$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json) Hash identifier: 6e2u6mpFz1sYyDooBrsmUbT607yWCWGZJnIYgoeFkz0= Subject key identifier: 9E:89:11:1A:01:5D:35:D5:36:07:0F:81:2F:3E:22:A3:35:A7:96:99 Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft Manifest number: 07C9 Signing time: Sun 02 Nov 2025 21:13:35 +0000 Manifest this update: Sun 02 Nov 2025 21:13:34 +0000 Manifest next update: Sun 09 Nov 2025 21:13:34 +0000 Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: 4l6PM3hjCDjTpLF1iQaX3olIf6kXqeer3iox5MWi3Ng=) 2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: +QmSQmsTCCd4yyTjh5mf70wyqAWPCaGTrX6lQ4meIO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Validity Not Before: Nov 2 21:13:34 2025 GMT Not After : Nov 9 21:13:34 2025 GMT Subject: CN=6907c97e-5824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:cb:14:90:77:1c:e4:1b:26:53:f0:1a:7e: 99:39:fb:f9:65:48:f9:bb:14:81:15:67:11:47:de: c3:e5:d1:95:85:e6:19:ef:ed:bc:19:cd:2b:cc:fb: 68:24:68:a8:93:91:9e:8b:22:82:db:b7:03:62:53: 60:50:5a:6c:22:0f:f3:6d:6c:1d:df:25:a1:24:89: 22:fb:7b:ad:69:a0:9d:10:aa:6e:c5:0a:2e:37:66: 65:7a:ef:27:1f:07:b9:58:2e:44:7d:50:8e:2f:bc: 65:17:e5:1f:58:e4:64:57:2c:73:32:0b:59:1c:15: 52:bb:23:f0:ef:5e:35:ab:ab:75:de:08:46:16:de: cf:f4:8e:5f:1b:aa:94:dd:0d:bf:1b:5a:3c:c8:fa: ee:4d:2f:ab:1b:dd:22:c6:f1:5a:85:03:32:00:a5: c4:f6:bb:10:a6:13:00:70:25:42:5e:50:e4:5c:b3: 82:eb:f9:f6:6a:8a:54:02:7d:9b:f2:3d:03:61:e9: 52:7c:b1:c7:42:d0:d6:4b:f7:1e:f2:08:f1:af:c9: ea:04:38:b4:fd:1a:89:da:52:4e:53:e4:63:67:79: a5:6f:8f:59:92:4c:50:04:ce:4a:f9:29:95:58:dd: 59:39:fb:77:3a:ad:02:03:7c:86:5b:a9:d9:10:4d: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:89:11:1A:01:5D:35:D5:36:07:0F:81:2F:3E:22:A3:35:A7:96:99 X509v3 Authority Key Identifier: keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8f:f8:e6:68:dc:6d:58:d2:1c:95:58:a1:b3:eb:c5:9c:96: 08:52:4c:57:57:20:99:37:21:71:f1:96:df:17:c4:8e:09:93: 73:2f:5c:e8:83:88:7b:ef:c4:7d:b9:d0:05:7a:73:9b:77:e3: ea:63:a9:3e:53:38:a3:81:3a:15:b5:50:b7:93:ee:e7:f5:54: 8a:96:e1:05:9a:4c:af:d2:f5:05:db:7b:69:c8:18:ab:e3:51: d4:dd:8f:93:a7:81:c1:4e:62:dc:96:b0:a6:f5:ee:82:ff:1c: 25:48:8d:23:8f:36:db:c5:e2:69:f1:55:c0:fb:10:2c:05:a0: 57:c1:b4:40:40:e7:5d:b3:91:74:0f:46:89:2d:99:8f:63:24: 55:8a:15:97:21:c3:84:b9:4e:44:ce:1f:74:36:63:33:31:4f: b4:de:35:bd:92:18:fe:14:93:65:00:0b:ac:f9:cc:d1:c5:35: 70:69:69:2f:5d:ff:29:98:e3:f6:e0:76:da:be:44:80:88:f0: 47:05:06:00:6b:d2:39:d1:fc:b8:25:b6:e9:c5:bb:8c:d9:64: b1:58:bc:82:62:cf:a1:5c:2c:f1:ef:18:5b:c9:60:1e:08:b7: 94:54:69:7b:60:ac:55:5c:aa:cb:58:67:12:5c:a5:17:83:68: 49:13:f9:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy MUM0OTcwQ0IwHhcNMjUxMTAyMjExMzM0WhcNMjUxMTA5MjExMzM0WjAYMRYwFAYD VQQDEw02OTA3Yzk3ZS01ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqbLFJB3HOQbJlPwGn6ZOfv5ZUj5uxSBFWcRR97D5dGVheYZ7+28Gc0rzPto JGiok5GeiyKC27cDYlNgUFpsIg/zbWwd3yWhJIki+3utaaCdEKpuxQouN2Zleu8n Hwe5WC5EfVCOL7xlF+UfWORkVyxzMgtZHBVSuyPw7141q6t13ghGFt7P9I5fG6qU 3Q2/G1o8yPruTS+rG90ixvFahQMyAKXE9rsQphMAcCVCXlDkXLOC6/n2aopUAn2b 8j0DYelSfLHHQtDWS/ce8gjxr8nqBDi0/RqJ2lJOU+RjZ3mlb49ZkkxQBM5K+SmV WN1ZOft3Oq0CA3yGW6nZEE30TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6JERoB XTXVNgcPgS8+IqM1p5aZMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEj/jmaNxtWNIclVihs+vFnJYIUkxXVyCZNyFx8ZbfF8SOCZNzL1zo g4h778R9udAFenObd+PqY6k+UzijgToVtVC3k+7n9VSKluEFmkyv0vUF23tpyBir 41HU3Y+Tp4HBTmLclrCm9e6C/xwlSI0jjzbbxeJp8VXA+xAsBaBXwbRAQOdds5F0 D0aJLZmPYyRVihWXIcOEuU5Ezh90NmMzMU+03jW9khj+FJNlAAus+czRxTVwaWkv Xf8pmOP24HbavkSAiPBHBQYAa9I50fy4JbbpxbuM2WSxWLyCYs+hXCzx7xhbyWAe CLeUVGl7YKxVXKrLWGcSXKUXg2hJE/ld -----END CERTIFICATE-----Generated at Tue Nov 4 08:17:48 2025 by rpki-client