$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: aGSGHJbo4kcAFK4w/0V7owIv2bK1tKQxHqvtVpL73pc= Subject key identifier: DB:92:CC:83:04:41:3B:90:0E:49:85:38:A8:98:80:1B:F4:00:DB:00 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 07DD Signing time: Sun 02 Nov 2025 22:14:54 +0000 Manifest this update: Sun 02 Nov 2025 22:14:53 +0000 Manifest next update: Sun 09 Nov 2025 22:14:53 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: ph1nHt2QS8ANtObdJnvTkShB0gzqvPe9Bjgystua8Y4=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Nov 2 22:14:53 2025 GMT Not After : Nov 9 22:14:53 2025 GMT Subject: CN=6907d7de-a472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:43:ed:e0:7a:98:dc:30:c5:b1:0f:49:b5: b8:96:86:c5:31:a8:b6:bb:49:da:9b:52:d3:e1:66: c5:37:b9:f5:8d:e6:c4:a4:fd:c9:c9:ea:35:9f:98: 94:77:9a:79:ac:25:4e:de:22:77:eb:c2:54:34:62: a3:8b:7a:f4:e2:33:eb:32:d0:ef:54:d8:5d:4d:43: cf:1d:50:bb:45:37:b2:48:6a:94:0e:84:ea:96:98: 97:27:0d:65:9a:63:25:1b:ba:de:7d:db:18:40:b5: 20:ce:1f:f7:f5:e2:67:fc:9a:40:87:ed:8a:51:43: 6b:68:c5:5c:e7:39:89:01:bd:bb:e7:53:34:13:6c: d1:ad:c1:13:b5:c0:a4:59:cc:4e:84:6f:c3:29:98: 88:03:a9:06:b1:4a:7e:92:7c:a1:f0:c6:93:4f:97: 1e:ba:d6:86:8d:39:e0:5e:ac:83:69:92:52:e8:c9: cb:a4:f7:de:f9:29:71:39:a9:55:d0:c1:59:dd:7c: 0a:1d:3f:97:c3:df:38:4b:f1:12:76:fe:cc:f7:24: 0a:fc:29:4a:95:a1:11:6d:32:5d:c2:f6:aa:f3:59: 2e:7a:6e:8d:61:9f:04:23:73:f9:ab:a3:56:d7:76: 8a:e8:ad:a1:2a:f3:39:6e:b1:55:68:bb:54:59:11: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:92:CC:83:04:41:3B:90:0E:49:85:38:A8:98:80:1B:F4:00:DB:00 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:1e:24:02:64:97:d2:69:70:05:90:c3:0e:b2:fa:1e:a1:79: 9b:7f:e3:4e:69:30:a3:53:eb:7e:85:f2:37:66:f2:c1:a0:e9: aa:78:ef:91:eb:32:dc:83:08:68:fc:ff:4d:14:6b:ca:8b:0a: b9:8f:96:36:9c:af:90:21:a7:12:7e:fd:6b:39:a5:d1:3a:9f: ec:e7:01:a3:df:18:fb:91:a6:08:3e:39:29:bc:39:20:53:cf: 41:f4:de:ac:21:14:df:ea:e0:ae:1a:2c:6f:b4:2a:88:2e:b3: 24:f0:8f:6e:ad:cd:00:4e:ed:0e:de:59:f7:15:94:f0:a3:7a: e2:75:16:9d:24:f9:fe:0f:6d:38:a4:ed:73:e1:29:0c:03:4e: b1:7d:52:2b:ed:03:ba:ea:3e:76:9e:e6:5f:37:00:f5:d9:0f: 61:78:65:ee:bd:57:ce:8b:ce:53:0a:ac:cf:f6:79:c2:1b:51: dc:af:a5:e0:11:91:bb:07:20:6e:55:57:4c:8d:fa:b1:36:b3: 02:f5:63:52:1d:3d:df:2a:e9:5a:e2:6b:93:55:67:b3:a8:a1: 6d:44:54:2e:2c:08:b6:bb:fd:d4:f5:e8:ac:4a:f5:cd:56:c4: 40:5e:23:96:48:b1:c1:1b:ca:f7:a1:1b:eb:4c:62:7f:f8:6b: 7f:6c:be:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUxMTAyMjIxNDUzWhcNMjUxMTA5MjIxNDUzWjAYMRYwFAYD VQQDEw02OTA3ZDdkZS1hNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui5D7eB6mNwwxbEPSbW4lobFMai2u0nam1LT4WbFN7n1jebEpP3Jyeo1n5iU d5p5rCVO3iJ368JUNGKji3r04jPrMtDvVNhdTUPPHVC7RTeySGqUDoTqlpiXJw1l mmMlG7refdsYQLUgzh/39eJn/JpAh+2KUUNraMVc5zmJAb2751M0E2zRrcETtcCk WcxOhG/DKZiIA6kGsUp+knyh8MaTT5ceutaGjTngXqyDaZJS6MnLpPfe+SlxOalV 0MFZ3XwKHT+Xw984S/ESdv7M9yQK/ClKlaERbTJdwvaq81kuem6NYZ8EI3P5q6NW 13aK6K2hKvM5brFVaLtUWRFSbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuSzIME QTuQDkmFOKiYgBv0ANsAMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJHiQCZJfSaXAFkMMOsvoeoXmbf+NOaTCjU+t+hfI3ZvLBoOmqeO+R 6zLcgwho/P9NFGvKiwq5j5Y2nK+QIacSfv1rOaXROp/s5wGj3xj7kaYIPjkpvDkg U89B9N6sIRTf6uCuGixvtCqILrMk8I9urc0ATu0O3ln3FZTwo3ridRadJPn+D204 pO1z4SkMA06xfVIr7QO66j52nuZfNwD12Q9heGXuvVfOi85TCqzP9nnCG1Hcr6Xg EZG7ByBuVVdMjfqxNrMC9WNSHT3fKula4muTVWezqKFtRFQuLAi2u/3U9eisSvXN VsRAXiOWSLHBG8r3oRvrTGJ/+Gt/bL55 -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:41 2025 by rpki-client