$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json) Hash identifier: nhlOWy/RjqsgQLLB4GN4hv3tncWLjVSg85KbANcmjK8= Subject key identifier: 80:BA:A0:FC:34:9D:AE:31:B9:0D:2B:2E:D4:AC:8E:0D:3E:DC:7D:33 Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft Manifest number: 62 Signing time: Mon 03 Nov 2025 07:06:16 +0000 Manifest this update: Mon 03 Nov 2025 07:06:15 +0000 Manifest next update: Mon 10 Nov 2025 07:06:15 +0000 Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: WphReX1xVScLg9YJ+b7wtCcFrvZYz07tA3UP7546iH4=) 2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: t0RTmg56JthvruW6/lKLjUx4XzWAwdY96H4SSM4fLcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: Nov 3 07:06:15 2025 GMT Not After : Nov 10 07:06:15 2025 GMT Subject: CN=69085468-0acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:d3:fc:3a:11:df:46:81:13:f4:24:f9:dc: 49:43:7c:39:7a:37:e2:3b:5b:47:ee:0f:e0:f0:48: 85:dc:dc:83:25:5e:45:41:bb:46:63:47:c0:99:84: 18:76:4f:13:9a:91:e5:0c:d7:6e:01:fd:3e:f1:8c: 60:ae:11:e6:94:9b:2d:20:d8:3d:dd:e1:b5:c7:66: 76:86:b2:81:61:2b:d2:3c:08:f9:9c:7e:14:6c:7d: 73:99:3b:21:04:6c:d0:4f:4d:f7:3d:5d:2e:4e:75: da:04:37:66:5b:65:e6:62:57:62:0e:ec:8b:9d:5b: 17:64:d4:8f:fc:39:bd:c5:25:92:68:8f:d4:c8:dd: af:e1:3e:7d:41:e7:40:df:87:13:20:f4:a0:0a:09: 49:0b:91:0a:98:e3:0a:ba:b6:65:78:73:64:5a:96: 6e:92:58:01:dd:00:c9:e6:11:d6:7a:ef:b3:22:89: c5:7e:1d:ca:89:0f:9c:e5:08:07:60:45:3e:32:d7: 86:f4:57:46:7c:48:61:e3:75:97:3f:23:0d:6e:fe: 91:5e:f9:4b:ab:da:9b:0c:59:a0:39:0f:8d:2f:d2: ff:00:c7:9b:97:6e:85:7e:a7:cf:da:f9:fe:7b:b5: 16:32:4c:c5:41:48:ac:43:f5:49:b0:f2:61:8d:b5: 05:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:A0:FC:34:9D:AE:31:B9:0D:2B:2E:D4:AC:8E:0D:3E:DC:7D:33 X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:68:eb:27:c7:ec:ab:dc:17:7d:68:50:1d:9a:32:b9:95:8d: 7c:3d:25:27:8c:2c:1b:ba:98:3d:1a:b7:fe:8a:35:ee:ad:39: f9:89:1c:c5:e0:c7:36:8b:fd:0b:ba:08:bd:30:c3:9d:8d:40: 0a:da:6c:a4:1a:9d:3c:18:cc:db:25:10:7d:fc:2a:e5:f1:88: 54:40:3f:46:09:fe:09:3e:b9:67:0c:12:43:31:d5:b8:9f:f1: 6a:ac:41:9d:d9:43:fb:dd:fa:9b:3b:fe:b7:0b:dd:43:26:01: 29:dc:5f:b9:a7:7a:e4:85:4d:55:14:63:58:13:89:84:89:13: 22:b0:18:b6:6c:2e:36:e6:03:20:cb:17:af:0b:0e:6a:98:25: 18:4c:40:28:cb:1d:24:21:9a:cd:56:65:c2:94:4f:68:06:dc: 01:42:e0:62:58:c0:97:56:7f:88:f8:97:d2:a2:e8:b7:0e:72: 6d:5f:a5:c7:04:64:1e:22:da:a4:88:81:61:55:d7:7b:6e:f6: 69:a7:02:98:2e:fa:b4:1d:9a:e6:54:8a:c5:33:4a:27:a1:7f: 9a:7d:d0:bd:44:28:1c:1a:18:6a:e3:0a:e4:31:dd:75:25:46: 93:88:77:53:7a:06:42:9c:7c:88:ff:b0:f6:ac:83:cd:04:03: fc:d2:d6:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzdBQTExMC8GA1UEBRMoNzVGRTM3QTgzRURBODAwQTYxMDI2MDg1ODdFREY0MDg5 RDgyNDBFMDAeFw0yNTExMDMwNzA2MTVaFw0yNTExMTAwNzA2MTVaMBgxFjAUBgNV BAMTDTY5MDg1NDY4LTBhY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYJ9P8OhHfRoET9CT53ElDfDl6N+I7W0fuD+DwSIXc3IMlXkVBu0ZjR8CZhBh2 TxOakeUM124B/T7xjGCuEeaUmy0g2D3d4bXHZnaGsoFhK9I8CPmcfhRsfXOZOyEE bNBPTfc9XS5OddoEN2ZbZeZiV2IO7IudWxdk1I/8Ob3FJZJoj9TI3a/hPn1B50Df hxMg9KAKCUkLkQqY4wq6tmV4c2Ralm6SWAHdAMnmEdZ677MiicV+HcqJD5zlCAdg RT4y14b0V0Z8SGHjdZc/Iw1u/pFe+Uur2psMWaA5D40v0v8Ax5uXboV+p8/a+f57 tRYyTMVBSKxD9Umw8mGNtQUDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgLqg/DSd rjG5DSsu1KyODT7cfTMwHwYDVR0jBBgwFoAUdf43qD7agAphAmCFh+30CJ2CQOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDN0FBL0QyMkVEQTM0MkE4 ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGY0M3FEN2FnQXBoQW1DRmgtMzBDSjJDUU9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD N0FBL0QyMkVEQTM0MkE4ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0Fw aEFtQ0ZoLTMwQ0oyQ1FPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAABo6yfH7KvcF31oUB2aMrmVjXw9JSeMLBu6mD0at/6KNe6tOfmJHMXg xzaL/Qu6CL0ww52NQArabKQanTwYzNslEH38KuXxiFRAP0YJ/gk+uWcMEkMx1bif 8WqsQZ3ZQ/vd+ps7/rcL3UMmASncX7mneuSFTVUUY1gTiYSJEyKwGLZsLjbmAyDL F68LDmqYJRhMQCjLHSQhms1WZcKUT2gG3AFC4GJYwJdWf4j4l9Ki6LcOcm1fpccE ZB4i2qSIgWFV13tu9mmnApgu+rQdmuZUisUzSiehf5p90L1EKBwaGGrjCuQx3XUl RpOId1N6BkKcfIj/sPasg80EA/zS1nY= -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:19 2025 by rpki-client