$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: fsZ1Bgu3PyDOthHD+YmofcjH0NEaLeq1u8TOCLghbd0= Subject key identifier: 35:C8:20:48:5B:39:1D:CA:93:AD:B7:82:87:6D:90:99:33:96:C4:00 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: 50 Signing time: Wed 05 Nov 2025 07:28:36 +0000 Manifest this update: Wed 05 Nov 2025 07:28:35 +0000 Manifest next update: Wed 12 Nov 2025 07:28:35 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: qKPSsxfmPiOuasSdaC8qyquVaPl/DtCQhNfT+c3Kkpg=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: NGudT5ffYxQaLDuPITb3DSyOtSWSbubIZoe2i4vUMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Nov 5 07:28:35 2025 GMT Not After : Nov 12 07:28:35 2025 GMT Subject: CN=690afca3-8cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:62:0d:6b:f1:2f:e5:8f:65:db:4e:ee:57: 6b:c7:91:13:8f:a5:8a:d8:d0:c6:1c:09:e4:37:24: e9:56:0d:2e:0a:8c:70:ca:02:7a:85:c4:df:16:71: 2f:74:61:1e:46:bf:33:7d:1b:df:c5:20:c7:98:ab: cc:5a:34:c9:85:98:79:1c:72:1e:b7:73:19:19:34: 2b:33:dc:84:b3:29:56:33:06:5a:03:c8:98:8c:76: ed:eb:d8:10:af:7d:e9:ca:33:6b:f0:96:3e:c0:88: 3c:c8:0e:3c:26:d4:35:12:8d:b8:aa:de:b8:b9:2c: 7d:0d:86:fd:c6:c2:b3:8f:a9:17:25:e1:5e:eb:66: 02:d1:ce:c0:20:52:17:e0:5b:69:fb:70:98:0d:0f: 51:69:a8:54:4c:79:be:68:d9:33:61:26:ca:1e:4e: 63:8b:ef:39:11:f0:81:55:95:bd:bf:33:7c:09:66: 8a:f8:36:2e:5b:d4:b5:f0:0f:6a:3a:7b:72:32:c0: f8:df:49:56:6a:57:d5:2d:56:95:ee:87:b0:21:95: b2:ea:92:dc:0f:5b:54:1d:a9:e7:17:3a:01:3e:9f: 3b:7a:31:91:cb:ed:a4:21:de:14:78:8d:a3:af:db: bd:34:d9:4d:de:ef:32:1c:b8:92:24:4c:33:a9:00: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:20:48:5B:39:1D:CA:93:AD:B7:82:87:6D:90:99:33:96:C4:00 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d8:ca:9f:9d:9d:92:72:49:ba:45:ba:68:ec:ad:07:f7:61: e8:25:a2:55:8f:93:62:62:aa:cc:4d:9b:65:55:fc:37:35:f4: c4:07:15:e2:54:f7:3f:3c:2c:49:f4:6d:34:2f:b7:9b:ef:e5: 6f:2f:ba:4b:73:91:8f:31:8d:43:51:28:0e:45:15:b1:e2:2e: 42:30:80:cb:fa:70:b7:8f:d2:12:c9:bb:45:45:c3:57:10:99: e8:cf:90:e7:30:be:fc:e7:fc:b6:94:5c:55:fa:ff:66:38:c2: ca:81:4f:ae:09:8f:0b:b7:38:d1:44:43:ea:7a:7e:a1:f9:bd: ee:7b:24:28:80:9b:53:f3:b1:c9:4b:87:4c:cc:76:3e:63:a7: d1:c4:29:7f:dc:5a:55:93:f3:c2:7d:ee:97:7a:15:1f:64:79: 98:42:cc:c3:be:51:d2:1b:19:c5:f8:96:86:4d:1b:97:4e:4d: 04:92:51:c3:dd:be:b3:d1:8a:0d:f6:b1:65:d7:e3:eb:69:6b: cf:35:8f:d9:32:23:64:45:01:c6:44:0d:70:10:fa:a5:38:b8: e4:b1:c1:9d:62:3f:55:85:b0:92:b9:21:78:06:ff:f5:80:43: 05:90:46:de:cf:f2:06:6d:c8:46:4a:be:d0:3b:74:75:a3:c1: 97:98:3f:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkZDQjExMC8GA1UEBRMoMjIyNDI5NDQxNkI4NDY1NzA2NTU0QjUyQ0JDNTZGNDQ5 QkM0NkM4OTAeFw0yNTExMDUwNzI4MzVaFw0yNTExMTIwNzI4MzVaMBgxFjAUBgNV BAMTDTY5MGFmY2EzLThjYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRD2INa/Ev5Y9l207uV2vHkROPpYrY0MYcCeQ3JOlWDS4KjHDKAnqFxN8WcS90 YR5GvzN9G9/FIMeYq8xaNMmFmHkcch63cxkZNCsz3ISzKVYzBloDyJiMdu3r2BCv fenKM2vwlj7AiDzIDjwm1DUSjbiq3ri5LH0Nhv3GwrOPqRcl4V7rZgLRzsAgUhfg W2n7cJgND1FpqFRMeb5o2TNhJsoeTmOL7zkR8IFVlb2/M3wJZor4Ni5b1LXwD2o6 e3IywPjfSVZqV9UtVpXuh7AhlbLqktwPW1QdqecXOgE+nzt6MZHL7aQh3hR4jaOv 27002U3e7zIcuJIkTDOpAAoJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNcggSFs5 HcqTrbeCh22QmTOWxAAwHwYDVR0jBBgwFoAUIiQpRBa4RlcGVUtSy8VvRJvEbIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0VEMEYxMUY0NDIw NTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWlRcFJCYTRSbGNHVlV0U3k4VnZSSnZFYklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RkNCL0VEMEYxMUY0NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0Umxj R1ZVdFN5OFZ2Ukp2RWJJay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbYyp+dnZJySbpFumjsrQf3YeglolWPk2JiqsxNm2VV/Dc19MQHFeJU 9z88LEn0bTQvt5vv5W8vuktzkY8xjUNRKA5FFbHiLkIwgMv6cLeP0hLJu0VFw1cQ mejPkOcwvvzn/LaUXFX6/2Y4wsqBT64Jjwu3ONFEQ+p6fqH5ve57JCiAm1PzsclL h0zMdj5jp9HEKX/cWlWT88J97pd6FR9keZhCzMO+UdIbGcX4loZNG5dOTQSSUcPd vrPRig32sWXX4+tpa881j9kyI2RFAcZEDXAQ+qU4uOSxwZ1iP1WFsJK5IXgG//WA QwWQRt7P8gZtyEZKvtA7dHWjwZeYPyo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:58 2025 by rpki-client