$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft File: SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json) Hash identifier: oXkrnt56SZwSuiEv8qiHnFv3yx1Flttf6vhH3HCr0dU= Subject key identifier: 1A:87:41:92:AF:80:F4:47:C5:44:53:13:BE:9B:02:37:C9:31:64:0B Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft Manifest number: 082C Signing time: Tue 04 Nov 2025 20:58:27 +0000 Manifest this update: Tue 04 Nov 2025 20:58:27 +0000 Manifest next update: Tue 11 Nov 2025 20:58:27 +0000 Files and hashes: 1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: 5DILxKqXHYYOj4ixP5Rluy1ScoJnK3dXiweh4DJjH78=) 2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: 945IwSRQpquR63B4O0BtV6nqh3ke3gGQ6coFK1lAOcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Validity Not Before: Nov 4 20:58:27 2025 GMT Not After : Nov 11 20:58:27 2025 GMT Subject: CN=690a68f3-0023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4f:02:cd:f0:09:ad:68:96:bb:1d:0f:b4:42: 08:32:58:98:dc:d0:93:b0:80:28:54:77:7d:34:f3: 45:6c:b6:bd:4c:cd:7a:fe:af:32:db:19:35:a7:cc: 0f:ca:22:55:29:6e:cf:67:d1:5e:75:28:f9:08:25: f6:c4:2c:b3:73:5c:77:78:f8:71:d0:34:ad:33:91: 1d:71:cd:87:21:cc:f7:55:3a:56:3d:1b:6f:a5:92: f5:3d:cd:66:d3:51:2f:b6:b1:15:a9:2f:f5:b7:9d: b5:41:4e:e8:87:ae:cf:84:3a:49:0b:20:57:fb:d2: dd:0a:59:a1:32:10:33:7a:f8:f1:46:fa:72:19:fa: f2:52:5f:35:68:e8:66:60:1d:8e:cc:00:d0:28:72: 03:2e:db:14:03:82:69:4e:d9:ba:8e:b5:b0:77:f8: 15:e2:e2:f1:a6:b3:f5:b7:4c:e3:e7:c9:40:9e:6c: 8b:29:b7:dd:0f:6c:71:f2:ca:b3:d7:41:4e:20:e3: 9f:ac:fd:e1:6d:63:9e:e0:0b:3f:f8:5b:f4:b4:85: fa:85:3a:f1:dd:3a:eb:65:58:38:bf:01:a1:f7:74: 43:98:cb:06:d5:c1:20:52:4d:3e:95:1e:ae:06:7c: 65:d4:17:20:9b:7f:24:b0:5d:5d:d1:63:0e:1f:08: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:87:41:92:AF:80:F4:47:C5:44:53:13:BE:9B:02:37:C9:31:64:0B X509v3 Authority Key Identifier: keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:95:a0:fb:79:08:76:4b:2d:10:53:8c:a7:11:a2:39:08:4c: e1:e0:ad:e2:86:77:6d:6e:0f:5d:87:55:d7:25:43:19:c2:94: 29:64:04:aa:e7:21:13:d5:c8:4f:0e:05:30:6d:1c:d3:19:2b: a2:01:d2:f0:81:20:14:b5:90:09:1b:aa:4c:27:68:ef:c0:2a: ab:e9:b4:22:34:8e:bb:80:37:be:b8:a7:f4:24:46:27:2b:a5: c1:09:05:fc:7a:d9:c0:cc:ac:39:59:8f:3f:93:a9:09:03:35: b8:6a:bc:10:d9:fe:4c:ba:53:3a:7d:aa:a3:7c:64:aa:09:18: 8f:c7:4e:28:7b:2d:f5:f7:11:8f:3c:c9:93:f8:5c:26:5f:ee: 4b:ca:07:8a:ed:f1:de:e7:76:92:a3:c9:d3:6e:74:b8:2b:62: 3d:a7:69:90:b1:78:7a:35:d8:6e:db:41:48:bd:bf:a3:8a:16: 7b:ac:1c:ef:ec:66:c7:08:8d:95:43:6a:9b:ca:cb:55:37:8a: 86:11:6c:3c:3c:f8:8d:71:78:c3:61:9e:99:b3:83:e7:3d:88: 91:b0:a6:d0:0e:88:c5:d1:c4:1c:32:d9:f2:57:53:17:e7:47: 39:21:b5:c7:ac:69:92:e8:09:79:10:93:81:6b:b5:4c:d1:c7: 2b:85:2d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCQUIxMTAvBgNVBAUTKDQ4Qjk5NDU5ODdGNjc2QjQ2Q0VEM0RFMTI4NDlBOEEz OEY0MDY4QjUwHhcNMjUxMTA0MjA1ODI3WhcNMjUxMTExMjA1ODI3WjAYMRYwFAYD VQQDEw02OTBhNjhmMy0wMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4E8CzfAJrWiWux0PtEIIMliY3NCTsIAoVHd9NPNFbLa9TM16/q8y2xk1p8wP yiJVKW7PZ9FedSj5CCX2xCyzc1x3ePhx0DStM5Edcc2HIcz3VTpWPRtvpZL1Pc1m 01EvtrEVqS/1t521QU7oh67PhDpJCyBX+9LdClmhMhAzevjxRvpyGfryUl81aOhm YB2OzADQKHIDLtsUA4JpTtm6jrWwd/gV4uLxprP1t0zj58lAnmyLKbfdD2xx8sqz 10FOIOOfrP3hbWOe4As/+Fv0tIX6hTrx3TrrZVg4vwGh93RDmMsG1cEgUk0+lR6u Bnxl1Bcgm38ksF1d0WMOHwhCvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqHQZKv gPRHxURTE76bAjfJMWQLMB8GA1UdIwQYMBaAFEi5lFmH9na0bO094ShJqKOPQGi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJBQi8wQjk3NjAxQUY2 NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRyUnM3VDNoS0Vtb280OUFh TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMbVVXWWYyZHJSczdUM2hLRW1vbzQ5QWFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJBQi8wQjk3NjAxQUY2NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRy UnM3VDNoS0Vtb280OUFhTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhlaD7eQh2Sy0QU4ynEaI5CEzh4K3ihndtbg9dh1XXJUMZwpQpZASq 5yET1chPDgUwbRzTGSuiAdLwgSAUtZAJG6pMJ2jvwCqr6bQiNI67gDe+uKf0JEYn K6XBCQX8etnAzKw5WY8/k6kJAzW4arwQ2f5MulM6faqjfGSqCRiPx04oey319xGP PMmT+FwmX+5LygeK7fHe53aSo8nTbnS4K2I9p2mQsXh6Ndhu20FIvb+jihZ7rBzv 7GbHCI2VQ2qbystVN4qGEWw8PPiNcXjDYZ6Zs4PnPYiRsKbQDojF0cQcMtnyV1MX 50c5IbXHrGmS6Al5EJOBa7VM0ccrhS2x -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:14 2025 by rpki-client