$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: xjC3ZHDzQIhjAsS15D0b7UXoZKjpYQMV6EVQ00y5KyA= Subject key identifier: 8B:A4:EB:C0:03:77:C0:71:3F:F4:9C:02:F6:1D:5E:92:DB:12:3E:86 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0DC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0DA4 Signing time: Tue 04 Nov 2025 18:00:46 +0000 Manifest this update: Tue 04 Nov 2025 18:00:46 +0000 Manifest next update: Tue 11 Nov 2025 18:00:46 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: sCCyZ8hXFVBxo1ZACcIbcxzFlCyKWCoLVNDrEZlk9QY=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: znRSUO3caPihB9pwLwMc1O8NeSvwB5D6pWui44HfBSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3525 (0xdc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Nov 4 18:00:46 2025 GMT Not After : Nov 11 18:00:46 2025 GMT Subject: CN=690a3f4e-5e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:0e:66:98:cc:5a:bf:4f:6b:c9:2d:e8:39: ce:f5:37:86:ca:88:94:f2:f7:3a:d7:c4:a8:a6:66: 27:0c:67:61:2e:6c:51:1e:dc:c8:3c:09:95:13:69: 9b:6b:4d:00:83:86:c6:2c:55:c2:69:07:de:fb:7f: 0c:f2:d2:b0:e1:1b:62:b7:3c:7e:14:1d:8e:cf:bb: 15:4a:18:62:f9:c8:9e:cc:53:4b:ca:e1:ba:35:4f: bc:f1:42:30:cd:6f:40:27:42:e1:01:16:91:80:5a: f5:b5:5a:55:39:2a:fd:79:c4:51:c0:db:d8:f4:da: a0:ca:8b:c6:8e:09:e6:cb:e2:bc:3b:b2:bb:10:bd: f5:c1:f1:dd:f8:d6:49:2d:e1:ce:9a:4e:41:b7:3d: 38:1b:94:32:fd:d7:ea:af:64:81:6d:7c:55:27:a4: 58:6f:6c:a8:35:59:39:05:2b:32:ab:6d:85:a0:88: d4:ba:d1:d1:da:70:a2:76:5a:31:47:fb:ce:99:e2: d7:8f:74:f1:bc:94:3f:9e:f8:97:2a:0f:a3:90:c9: a3:84:5d:af:98:d2:8c:ff:0a:36:8f:f5:df:8e:e0: 54:83:47:18:24:0d:a4:9b:8e:12:c1:d1:62:42:34: 19:3f:1a:8b:8b:6b:22:52:b2:ea:bb:ea:8b:94:70: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A4:EB:C0:03:77:C0:71:3F:F4:9C:02:F6:1D:5E:92:DB:12:3E:86 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:de:5f:22:0b:09:7f:1d:53:73:de:44:c4:f8:7e:2a:c6:17: ee:ee:c0:93:46:f4:6d:10:62:4c:40:1a:04:f1:0e:e3:25:8c: 3b:97:e7:f8:55:88:24:b8:a8:5e:56:1c:69:dc:48:cb:72:84: 76:74:2a:e1:b9:ec:fb:37:eb:f4:f5:79:9b:ec:3b:74:74:67: dc:c6:88:d6:21:46:2b:1a:e0:63:85:80:f5:7d:a8:3e:13:a7: 58:3a:92:9d:66:6a:db:67:4b:6b:f3:b1:e6:80:86:98:ce:8f: 91:dd:82:93:b1:3e:89:e0:01:ff:ca:80:52:73:8f:17:23:c9: ae:15:ee:2f:75:d9:a5:80:3d:15:0d:ee:b2:de:2f:ef:82:4e: 7c:4d:11:b8:f1:a3:29:54:ee:c5:6b:ae:30:3f:cf:be:a1:7f: 5a:95:0c:76:d0:f3:89:a5:3c:a5:a6:a1:96:4d:cd:05:36:1b: b0:f1:b4:9e:66:81:f5:32:a6:43:99:7e:b7:67:8a:81:58:ef: 12:c3:cd:71:c2:da:ef:64:f1:c2:16:ac:c3:30:4b:88:04:cd: 5a:4d:09:2e:fc:cb:e8:a6:4f:8d:53:e1:87:ea:a9:ee:b3:bb: f8:cb:d4:82:3e:36:1e:c9:1f:24:45:1a:9d:9e:fb:a0:55:20: 1a:77:40:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUxMTA0MTgwMDQ2WhcNMjUxMTExMTgwMDQ2WjAYMRYwFAYD VQQDEw02OTBhM2Y0ZS01ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9QOZpjMWr9Pa8kt6DnO9TeGyoiU8vc618SopmYnDGdhLmxRHtzIPAmVE2mb a00Ag4bGLFXCaQfe+38M8tKw4Rtitzx+FB2Oz7sVShhi+ciezFNLyuG6NU+88UIw zW9AJ0LhARaRgFr1tVpVOSr9ecRRwNvY9NqgyovGjgnmy+K8O7K7EL31wfHd+NZJ LeHOmk5Btz04G5Qy/dfqr2SBbXxVJ6RYb2yoNVk5BSsyq22FoIjUutHR2nCidlox R/vOmeLXj3TxvJQ/nviXKg+jkMmjhF2vmNKM/wo2j/XfjuBUg0cYJA2km44SwdFi QjQZPxqLi2siUrLqu+qLlHDv+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuk68AD d8BxP/ScAvYdXpLbEj6GMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC3l8iCwl/HVNz3kTE+H4qxhfu7sCTRvRtEGJMQBoE8Q7jJYw7l+f4 VYgkuKheVhxp3EjLcoR2dCrhuez7N+v09Xmb7Dt0dGfcxojWIUYrGuBjhYD1fag+ E6dYOpKdZmrbZ0tr87HmgIaYzo+R3YKTsT6J4AH/yoBSc48XI8muFe4vddmlgD0V De6y3i/vgk58TRG48aMpVO7Fa64wP8++oX9alQx20POJpTylpqGWTc0FNhuw8bSe ZoH1MqZDmX63Z4qBWO8Sw81xwtrvZPHCFqzDMEuIBM1aTQku/Mvopk+NU+GH6qnu s7v4y9SCPjYeyR8kRRqdnvugVSAad0DQ -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:04 2025 by rpki-client