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: negZFqmBMo6VKE4VUMOsRrfxv0TCnbtWxCJ6jQA2XAg=) 3: 10958AE05FB611F0BF84DD83C4F9AE02.roa (hash: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI=) 4: C6811EDA5FB811F094135B2FC4F9AE02.roa (hash: +YrktxlVC+PsFpuKkXdgvfc2lY3YsjGZkj0Z7YYEcZU=) 5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Nov 5 07:41:24 2025 GMT Not After : Nov 12 07:41:24 2025 GMT Subject: CN=690affa4-6dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:05:72:a8:27:9c:5f:ac:71:71:75:1e:54: 5b:fb:b8:56:d9:a5:36:b9:0c:66:71:4c:a0:9c:63: a0:01:b9:ba:2e:7d:f3:fd:b9:b3:40:c8:fa:2b:ac: 0b:82:1b:fb:ff:4b:64:45:95:33:b1:18:f8:24:48: a2:2a:a5:c9:85:7e:89:27:a7:c7:95:5f:29:50:d9: c9:27:78:8e:bd:ec:82:bd:96:4b:b3:84:79:3d:d9: f0:33:e1:84:2d:b0:b2:4c:99:d4:b0:c6:4f:b0:ce: f5:89:85:e4:f8:84:b6:7f:e9:7f:3c:b6:95:74:3a: ce:68:68:c7:75:b6:94:28:41:8f:ce:5b:6e:1a:60: 44:18:3c:1e:db:0b:b1:d8:8e:eb:95:1a:c6:e3:3f: e0:51:8b:ea:4d:92:f0:4f:78:1f:32:a4:6d:d5:1a: 25:49:ce:42:b3:79:15:87:cd:54:79:22:23:c7:36: 0c:9d:5a:af:51:98:e6:3f:f3:36:ea:7c:1b:ac:e9: eb:cf:2c:be:a6:a2:98:e6:a5:d3:8c:2a:0c:9b:2d: 7d:47:31:a0:f6:e7:ae:cc:f1:de:4f:63:5a:2f:94: 4f:3f:32:e0:0c:6d:e0:c5:68:94:8d:63:f9:78:0a: 40:a0:cb:5b:9d:1c:ae:8b:f3:92:45:d8:3d:dc:de: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0F:38:E3:36:EA:CE:34:A7:B5:84:12:78:4C:E3:43:B7:FF:B3:6C X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f2:16:5f:30:00:48:88:b3:92:20:04:ac:9c:ba:41:87:27: 29:0e:4c:95:ae:6a:f3:8b:1c:64:c4:22:34:a6:3e:c5:f2:3f: 51:fd:7a:49:d3:15:8d:60:ad:78:06:3f:3e:3e:2d:4f:7a:94: a3:34:b0:f9:ed:30:04:db:8b:97:06:c5:44:9b:01:b7:b7:2a: a7:73:62:f2:9c:3a:06:18:c1:ef:25:33:d9:95:46:ba:18:44: b3:eb:e3:95:80:5c:7c:fc:f8:2f:23:9d:43:ae:b8:11:65:0e: fb:b3:d6:3d:79:52:74:de:b4:50:26:14:3f:49:2d:9b:b9:c0: 2e:4d:43:a6:fc:cd:81:34:9d:a6:c5:3a:3d:78:a2:09:45:19: 1f:6e:96:80:32:86:49:43:31:71:1d:82:df:4d:5d:7c:04:df: b0:fb:75:c8:ab:bf:47:33:41:48:b6:d0:0d:0e:af:98:59:d8: 41:92:dc:dc:4e:70:a7:6f:25:18:f5:86:6d:2f:d5:cb:2e:13: af:fb:2e:84:49:06:a3:a0:8d:5d:9a:fb:6c:38:7e:4e:7c:6b: a0:ab:4a:41:65:75:a3:cb:48:98:67:53:c8:59:1d:63:b3:3e: d9:80:41:0a:b4:5e:2c:52:d0:4b:97:d3:48:99:14:03:f9:89: 89:73:c9:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNDdCNTc3QjlDOEFCRTJDMzYwMEM1QjRFNzkzRkY0RDQ3 QjY1MDYyMDAeFw0yNTExMDUwNzQxMjRaFw0yNTExMTIwNzQxMjRaMBgxFjAUBgNV BAMTDTY5MGFmZmE0LTZkY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5egVyqCecX6xxcXUeVFv7uFbZpTa5DGZxTKCcY6ABubouffP9ubNAyPorrAuC G/v/S2RFlTOxGPgkSKIqpcmFfoknp8eVXylQ2ckneI697IK9lkuzhHk92fAz4YQt sLJMmdSwxk+wzvWJheT4hLZ/6X88tpV0Os5oaMd1tpQoQY/OW24aYEQYPB7bC7HY juuVGsbjP+BRi+pNkvBPeB8ypG3VGiVJzkKzeRWHzVR5IiPHNgydWq9RmOY/8zbq fBus6evPLL6mopjmpdOMKgybLX1HMaD2567M8d5PY1ovlE8/MuAMbeDFaJSNY/l4 CkCgy1udHK6L85JF2D3c3n9ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSA844zbq zjSntYQSeEzjQ7f/s2wwHwYDVR0jBBgwFoAUR7V3ucir4sNgDFtOeT/01HtlBiAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0M1REFCRUVBNUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdWM3VjaXI0c05nREZ0T2VUXzAxSHRsQmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0M1REFCRUVBNUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNO Z0RGdE9lVF8wMUh0bEJpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACbyFl8wAEiIs5IgBKycukGHJykOTJWuavOLHGTEIjSmPsXyP1H9eknT FY1grXgGPz4+LU96lKM0sPntMATbi5cGxUSbAbe3KqdzYvKcOgYYwe8lM9mVRroY RLPr45WAXHz8+C8jnUOuuBFlDvuz1j15UnTetFAmFD9JLZu5wC5NQ6b8zYE0nabF Oj14oglFGR9uloAyhklDMXEdgt9NXXwE37D7dcirv0czQUi20A0Or5hZ2EGS3NxO cKdvJRj1hm0v1csuE6/7LoRJBqOgjV2a+2w4fk58a6CrSkFldaPLSJhnU8hZHWOz PtmAQQq0XixS0EuX00iZFAP5iYlzyeo= -----END CERTIFICATE-----Generated at Thu Nov 6 02:43:24 2025 by rpki-client