$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: zNW1q0/fAtWJJaZlmtSplBWfTV5rPkMFEt5xLB9yArU= Subject key identifier: 38:3E:21:4E:F9:A1:4D:FB:51:39:EE:80:F9:81:E1:27:6C:43:FC:A6 Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 04B3 Signing time: Wed 05 Nov 2025 00:00:53 +0000 Manifest this update: Wed 05 Nov 2025 00:00:53 +0000 Manifest next update: Wed 12 Nov 2025 00:00:53 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: Xg5DEFhEwly+f7YyJmE8AdJkQDmPMmtRRzfNd3vgaIY=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Nov 5 00:00:53 2025 GMT Not After : Nov 12 00:00:53 2025 GMT Subject: CN=690a93b5-081c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:f9:ce:23:67:2e:0f:c4:d2:6a:e1:8b:a5: fb:c7:aa:8a:62:11:56:fb:8f:5d:79:bc:2c:9d:b1: 39:b0:2d:1e:98:d5:c4:e4:c8:10:3a:21:32:e8:02: 57:ff:56:27:a7:75:29:a2:2d:ed:bf:0d:b5:00:64: e3:67:84:f1:ca:be:30:01:99:1b:68:76:d2:3b:2d: a1:ed:d4:d8:ed:45:38:aa:8f:68:09:80:59:34:dd: 79:86:45:75:c6:4e:d6:58:57:c9:46:5e:b9:6e:b3: 9a:74:a0:14:1e:fe:db:23:a7:cf:d0:fe:b8:e1:a8: 52:27:a8:b8:21:ee:9c:98:ac:8a:34:6c:01:3f:f7: 40:4f:89:31:8c:1c:5d:e3:b4:7e:05:39:11:2c:51: 17:0a:1d:48:b9:2d:f6:0b:89:03:e9:2f:3b:1d:d2: 1b:a9:ac:14:cb:e9:fd:f2:ea:27:22:67:2c:1f:dc: c1:93:5d:f7:95:7c:fc:23:5e:8f:1b:13:fa:9f:59: d1:ed:12:a1:6c:20:b2:cc:07:1a:74:79:0c:ec:b6: 4f:68:58:a5:c5:48:a7:2a:56:e2:dc:25:48:d3:73: 46:63:63:5a:27:3d:17:04:64:b1:2a:c4:a2:c5:1c: 7c:90:d6:2f:47:f8:09:d4:f7:b8:c6:b0:77:a2:24: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3E:21:4E:F9:A1:4D:FB:51:39:EE:80:F9:81:E1:27:6C:43:FC:A6 X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:93:00:79:29:f3:d9:e7:47:63:7f:58:fc:c0:16:bc:4b:41: 09:f4:16:29:9e:da:cd:23:33:d8:fb:cc:3b:7e:30:5a:f6:0c: c7:8b:6a:bc:d5:c5:7f:fc:df:a2:62:5c:f0:6a:f8:78:20:5e: 2e:79:5f:86:bc:be:6c:9b:06:03:1b:68:ee:81:db:f8:6a:26: ad:7b:5e:ea:04:ff:b7:00:a5:38:c1:b8:db:c3:e3:aa:c2:45: dd:fc:40:cb:46:65:af:3e:c1:da:8f:bb:4e:13:f5:c1:7f:67: b1:68:57:da:47:3a:e2:90:58:c0:58:d6:af:b9:7a:d5:56:7e: c0:09:e1:6b:52:32:32:16:c0:36:69:db:39:79:9c:4b:7a:15: c5:67:42:70:69:c6:9e:cb:26:c1:a4:49:f2:f6:eb:74:0b:f4: 26:91:80:34:07:6e:55:54:e1:37:ac:3b:07:01:1b:f1:41:0e: d3:0d:bb:fd:96:59:e7:5c:39:9f:88:78:ec:d6:4b:d8:bd:18: 69:81:e4:fd:ea:4a:dd:ef:51:ed:69:0f:56:c6:de:2a:d4:25: 62:21:2c:f4:55:e7:7d:8b:78:36:3f:6e:12:b2:cc:75:44:09: e8:80:6d:e0:b3:35:fc:b1:86:44:fd:ac:0b:cc:8c:4d:dc:bb: e1:8c:31:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUxMTA1MDAwMDUzWhcNMjUxMTEyMDAwMDUzWjAYMRYwFAYD VQQDEw02OTBhOTNiNS0wODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvD5ziNnLg/E0mrhi6X7x6qKYhFW+49debwsnbE5sC0emNXE5MgQOiEy6AJX /1Ynp3Upoi3tvw21AGTjZ4Txyr4wAZkbaHbSOy2h7dTY7UU4qo9oCYBZNN15hkV1 xk7WWFfJRl65brOadKAUHv7bI6fP0P644ahSJ6i4Ie6cmKyKNGwBP/dAT4kxjBxd 47R+BTkRLFEXCh1IuS32C4kD6S87HdIbqawUy+n98uonImcsH9zBk133lXz8I16P GxP6n1nR7RKhbCCyzAcadHkM7LZPaFilxUinKlbi3CVI03NGY2NaJz0XBGSxKsSi xRx8kNYvR/gJ1Pe4xrB3oiQRjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDg+IU75 oU37UTnugPmB4SdsQ/ymMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBikwB5KfPZ50djf1j8wBa8S0EJ9BYpntrNIzPY+8w7fjBa9gzHi2q8 1cV//N+iYlzwavh4IF4ueV+GvL5smwYDG2jugdv4aiate17qBP+3AKU4wbjbw+Oq wkXd/EDLRmWvPsHaj7tOE/XBf2exaFfaRzrikFjAWNavuXrVVn7ACeFrUjIyFsA2 ads5eZxLehXFZ0JwacaeyybBpEny9ut0C/QmkYA0B25VVOE3rDsHARvxQQ7TDbv9 llnnXDmfiHjs1kvYvRhpgeT96krd71HtaQ9Wxt4q1CViISz0Ved9i3g2P24Sssx1 RAnogG3gszX8sYZE/awLzIxN3LvhjDGk -----END CERTIFICATE-----Generated at Wed Nov 5 17:06:49 2025 by rpki-client