$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: SykYitzCoV6yCX85wGYkAfeaWxL3cIQJlTR3JxUDWiE= Subject key identifier: 3B:CE:76:FF:39:52:8C:70:70:66:1A:64:48:82:93:1E:B2:75:C3:C3 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 019C Signing time: Mon 03 Nov 2025 03:21:01 +0000 Manifest this update: Mon 03 Nov 2025 03:21:00 +0000 Manifest next update: Mon 10 Nov 2025 03:21:00 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: w8Jg9WckMAM10mewNQLQucwKujGAZYh0cJVMU3fHzIc=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: wUxQPb5MXG1WoNfvu2qlWFFygupmyl9Dg9T+dYAheO4=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 7+kogSfoA5KHnVdL5HUL3JnEUIAqvGpgOMdM8vTSlLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Nov 3 03:21:00 2025 GMT Not After : Nov 10 03:21:00 2025 GMT Subject: CN=69081f9c-d9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:64:fd:cd:4b:58:ae:fb:3b:d2:0e:11:f1: 0e:83:72:2a:c2:c4:33:a9:a3:0e:9d:79:bf:42:c9: 80:6e:bb:4f:8f:fd:cd:b5:08:51:ce:74:8a:1d:b4: e9:d6:58:1a:f4:2b:bd:d2:3e:69:21:e9:d4:09:db: 67:74:5b:86:62:3a:b0:a2:2b:15:11:3b:36:23:b1: 78:a5:f2:78:08:a5:de:14:81:cd:b7:be:e8:7a:b1: f0:51:d5:05:96:44:99:62:07:6d:5f:89:6a:6a:8f: ab:c1:53:17:83:4d:77:83:e4:55:98:6f:a3:00:36: 81:17:bd:ac:57:38:2f:1e:92:f7:4a:79:2a:4d:69: 21:84:c0:d7:7d:5b:b4:a9:50:60:53:4a:7c:4d:8b: 21:1d:8f:40:12:35:7c:ae:77:ca:a8:3a:b4:c3:cd: 51:0e:60:02:90:c9:48:8f:cf:c7:19:f0:00:46:46: e4:fa:f1:d1:db:70:96:90:20:8c:5b:74:bd:e3:e2: ef:5a:79:c9:5b:45:8f:2f:df:1f:bd:aa:0f:8d:f0: a9:0c:c5:90:3d:76:33:60:7a:59:f5:d6:6b:36:e3: 2c:ca:f5:5d:4d:98:f4:28:c3:ae:04:e9:8b:cd:e3: a3:e3:66:20:92:cf:57:83:5f:9b:28:1f:d8:e0:5d: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:76:FF:39:52:8C:70:70:66:1A:64:48:82:93:1E:B2:75:C3:C3 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:fc:52:da:b0:b9:a9:17:20:82:fc:ee:2c:c6:f7:01:b9:20: a6:74:d1:03:e4:f3:7e:f8:d4:ce:98:1c:27:56:7e:25:b4:5e: e5:e1:c4:e5:e7:99:08:c4:ad:09:24:e2:f5:5a:6b:a3:db:32: 48:c4:a1:69:a6:9f:fa:48:01:3d:14:44:8c:06:b6:2a:fd:b9: 1c:d0:2d:2e:95:65:6d:ae:75:0e:0a:aa:10:59:d4:bd:a0:71: fa:3d:68:85:3a:ad:7d:0b:a6:a2:62:3f:3c:61:d2:ee:77:56: b6:50:81:8c:ab:2f:8f:f2:91:fc:c3:89:25:71:b4:53:50:dd: 8b:1e:f5:67:94:d5:59:a7:58:46:15:38:8c:83:5b:62:99:f4: b2:1b:4c:38:6e:04:19:f0:a3:5f:30:6b:1f:d6:5a:c7:07:79: 72:31:c0:af:63:04:c6:9e:34:e2:ba:0e:d2:ed:05:6a:91:89: ec:02:5b:55:41:c6:fc:cb:43:a9:36:b5:55:1d:dd:7f:9f:9e: 38:db:99:19:70:08:5d:01:5c:1f:10:b0:20:33:8f:7f:cf:d9: 8b:29:bc:7c:51:65:cd:bc:e8:b5:de:60:0b:16:d9:9d:3c:45: 34:8c:de:8b:da:ab:2b:6f:f6:aa:42:fb:d4:6b:59:7e:e6:50: 70:33:12:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjUxMTAzMDMyMTAwWhcNMjUxMTEwMDMyMTAwWjAYMRYwFAYD VQQDEw02OTA4MWY5Yy1kOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu1k/c1LWK77O9IOEfEOg3IqwsQzqaMOnXm/QsmAbrtPj/3NtQhRznSKHbTp 1lga9Cu90j5pIenUCdtndFuGYjqwoisVETs2I7F4pfJ4CKXeFIHNt77oerHwUdUF lkSZYgdtX4lqao+rwVMXg013g+RVmG+jADaBF72sVzgvHpL3SnkqTWkhhMDXfVu0 qVBgU0p8TYshHY9AEjV8rnfKqDq0w81RDmACkMlIj8/HGfAARkbk+vHR23CWkCCM W3S94+LvWnnJW0WPL98fvaoPjfCpDMWQPXYzYHpZ9dZrNuMsyvVdTZj0KMOuBOmL zeOj42Ygks9Xg1+bKB/Y4F3WoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvOdv85 UoxwcGYaZEiCkx6ydcPDMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA/FLasLmpFyCC/O4sxvcBuSCmdNED5PN++NTOmBwnVn4ltF7l4cTl 55kIxK0JJOL1Wmuj2zJIxKFppp/6SAE9FESMBrYq/bkc0C0ulWVtrnUOCqoQWdS9 oHH6PWiFOq19C6aiYj88YdLud1a2UIGMqy+P8pH8w4klcbRTUN2LHvVnlNVZp1hG FTiMg1timfSyG0w4bgQZ8KNfMGsf1lrHB3lyMcCvYwTGnjTiug7S7QVqkYnsAltV Qcb8y0OpNrVVHd1/n54425kZcAhdAVwfELAgM49/z9mLKbx8UWXNvOi13mALFtmd PEU0jN6L2qsrb/aqQvvUa1l+5lBwMxI3 -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:24 2025 by rpki-client