$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json) Hash identifier: pFDCsXFlopaphrcw7c7r7mUB4NuWNHkg08NCSbxYJE0= Subject key identifier: 4A:21:35:D2:95:C6:30:85:5B:94:F7:0A:43:72:3B:29:27:43:38:8F Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft Manifest number: 2C Signing time: Mon 03 Nov 2025 07:39:56 +0000 Manifest this update: Mon 03 Nov 2025 07:39:56 +0000 Manifest next update: Mon 10 Nov 2025 07:39:56 +0000 Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: qihD8KpDntQDGwb/S5blN6lKfbz8693M2nzmrfGz8Uk=) 2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: jTESa3U73YRI0+Qom5Rj/Y57jrY10Y9T/v9pDSvTy48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Validity Not Before: Nov 3 07:39:56 2025 GMT Not After : Nov 10 07:39:56 2025 GMT Subject: CN=69085c4c-cfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:de:76:d7:55:f9:18:85:8f:51:f4:3a:37:5a: 84:64:3d:4c:ba:f7:d4:96:31:bf:a4:f8:12:fa:37: 0b:fb:0b:f9:c1:65:5d:be:16:0b:c9:c2:49:57:f4: 6c:bc:62:b1:a1:93:1f:ac:66:83:79:da:d2:17:36: 01:11:45:49:fb:e8:aa:8e:84:85:b1:d4:c7:fa:a5: fd:d4:61:a6:78:5d:68:1d:74:d8:a5:49:44:b8:0c: 2f:75:e5:69:d4:bc:be:d2:2e:86:4a:1a:de:14:86: cc:0f:08:2d:04:8e:e6:63:42:f2:19:7f:11:45:0c: 7c:40:cd:0d:e4:a7:e6:9c:3f:53:3b:0d:41:8c:b6: 4a:7e:2c:3b:52:4d:b1:01:77:16:16:77:85:14:31: aa:30:02:f0:69:27:9e:ea:7b:40:97:e3:f6:06:b4: 84:f7:dc:9d:4c:80:78:da:f1:32:37:ea:cb:71:38: e2:4a:69:b0:eb:35:66:1a:5b:4e:e9:f9:d7:f0:12: 7c:c0:90:f3:37:d3:dc:fd:a2:81:b7:4e:45:23:41: 81:b4:cb:ee:99:07:37:be:09:1a:19:d5:1c:71:66: 00:38:1f:f5:8b:01:d6:e4:a3:b2:2e:63:8f:a9:12: df:ca:48:96:5f:62:b5:f4:49:0a:bd:9f:db:9c:38: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:35:D2:95:C6:30:85:5B:94:F7:0A:43:72:3B:29:27:43:38:8F X509v3 Authority Key Identifier: keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e0:f5:7f:74:fa:38:8f:12:1f:44:eb:1e:95:7a:ba:32:48: df:31:ac:f9:58:7f:21:ff:ac:9c:b0:7a:79:e1:69:9d:c2:5b: a8:2e:a9:21:13:a8:c9:19:4f:a8:29:27:71:17:a0:e3:04:47: c2:2b:21:20:b3:81:ee:2c:50:f1:e1:24:7b:f2:0f:15:16:e5: ea:94:22:1e:15:7f:33:71:e7:c7:89:4a:54:fe:4c:ce:b9:f3: 59:ce:b5:df:07:8f:a4:5d:4f:c9:8f:87:10:ee:8a:10:45:20: f1:6a:5b:74:d6:1a:74:2b:0c:04:bd:cb:f8:e6:05:5c:09:b7: fb:c8:d4:21:f2:71:97:66:b4:e9:53:8e:01:cc:81:3d:90:c7: 2e:b4:49:ca:5d:74:14:2c:53:34:fc:53:ca:84:ca:61:86:60: 4b:90:22:9b:86:2b:c6:37:23:db:92:d1:ac:ed:59:68:34:82: b6:d6:9c:2d:9e:9a:57:93:ea:e5:50:ac:5f:11:fa:06:f6:05: 99:2d:d2:41:62:91:1e:0f:1f:74:d2:df:83:f0:72:2b:2e:74: fb:97:d4:ac:53:62:23:e6:5b:47:ec:d9:fa:4d:94:9c:4a:1a: 51:af:1e:35:43:36:86:bd:0f:9c:82:29:be:2d:03:c2:3e:c8: 2b:33:7a:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTAxRTExMC8GA1UEBRMoMEJCQkE0MTI0QkE0QzdDOEE3RjlEMDk3RUVFQUE5ODMy RjA5Nzk2NzAeFw0yNTExMDMwNzM5NTZaFw0yNTExMTAwNzM5NTZaMBgxFjAUBgNV BAMTDTY5MDg1YzRjLWNmZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD13nbXVfkYhY9R9Do3WoRkPUy699SWMb+k+BL6Nwv7C/nBZV2+FgvJwklX9Gy8 YrGhkx+sZoN52tIXNgERRUn76KqOhIWx1Mf6pf3UYaZ4XWgddNilSUS4DC915WnU vL7SLoZKGt4UhswPCC0EjuZjQvIZfxFFDHxAzQ3kp+acP1M7DUGMtkp+LDtSTbEB dxYWd4UUMaowAvBpJ57qe0CX4/YGtIT33J1MgHja8TI36stxOOJKabDrNWYaW07p +dfwEnzAkPM309z9ooG3TkUjQYG0y+6ZBze+CRoZ1RxxZgA4H/WLAdbko7IuY4+p Et/KSJZfYrX0SQq9n9ucONDDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSiE10pXG MIVblPcKQ3I7KSdDOI8wHwYDVR0jBBgwFoAUC7ukEkukx8in+dCX7uqpgy8JeWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5MDFFL0U2RTg4MEQ4NzhE QTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzd1a0VrdWt4OGluLWRDWDd1cXBneThKZVdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 MDFFL0U2RTg4MEQ4NzhEQTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhp bi1kQ1g3dXFwZ3k4SmVXYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJng9X90+jiPEh9E6x6VeroySN8xrPlYfyH/rJywennhaZ3CW6guqSET qMkZT6gpJ3EXoOMER8IrISCzge4sUPHhJHvyDxUW5eqUIh4VfzNx58eJSlT+TM65 81nOtd8Hj6RdT8mPhxDuihBFIPFqW3TWGnQrDAS9y/jmBVwJt/vI1CHycZdmtOlT jgHMgT2Qxy60ScpddBQsUzT8U8qEymGGYEuQIpuGK8Y3I9uS0aztWWg0grbWnC2e mleT6uVQrF8R+gb2BZkt0kFikR4PH3TS34PwcisudPuX1KxTYiPmW0fs2fpNlJxK GlGvHjVDNoa9D5yCKb4tA8I+yCszemU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:52 2025 by rpki-client