$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: P+vWJI2lPBadjvQiSkTDSlvwrw1uv/Clf6JeMZijhEQ= Subject key identifier: C0:D6:49:34:B9:10:9B:36:1D:C6:CC:70:7D:4D:6D:BD:30:41:5D:38 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 083D Signing time: Sun 02 Nov 2025 20:48:07 +0000 Manifest this update: Sun 02 Nov 2025 20:48:06 +0000 Manifest next update: Sun 09 Nov 2025 20:48:06 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: 77UR0lcivsPAp9I2lwELurvZ218KxSPXL9FsNItS2/A=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 1QBFWULUSDuABI4M5A9+pwghN2xnBCwM1ByVsOf4OoA=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) 7: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Nov 2 20:48:06 2025 GMT Not After : Nov 9 20:48:06 2025 GMT Subject: CN=6907c386-d822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:c8:19:8d:2e:d0:97:9d:df:1a:68:19:31: ca:25:20:58:d5:c2:fd:9c:ab:4c:05:ee:36:c2:86: 33:e6:75:49:a5:91:47:77:c6:eb:a6:66:24:25:7d: c1:7d:03:51:9f:82:ce:34:4d:b9:16:d8:72:ec:7c: d4:1c:da:bc:08:28:f3:a3:a5:62:66:77:4b:de:f8: 05:c0:4c:19:ab:26:14:b9:06:fd:61:43:51:a3:f7: 0f:82:4c:a0:50:72:75:32:5c:20:4c:7a:b7:bc:b0: ad:b4:f2:ee:a6:43:c2:d3:88:fc:ed:c7:a5:f8:96: cd:47:b2:f8:86:b8:dd:d7:c8:aa:e3:1f:37:38:37: 2b:d4:a6:b1:26:06:16:d7:05:69:a5:16:5a:c5:89: 29:8d:2f:e0:04:1a:72:bb:06:5e:58:cb:2a:c4:e1: 06:8e:39:7d:5c:58:06:e9:04:f8:28:12:ab:d9:3c: 56:40:9a:94:ee:b2:32:7c:04:97:eb:44:5b:d0:10: a1:b1:e1:91:66:0c:a6:6e:c4:98:24:4a:f5:da:b5: 36:c3:33:f5:ab:e8:ea:aa:f2:d5:7a:83:a1:77:3b: 98:6d:cd:ab:d8:99:49:80:bb:6e:ea:e3:4c:4a:a7: 34:35:5b:78:66:62:81:eb:b6:69:1c:18:df:d0:1c: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D6:49:34:B9:10:9B:36:1D:C6:CC:70:7D:4D:6D:BD:30:41:5D:38 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a6:23:17:86:b9:b4:2d:b9:67:84:03:48:75:ae:72:4a:b0: 40:4b:8b:25:ec:f3:80:f2:75:fa:ea:60:16:c4:4a:b6:ba:66: 68:ae:ea:e1:15:8f:0d:6b:99:4c:66:70:cc:db:c6:09:4d:d6: 94:a4:5f:05:10:75:01:4d:b4:a1:f1:1c:c9:8f:55:68:97:94: f5:19:e6:26:53:b0:af:82:a2:0b:e1:9e:c7:b6:1e:7e:36:08: 6e:90:6a:19:4f:72:3e:10:17:f8:32:8d:28:72:ee:00:df:cc: 78:4d:f4:1e:fd:6e:f9:59:28:dd:06:ad:77:67:f5:b1:b1:63: cb:88:fc:32:f1:15:54:ed:6f:5a:a8:2d:4e:7d:c9:3a:e1:d0: 7f:35:23:bd:b6:ed:dc:34:04:72:b1:06:c7:d7:c1:78:7b:92: d7:bc:6d:75:e6:46:3a:56:a0:b4:61:d6:a6:4b:92:8c:95:99: a7:55:8c:62:d1:4d:71:31:9d:4e:f1:f4:2f:88:6e:ff:0e:46: 44:61:6b:01:77:7a:30:6d:0b:ce:14:df:e6:3e:84:fb:62:01: 28:ae:04:ac:fd:c4:a4:01:c6:bc:06:31:59:bd:25:63:a5:7c: e2:9c:e9:44:e9:fc:f3:5a:51:a6:71:95:70:8b:4e:75:d0:89: 3b:40:93:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUxMTAyMjA0ODA2WhcNMjUxMTA5MjA0ODA2WjAYMRYwFAYD VQQDEw02OTA3YzM4Ni1kODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVfIGY0u0Jed3xpoGTHKJSBY1cL9nKtMBe42woYz5nVJpZFHd8brpmYkJX3B fQNRn4LONE25Fthy7HzUHNq8CCjzo6ViZndL3vgFwEwZqyYUuQb9YUNRo/cPgkyg UHJ1MlwgTHq3vLCttPLupkPC04j87cel+JbNR7L4hrjd18iq4x83ODcr1KaxJgYW 1wVppRZaxYkpjS/gBBpyuwZeWMsqxOEGjjl9XFgG6QT4KBKr2TxWQJqU7rIyfASX 60Rb0BChseGRZgymbsSYJEr12rU2wzP1q+jqqvLVeoOhdzuYbc2r2JlJgLtu6uNM Sqc0NVt4ZmKB67ZpHBjf0By8ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDWSTS5 EJs2HcbMcH1Nbb0wQV04MB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjpiMXhrm0LblnhANIda5ySrBAS4sl7POA8nX66mAWxEq2umZorurh FY8Na5lMZnDM28YJTdaUpF8FEHUBTbSh8RzJj1Vol5T1GeYmU7CvgqIL4Z7Hth5+ NghukGoZT3I+EBf4Mo0ocu4A38x4TfQe/W75WSjdBq13Z/WxsWPLiPwy8RVU7W9a qC1Ofck64dB/NSO9tu3cNARysQbH18F4e5LXvG115kY6VqC0YdamS5KMlZmnVYxi 0U1xMZ1O8fQviG7/DkZEYWsBd3owbQvOFN/mPoT7YgEorgSs/cSkAca8BjFZvSVj pXzinOlE6fzzWlGmcZVwi0510Ik7QJPn -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:54 2025 by rpki-client