$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: LiWQCMVsGPvTl6nuvBqwcUYcK/pe8+XTvkkrp4Klswk= Subject key identifier: 44:CB:97:C7:8C:BB:4D:B4:56:C9:65:1E:73:49:EF:9D:F4:9E:92:88 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 0236 Signing time: Mon 03 Nov 2025 01:53:22 +0000 Manifest this update: Mon 03 Nov 2025 01:53:21 +0000 Manifest next update: Mon 10 Nov 2025 01:53:21 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: ZgVEQ0HOSawzbQfj+iVIr4wTKkAlvOnSndN9jmNHpJU=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: CJJ1swHPV2FS2o94pZ274vtIWz1N4ntGwGv8bt1RfcY=) 4: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: MOy3nx724ovxMfijazGrKwrHh5j4BrBp6Yxw1lx+7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Nov 3 01:53:21 2025 GMT Not After : Nov 10 01:53:21 2025 GMT Subject: CN=69080b11-d817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:a8:fd:79:f9:42:7e:06:8e:84:32:c1:5a: fc:5d:f4:4b:77:cb:a9:17:99:1f:06:bb:13:cb:dc: 36:b8:65:fe:ec:7c:c0:20:72:78:d4:e7:64:7a:cb: 05:0c:06:97:cf:5c:dd:bc:85:fa:0e:27:d0:f6:90: 12:93:b5:9e:8e:1a:77:c4:53:67:55:32:6b:c1:9d: 55:2d:bf:b6:db:7e:86:45:dc:52:b4:0e:6c:d4:b1: df:ef:78:29:39:be:5f:ae:44:a9:04:48:99:f6:f7: e5:75:46:dc:34:33:90:b1:4e:82:fe:47:43:9f:5c: 0f:cc:d3:fd:ce:94:db:09:93:25:19:dc:9e:1a:ee: 7c:62:e6:ad:a7:97:65:46:71:0e:7e:e5:98:e4:a9: f8:5f:e1:ba:2f:45:c4:80:c6:55:99:11:01:cc:fb: 1b:39:6d:33:39:99:87:51:30:21:0f:3a:03:40:eb: 7a:11:bb:34:cf:45:81:34:46:0d:ba:65:c3:76:5c: 36:fd:29:45:2c:f4:1d:99:94:39:96:82:42:17:01: a1:ec:7e:34:cb:f7:59:a9:47:fc:ec:23:68:c6:c8: 28:44:a5:82:d8:2c:2d:2e:b3:4c:49:4d:59:28:60: 59:ac:7d:98:04:13:17:0c:de:9d:bb:6d:85:21:1a: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:97:C7:8C:BB:4D:B4:56:C9:65:1E:73:49:EF:9D:F4:9E:92:88 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e8:7f:ec:3a:47:e9:aa:f2:f2:36:71:39:0a:1b:b1:fe:a1: b7:4c:a4:83:a2:f5:46:9a:06:55:49:41:d5:75:b3:b9:01:5b: e7:69:a3:db:4c:71:64:7b:40:f6:7a:bd:66:40:00:d4:0c:c9: b9:9a:bc:f8:97:93:97:db:72:72:8f:e1:33:51:81:6e:d8:0f: 52:4e:03:6f:78:df:cf:81:54:16:3d:44:71:4d:bb:65:c4:6d: bb:3d:35:26:25:fa:80:f2:d9:a5:fd:d7:65:90:da:f5:ad:95: bc:1d:58:42:13:1d:d1:6b:5d:ca:3e:b7:c9:8c:9c:4c:2e:83: a1:9b:ba:97:ee:e0:85:38:b8:90:e7:94:fd:c1:2c:fb:d9:80: 67:e6:d0:ec:b8:b9:f8:74:d8:30:69:b9:5d:07:46:ca:d8:42: 93:3a:71:28:0a:7f:82:c7:80:d2:cf:28:ae:6a:1f:a5:7e:53: b5:6e:a4:61:27:fc:ee:72:84:45:cd:42:71:ca:8c:39:c5:e9: 7d:8f:6b:2c:7e:e6:ca:f6:ae:b5:8b:bd:d9:d5:c9:c2:ea:ef: d3:47:5b:23:e5:17:84:47:0b:a1:23:67:21:3f:11:30:2a:36: ff:b6:f0:bf:fa:65:5e:6b:5c:07:a2:8b:bc:44:08:c5:11:5e: fb:fa:47:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUxMTAzMDE1MzIxWhcNMjUxMTEwMDE1MzIxWjAYMRYwFAYD VQQDEw02OTA4MGIxMS1kODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgao/Xn5Qn4GjoQywVr8XfRLd8upF5kfBrsTy9w2uGX+7HzAIHJ41OdkessF DAaXz1zdvIX6DifQ9pASk7Wejhp3xFNnVTJrwZ1VLb+2236GRdxStA5s1LHf73gp Ob5frkSpBEiZ9vfldUbcNDOQsU6C/kdDn1wPzNP9zpTbCZMlGdyeGu58Yuatp5dl RnEOfuWY5Kn4X+G6L0XEgMZVmREBzPsbOW0zOZmHUTAhDzoDQOt6Ebs0z0WBNEYN umXDdlw2/SlFLPQdmZQ5loJCFwGh7H40y/dZqUf87CNoxsgoRKWC2CwtLrNMSU1Z KGBZrH2YBBMXDN6du22FIRpx9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETLl8eM u020VsllHnNJ7530npKIMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB06H/sOkfpqvLyNnE5Chux/qG3TKSDovVGmgZVSUHVdbO5AVvnaaPb THFke0D2er1mQADUDMm5mrz4l5OX23Jyj+EzUYFu2A9STgNveN/PgVQWPURxTbtl xG27PTUmJfqA8tml/ddlkNr1rZW8HVhCEx3Ra13KPrfJjJxMLoOhm7qX7uCFOLiQ 55T9wSz72YBn5tDsuLn4dNgwabldB0bK2EKTOnEoCn+Cx4DSzyiuah+lflO1bqRh J/zucoRFzUJxyow5xel9j2ssfubK9q61i73Z1cnC6u/TR1sj5ReERwuhI2chPxEw Kjb/tvC/+mVea1wHoou8RAjFEV77+kel -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:18 2025 by rpki-client