$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: fjzGlLFAtNQ89PhLVIKSCJmmXFyPK+mvC0Q0j5XTzd8= Subject key identifier: 61:49:5F:44:9E:AD:73:01:03:99:E1:8F:F8:D9:CF:ED:D2:52:F2:0D Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 014E Signing time: Wed 05 Nov 2025 04:29:56 +0000 Manifest this update: Wed 05 Nov 2025 04:29:56 +0000 Manifest next update: Wed 12 Nov 2025 04:29:55 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: JfKLoTZA8S5AMpkuzWBCji0OQB0c9xunlaglrYqZzac=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: AlpyGioYVyajcJ7eEz9QWJBXQdVphfXg8wGbaRLMJmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Nov 5 04:29:56 2025 GMT Not After : Nov 12 04:29:55 2025 GMT Subject: CN=690ad2c4-2660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:48:20:64:c0:a5:6b:73:21:8e:5c:5e:47: b5:5c:fd:f4:4b:cc:ec:82:6a:3b:f3:a2:99:1f:9b: 45:83:00:7d:12:14:52:bc:8c:48:c7:21:3f:bf:b8: d4:57:10:32:2f:ad:b5:13:0e:78:3d:bf:46:0b:5b: f2:fd:fd:93:c9:c4:1b:1a:1b:c2:a1:e7:a5:4c:3e: 1a:44:f7:ea:bd:e7:14:f0:3c:4c:f9:e1:32:3e:f8: f2:6e:d1:e0:bb:02:76:b8:12:ed:4f:81:46:7f:74: b0:d0:fc:7e:66:c2:f2:54:87:5c:d3:32:24:65:42: 23:20:ef:44:83:71:a3:96:f4:62:c2:24:0d:5a:9d: ef:73:8c:f5:45:2d:6e:f1:d3:40:64:1b:12:59:1b: 6c:9d:d0:be:12:95:e0:8b:17:31:da:a7:19:17:ce: 8a:1c:33:92:9b:79:ab:7a:6d:0c:24:2d:73:23:96: 43:55:35:1f:9c:41:e2:ba:cd:0c:90:0b:38:ef:12: 55:1e:75:ee:f2:36:e7:e2:b6:96:c6:a5:52:0d:73: af:ef:5b:9f:d4:c9:37:19:cb:44:20:54:b3:25:c1: 7c:b1:dc:8d:4f:43:4f:36:a2:58:c7:27:68:3c:2d: 3e:10:d1:a6:c3:f8:12:e8:72:8c:96:0b:ce:7c:2e: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:5F:44:9E:AD:73:01:03:99:E1:8F:F8:D9:CF:ED:D2:52:F2:0D X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d4:22:89:1d:0e:ec:6d:91:d8:b8:ce:e2:07:85:1b:b4:2d: dd:fd:73:35:ca:b2:99:d2:54:8d:2e:66:1c:49:9c:fe:f5:b5: 9b:c4:0c:b2:d6:7e:ff:8b:03:ca:9c:ac:c5:13:f8:15:85:06: 10:c5:97:55:76:fd:3a:c6:b0:c6:2e:30:25:fc:d1:88:e4:4e: 47:f3:24:1e:c5:07:99:7f:44:a2:f5:c2:52:50:8a:f6:15:90: d9:1f:bc:c9:8d:c3:05:df:d6:71:a4:d0:0e:a5:02:d3:7c:52: b8:1e:e4:d0:80:a3:ea:b7:f9:e6:11:bf:53:83:29:18:f3:c1: 66:df:9b:18:d4:a3:4e:f0:05:3b:48:e9:4c:9d:d9:3f:75:61: 10:a3:0e:05:30:c6:3f:21:a6:0b:0c:7e:e1:78:f5:f3:62:02: 6e:b6:18:b3:3b:7e:11:a6:54:a6:88:d9:21:6e:e9:a8:22:53: 3e:b3:b3:34:43:6d:5c:3c:3a:a0:64:99:72:ad:73:c4:0f:cd: ce:c6:c8:f3:aa:53:da:df:77:af:ee:77:69:17:b3:b3:4a:93: 04:6b:09:5a:37:5f:35:f1:84:76:a4:4d:4f:a9:08:f3:1c:5a: fe:f3:50:dd:e2:64:c3:6a:6d:d1:7e:38:15:a4:8e:52:87:24: 4b:bf:e1:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUxMTA1MDQyOTU2WhcNMjUxMTEyMDQyOTU1WjAYMRYwFAYD VQQDEw02OTBhZDJjNC0yNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwolIIGTApWtzIY5cXke1XP30S8zsgmo786KZH5tFgwB9EhRSvIxIxyE/v7jU VxAyL621Ew54Pb9GC1vy/f2TycQbGhvCoeelTD4aRPfqvecU8DxM+eEyPvjybtHg uwJ2uBLtT4FGf3Sw0Px+ZsLyVIdc0zIkZUIjIO9Eg3GjlvRiwiQNWp3vc4z1RS1u 8dNAZBsSWRtsndC+EpXgixcx2qcZF86KHDOSm3mrem0MJC1zI5ZDVTUfnEHius0M kAs47xJVHnXu8jbn4raWxqVSDXOv71uf1Mk3GctEIFSzJcF8sdyNT0NPNqJYxydo PC0+ENGmw/gS6HKMlgvOfC5Q1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFJX0Se rXMBA5nhj/jZz+3SUvINMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy1CKJHQ7sbZHYuM7iB4UbtC3d/XM1yrKZ0lSNLmYcSZz+9bWbxAyy 1n7/iwPKnKzFE/gVhQYQxZdVdv06xrDGLjAl/NGI5E5H8yQexQeZf0Si9cJSUIr2 FZDZH7zJjcMF39ZxpNAOpQLTfFK4HuTQgKPqt/nmEb9TgykY88Fm35sY1KNO8AU7 SOlMndk/dWEQow4FMMY/IaYLDH7hePXzYgJuthizO34RplSmiNkhbumoIlM+s7M0 Q21cPDqgZJlyrXPED83OxsjzqlPa33ev7ndpF7OzSpMEawlaN1818YR2pE1PqQjz HFr+81Dd4mTDam3RfjgVpI5ShyRLv+Hm -----END CERTIFICATE-----Generated at Thu Nov 6 06:27:04 2025 by rpki-client