$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json) Hash identifier: dWjoKJOdRDIqK6QGn3dC6YgIkGTMUDbvS8/A5RRPOro= Subject key identifier: 09:E4:CF:A6:45:F9:CE:D0:1B:97:71:20:50:21:FB:57:0D:97:B4:F4 Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft Manifest number: 19 Signing time: Mon 03 Nov 2025 07:34:47 +0000 Manifest this update: Mon 03 Nov 2025 07:34:46 +0000 Manifest next update: Mon 10 Nov 2025 07:34:46 +0000 Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: enHib8iL45IHGeM91pNn651J/14oXoGpUMgw0yxt5vU=) 2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: HRGw0aoS2i5W3DQjF1IbbrWcc3d6PqDgNovqHtZ6TAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Validity Not Before: Nov 3 07:34:46 2025 GMT Not After : Nov 10 07:34:46 2025 GMT Subject: CN=69085b16-5098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:62:0f:03:e5:ae:7a:14:cf:da:e9:12:f7: d8:c0:07:16:3a:93:f2:21:3e:d0:13:b8:02:de:3c: 78:44:37:8d:1b:1e:9f:08:f5:da:f0:61:4c:15:59: 81:8b:5e:8a:4e:ad:40:29:30:f9:12:c9:05:28:c6: cb:43:ea:3c:f7:f6:59:ef:e8:11:fa:a5:9c:75:6c: 0f:67:f9:dd:73:da:88:4e:2a:72:6e:ce:1d:46:04: f1:a3:8f:7d:e7:fa:bb:58:d5:9f:34:36:f7:b3:5e: b8:31:ad:f2:cc:72:f6:70:d5:2b:d4:8b:55:bb:b3: c9:fb:2d:9e:df:6a:45:6e:83:0c:2c:a7:5e:ef:a2: 97:a4:fc:94:0c:9c:8d:39:72:9b:bd:66:c9:da:a5: b0:29:d3:22:d0:a9:84:d7:e1:c0:96:47:33:e5:13: 0b:e3:c6:e7:cd:5e:40:f6:f8:d9:d9:d0:da:a6:db: cd:fd:b1:6a:eb:ac:97:a4:d7:3e:21:9e:e4:71:9f: 33:1f:72:d4:45:ad:c4:60:cd:4c:91:0e:c1:eb:4f: b3:72:8c:8b:58:8b:d2:e9:c3:84:58:44:71:27:64: d3:62:c6:ef:56:31:46:10:a2:f4:cd:89:45:87:43: f3:a9:6a:ba:1f:16:a7:19:1e:ec:f7:a5:61:91:ef: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E4:CF:A6:45:F9:CE:D0:1B:97:71:20:50:21:FB:57:0D:97:B4:F4 X509v3 Authority Key Identifier: keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1d:07:ed:cb:82:18:2f:91:42:18:be:74:51:3b:60:6d:2a: 6d:e8:4d:ab:9d:a0:8c:7b:47:ce:c5:6a:23:f7:72:47:7c:3d: d9:e4:03:f3:9b:d6:a8:2e:7b:84:e2:13:06:83:1d:f3:4d:40: 5e:51:b6:c8:0c:0c:9c:d6:fe:7e:e4:c5:0d:4f:f3:3a:8a:71: f9:26:c6:82:57:03:ba:26:07:62:e6:0e:6d:63:e6:0b:c3:01: 49:51:65:7f:68:ff:d7:b1:69:19:cf:0e:dc:71:61:29:8b:ee: af:ea:70:43:2f:4f:e1:8e:42:bc:a1:b3:ae:9b:3f:30:01:bc: 34:3a:1c:9c:80:80:76:4f:66:f9:0e:00:26:b0:7c:01:fc:aa: dc:52:ea:02:d5:e7:65:4f:94:cc:f3:87:e4:74:e1:10:91:a3: 85:8d:16:05:31:3e:52:f6:3c:f0:d5:d3:78:8e:ed:34:6c:ef: bd:ff:35:18:02:37:8b:f8:a5:aa:f3:07:d8:c4:89:3c:91:c3: 28:20:19:ee:57:03:e7:5b:bd:61:b3:d0:f2:bc:29:b7:e6:06: a0:7f:64:17:41:af:1c:f9:1f:92:62:4e:f4:60:4b:79:96:3a: a7:c2:b7:57:3a:03:ed:89:a5:b9:65:83:27:60:71:be:4b:8b: 45:9d:ec:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1 OEY4M0NENTAeFw0yNTExMDMwNzM0NDZaFw0yNTExMTAwNzM0NDZaMBgxFjAUBgNV BAMTDTY5MDg1YjE2LTUwOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ/mIPA+WuehTP2ukS99jABxY6k/IhPtATuALePHhEN40bHp8I9drwYUwVWYGL XopOrUApMPkSyQUoxstD6jz39lnv6BH6pZx1bA9n+d1z2ohOKnJuzh1GBPGjj33n +rtY1Z80NvezXrgxrfLMcvZw1SvUi1W7s8n7LZ7fakVugwwsp17vopek/JQMnI05 cpu9ZsnapbAp0yLQqYTX4cCWRzPlEwvjxufNXkD2+NnZ0Nqm2839sWrrrJek1z4h nuRxnzMfctRFrcRgzUyRDsHrT7NyjItYi9Lpw4RYRHEnZNNixu9WMUYQovTNiUWH Q/OparofFqcZHuz3pWGR787FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCeTPpkX5 ztAbl3EgUCH7Vw2XtPQwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH dGo5eTJkQlJmYkZqNFBOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8dB+3LghgvkUIYvnRRO2BtKm3oTaudoIx7R87FaiP3ckd8PdnkA/Ob 1qgue4TiEwaDHfNNQF5RtsgMDJzW/n7kxQ1P8zqKcfkmxoJXA7omB2LmDm1j5gvD AUlRZX9o/9exaRnPDtxxYSmL7q/qcEMvT+GOQryhs66bPzABvDQ6HJyAgHZPZvkO ACawfAH8qtxS6gLV52VPlMzzh+R04RCRo4WNFgUxPlL2PPDV03iO7TRs773/NRgC N4v4parzB9jEiTyRwyggGe5XA+dbvWGz0PK8KbfmBqB/ZBdBrxz5H5JiTvRgS3mW OqfCt1c6A+2Jpbllgydgcb5Li0Wd7BE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:07:03 2025 by rpki-client