$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: pzuDkE/PJun+Fqw1aK5q9jH9YpINtyaNWwKeClA2DT8= Subject key identifier: C7:EB:CD:EC:18:F7:2A:06:26:0E:7B:26:FE:F0:CB:8B:39:E1:8E:FA Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 0811 Signing time: Tue 04 Nov 2025 21:02:18 +0000 Manifest this update: Tue 04 Nov 2025 21:02:17 +0000 Manifest next update: Tue 11 Nov 2025 21:02:17 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: 5LdbEodzHhqcS6Q7Pe1PKm8f8fHC2KlK39mgbD8sajA=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: Nov 4 21:02:17 2025 GMT Not After : Nov 11 21:02:17 2025 GMT Subject: CN=690a69d9-f09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:8e:0d:af:ef:47:93:6a:1a:c6:ce:37:c4: 90:b6:cf:fa:26:5b:0f:df:8d:85:7b:09:ad:a8:a7: a5:93:83:b3:1d:b4:32:6d:0f:9b:45:6c:d9:6f:03: 83:0a:b8:dc:1e:bd:df:23:33:ba:ac:27:8b:7c:0b: a5:61:00:eb:d6:d8:36:44:98:18:2f:12:93:fa:3d: a9:82:5a:5b:28:04:05:7b:a2:6a:9b:3a:72:c6:f4: ce:d0:13:0e:9e:f8:fc:db:01:a4:d9:e5:05:f2:96: 0e:2f:21:d8:7e:ac:dc:bb:3f:a1:80:91:f2:bd:85: 0d:db:ad:03:65:ac:c5:da:d6:67:c9:1f:8a:9f:3e: c4:44:7e:d2:f2:28:03:f6:f1:6c:c5:de:e8:4a:8a: 10:be:70:4a:81:3f:c1:a3:08:b2:ab:1b:e7:3d:2b: 54:8d:c0:6b:40:25:30:60:35:0f:61:8a:a0:18:df: 6e:a5:2f:a2:c5:a4:45:03:3e:e6:02:41:a9:c6:f6: 8c:d1:f6:ad:04:59:36:22:00:f9:7c:83:18:ff:4e: 98:09:c3:cf:5e:6e:aa:53:c6:b2:00:53:4e:25:cd: 93:3f:0c:35:d4:2b:1f:b9:fb:5b:a3:d1:81:a8:16: f5:98:bf:95:e7:44:27:88:80:e2:4a:9d:13:30:63: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EB:CD:EC:18:F7:2A:06:26:0E:7B:26:FE:F0:CB:8B:39:E1:8E:FA X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c8:61:aa:56:16:7e:39:b5:67:3f:4d:dd:2f:07:98:19:f2: b3:25:c5:ca:21:be:5a:c4:c7:01:aa:09:54:6e:12:a0:a4:4f: 3d:e2:fa:91:a3:b0:fb:c4:8e:c0:e9:45:f1:bd:ed:16:bf:a0: e5:cf:3a:39:fd:a6:e8:7c:df:15:21:3f:8b:5f:dc:e2:9a:f8: 15:dc:e2:7a:f6:89:9e:5f:f6:77:b7:d8:47:73:10:d9:04:1a: f8:4d:37:ce:33:bc:50:09:98:0f:bd:af:a6:b1:e9:e6:2f:df: df:d5:a2:45:d9:aa:0f:3c:43:6a:54:70:fe:7f:20:45:7c:1e: 22:ef:06:0d:47:e4:b4:8b:22:11:21:ef:ee:05:21:34:20:c3: b5:ef:ce:3a:1d:53:26:95:ba:11:da:85:57:e4:e9:23:d9:3d: 2e:c4:36:42:e1:74:3f:b8:7a:63:81:64:94:83:43:b8:7c:dd: 8d:f9:59:2a:c8:6e:87:70:73:06:5a:32:d5:b6:a4:a6:fd:7f: 83:1c:3f:81:98:76:23:ea:84:ec:95:4c:2d:db:27:ad:b1:68: ca:c7:24:a2:07:7b:11:35:72:24:89:d2:2d:7f:ec:20:9c:72: 15:9f:ef:e6:31:96:19:f1:c8:bf:08:0d:1e:83:79:7d:2f:23: 8e:5d:58:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUxMTA0MjEwMjE3WhcNMjUxMTExMjEwMjE3WjAYMRYwFAYD VQQDEw02OTBhNjlkOS1mMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhWODa/vR5NqGsbON8SQts/6JlsP342FewmtqKelk4OzHbQybQ+bRWzZbwOD CrjcHr3fIzO6rCeLfAulYQDr1tg2RJgYLxKT+j2pglpbKAQFe6JqmzpyxvTO0BMO nvj82wGk2eUF8pYOLyHYfqzcuz+hgJHyvYUN260DZazF2tZnyR+Knz7ERH7S8igD 9vFsxd7oSooQvnBKgT/BowiyqxvnPStUjcBrQCUwYDUPYYqgGN9upS+ixaRFAz7m AkGpxvaM0fatBFk2IgD5fIMY/06YCcPPXm6qU8ayAFNOJc2TPww11Csfuftbo9GB qBb1mL+V50QniIDiSp0TMGPHHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfrzewY 9yoGJg57Jv7wy4s54Y76MB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFyGGqVhZ+ObVnP03dLweYGfKzJcXKIb5axMcBqglUbhKgpE894vqR o7D7xI7A6UXxve0Wv6Dlzzo5/abofN8VIT+LX9zimvgV3OJ69omeX/Z3t9hHcxDZ BBr4TTfOM7xQCZgPva+msenmL9/f1aJF2aoPPENqVHD+fyBFfB4i7wYNR+S0iyIR Ie/uBSE0IMO17846HVMmlboR2oVX5Okj2T0uxDZC4XQ/uHpjgWSUg0O4fN2N+Vkq yG6HcHMGWjLVtqSm/X+DHD+BmHYj6oTslUwt2yetsWjKxySiB3sRNXIkidItf+wg nHIVn+/mMZYZ8ci/CA0eg3l9LyOOXVhs -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:20 2025 by rpki-client