$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json) Hash identifier: 8Zzv//aQZK7G06Hhjkk+BaNCOebg4Nxiws94HrrbH28= Subject key identifier: 34:2F:7D:1A:98:23:E6:4B:0F:21:17:10:8E:63:1C:1E:14:9C:D9:D5 Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft Manifest number: 0228 Signing time: Wed 05 Nov 2025 02:10:07 +0000 Manifest this update: Wed 05 Nov 2025 02:10:07 +0000 Manifest next update: Wed 12 Nov 2025 02:10:07 +0000 Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: reWWJRQHNBWauhjsnIWM0Clk4q2unB5YGaiLoxBl1+0=) 2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: AIFISpe4UUSb102JMnJULUVmkKzdqcMZuRuO6tOo8G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Validity Not Before: Nov 5 02:10:07 2025 GMT Not After : Nov 12 02:10:07 2025 GMT Subject: CN=690ab1ff-73fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:ab:0f:19:77:40:b2:7b:b5:bd:68:ae:11: 66:37:92:b1:a1:80:c1:97:c3:dd:fb:84:8e:b4:8d: f3:5b:d7:df:65:66:6e:df:79:d8:fb:72:2a:bd:b8: 43:64:fe:23:16:0a:4d:77:5c:a7:2f:37:50:77:b0: 8c:0a:d8:dc:d3:42:ef:47:66:d9:65:cc:5a:5d:b3: 1d:8a:dc:6b:a1:cf:be:71:de:5f:f6:0b:b0:1d:33: 17:28:65:b9:f9:bc:54:26:1a:a9:35:30:08:2c:88: c3:d8:19:8c:b8:f5:b7:1d:d8:b5:c9:8a:a7:3c:9a: 07:58:d8:9e:3f:23:bd:10:89:4f:c6:9e:a0:d7:30: 76:b6:65:76:ce:98:4b:e7:ae:ae:ed:1e:c1:48:42: 9a:e1:b0:cd:a3:88:90:19:36:1c:ad:01:47:84:2f: 16:b6:db:1d:ee:9a:b6:29:98:08:ec:4a:26:81:d6: c6:05:19:58:8e:52:89:4f:95:ff:04:bf:a7:8c:15: 65:13:92:e1:6f:d3:22:cc:d2:46:cd:9b:0c:be:47: a2:de:a0:11:85:f3:f2:70:88:d5:5a:77:83:91:c9: 4f:6a:f8:2f:b7:90:a4:dd:3a:7f:37:d8:51:64:4b: 25:3b:07:ea:5f:64:b7:b9:9e:85:65:64:66:b6:bb: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2F:7D:1A:98:23:E6:4B:0F:21:17:10:8E:63:1C:1E:14:9C:D9:D5 X509v3 Authority Key Identifier: keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:21:26:ed:80:b8:5d:f1:84:f4:cd:5d:93:00:c1:c5:78:4d: ba:df:df:e6:19:db:62:85:37:ec:c5:4e:31:95:30:f0:4b:67: 09:8f:75:9b:7f:71:04:a5:5e:00:71:42:98:b9:d5:76:08:9c: 0c:13:c7:e9:c3:28:b6:32:0f:2b:44:df:8b:82:60:f4:cc:20: 93:29:32:cc:ca:be:eb:d6:8c:d0:55:15:55:c8:e5:27:36:9b: d7:9e:97:ce:6f:03:4d:0a:d2:5b:99:5b:1f:1a:62:a0:8c:34: 62:42:0a:14:7f:5b:29:4e:84:f7:93:e7:fa:97:83:62:50:a3: c7:60:d4:db:83:22:25:cf:c5:05:86:50:2d:46:7e:c6:e8:c7: e7:86:65:2c:bb:48:24:d7:d7:3c:e1:eb:13:6d:08:7d:af:8d: d1:2c:ba:3f:ed:5a:2f:f5:c9:93:46:29:f0:d1:29:e3:70:d8: f2:ba:6c:53:af:9c:ea:b7:15:33:a5:bb:42:5a:bd:8f:ab:2c: ca:62:75:ee:ea:b0:6e:3d:66:8b:c3:76:32:56:61:af:a2:59: fa:5a:94:b0:79:a8:e4:b1:8c:70:f6:9e:a5:8f:07:1b:11:88: d7:89:59:7f:07:ea:70:20:7f:46:03:6d:b3:62:97:ff:96:06: fd:99:e0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0 MzNBRUM5REUwHhcNMjUxMTA1MDIxMDA3WhcNMjUxMTEyMDIxMDA3WjAYMRYwFAYD VQQDEw02OTBhYjFmZi03M2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BurDxl3QLJ7tb1orhFmN5KxoYDBl8Pd+4SOtI3zW9ffZWZu33nY+3IqvbhD ZP4jFgpNd1ynLzdQd7CMCtjc00LvR2bZZcxaXbMditxroc++cd5f9guwHTMXKGW5 +bxUJhqpNTAILIjD2BmMuPW3Hdi1yYqnPJoHWNiePyO9EIlPxp6g1zB2tmV2zphL 566u7R7BSEKa4bDNo4iQGTYcrQFHhC8Wttsd7pq2KZgI7EomgdbGBRlYjlKJT5X/ BL+njBVlE5Lhb9MizNJGzZsMvkei3qARhfPycIjVWneDkclPavgvt5Ck3Tp/N9hR ZEslOwfqX2S3uZ6FZWRmtrvzMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQvfRqY I+ZLDyEXEI5jHB4UnNnVMB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5 ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUREMy9EMDY2MzMyODcwNUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3 LWV2dkpRaWhWQ1pET3V5ZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRISbtgLhd8YT0zV2TAMHFeE2639/mGdtihTfsxU4xlTDwS2cJj3Wb f3EEpV4AcUKYudV2CJwME8fpwyi2Mg8rRN+LgmD0zCCTKTLMyr7r1ozQVRVVyOUn NpvXnpfObwNNCtJbmVsfGmKgjDRiQgoUf1spToT3k+f6l4NiUKPHYNTbgyIlz8UF hlAtRn7G6MfnhmUsu0gk19c84esTbQh9r43RLLo/7Vov9cmTRinw0SnjcNjyumxT r5zqtxUzpbtCWr2PqyzKYnXu6rBuPWaLw3YyVmGvoln6WpSweajksYxw9p6ljwcb EYjXiVl/B+pwIH9GA22zYpf/lgb9meAP -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:44 2025 by rpki-client