$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: 0NoZAl5lKdH8MReS1iwHwlAsJTsMC1GTkS1kKS7I4E0= Subject key identifier: 53:AB:43:C2:C2:FE:9F:F0:0C:D1:BF:DB:6D:81:3D:61:F5:7C:1B:8C Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 093E Signing time: Sun 02 Nov 2025 20:09:48 +0000 Manifest this update: Sun 02 Nov 2025 20:09:47 +0000 Manifest next update: Sun 09 Nov 2025 20:09:47 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: UmfwX2yzbQdl4FPFPsOjf8j7fmOMjcP2JTcMGuMbLh0=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: Do71l71FTiixHCCIPeakkaaBf4R9F2qJdYWGM64Ufb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Nov 2 20:09:47 2025 GMT Not After : Nov 9 20:09:47 2025 GMT Subject: CN=6907ba8c-3e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:bc:b4:d1:eb:77:de:2b:92:da:c5:ae:81: b2:07:1b:e4:be:1c:d3:e1:0f:23:d9:8f:62:55:70: 85:c0:3c:b1:eb:5e:a6:21:9d:16:01:9f:5e:f3:34: 73:c8:fd:d6:ae:51:64:b5:7e:1e:a9:7f:15:94:24: dd:c3:9f:90:91:c5:ed:d4:40:a0:77:ee:a6:3d:d6: 9c:a4:b2:7a:59:9f:93:78:7f:9c:a6:cc:44:53:aa: f7:b3:c4:e7:f3:67:a2:b7:54:07:38:7f:38:af:1c: 5b:e6:79:28:ce:fc:1b:79:59:dd:d4:39:09:68:85: 2f:e0:22:a8:03:08:ae:eb:ca:f9:1d:b8:ca:36:26: 5b:9d:d4:36:88:9a:ea:ec:d2:ee:9e:8c:22:ee:26: 47:33:49:0b:52:4e:ad:7b:f9:90:f5:77:b5:21:ef: eb:7e:ec:a8:dc:e0:07:c7:79:fe:26:df:ef:2f:32: 7e:0d:40:0f:68:dc:ad:1b:39:f1:bb:3a:6b:7e:13: ce:8a:6b:14:e3:c6:6f:21:de:62:a8:25:d9:2e:fe: 05:16:aa:9a:f6:03:fb:b0:d2:1b:54:f9:8f:2a:1e: 05:9a:df:0e:1d:8c:25:d7:65:f3:e8:36:90:b7:31: a2:cd:ce:3f:a5:02:79:07:76:82:05:8a:2a:8a:11: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:43:C2:C2:FE:9F:F0:0C:D1:BF:DB:6D:81:3D:61:F5:7C:1B:8C X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:80:b2:60:28:fb:f1:cf:f8:6a:b1:cd:f4:37:26:10:d4:2b: ad:f3:6f:14:4d:11:bf:1b:64:9b:9f:59:45:f5:b4:8d:d0:f9: b4:f9:71:20:80:81:33:d6:b6:52:c2:2d:66:46:4c:01:56:a6: 74:c9:88:f3:52:4e:9e:68:05:91:d2:1a:27:78:06:5d:51:bf: 57:00:06:33:83:9f:4e:1e:b1:7d:04:14:26:16:fa:db:7e:51: 28:45:d5:ec:e5:33:8e:27:c5:0a:e7:92:55:74:31:50:11:3b: b5:35:0f:50:e1:4a:40:a0:83:4f:51:49:6c:e2:b8:16:f3:07: 38:2f:d5:57:39:ae:b0:29:0d:c0:55:a0:94:d5:69:bc:a0:4e: f3:88:fd:30:03:09:3c:15:35:0f:25:ff:e3:ef:a6:5a:b9:93: da:cf:40:a9:f1:72:f9:ac:06:c6:ae:a4:62:af:33:39:7e:a7: 21:5f:e4:c4:17:51:c9:03:4b:f5:5a:59:92:e5:1c:71:0a:c8: 31:bc:c6:7a:36:ea:a7:50:05:66:c5:33:14:24:3e:e6:04:3f: ea:7a:db:08:78:d9:32:8e:9d:b9:d1:47:5d:9c:b6:8d:33:9e: 23:4f:41:74:10:f0:18:6b:2f:1e:37:c7:33:58:4b:66:a3:a9: 57:d0:bd:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjUxMTAyMjAwOTQ3WhcNMjUxMTA5MjAwOTQ3WjAYMRYwFAYD VQQDEw02OTA3YmE4Yy0zZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/u8tNHrd94rktrFroGyBxvkvhzT4Q8j2Y9iVXCFwDyx616mIZ0WAZ9e8zRz yP3WrlFktX4eqX8VlCTdw5+QkcXt1ECgd+6mPdacpLJ6WZ+TeH+cpsxEU6r3s8Tn 82eit1QHOH84rxxb5nkozvwbeVnd1DkJaIUv4CKoAwiu68r5HbjKNiZbndQ2iJrq 7NLunowi7iZHM0kLUk6te/mQ9Xe1Ie/rfuyo3OAHx3n+Jt/vLzJ+DUAPaNytGznx uzprfhPOimsU48ZvId5iqCXZLv4FFqqa9gP7sNIbVPmPKh4Fmt8OHYwl12Xz6DaQ tzGizc4/pQJ5B3aCBYoqihGBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOrQ8LC /p/wDNG/222BPWH1fBuMMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCngLJgKPvxz/hqsc30NyYQ1Cut828UTRG/G2Sbn1lF9bSN0Pm0+XEg gIEz1rZSwi1mRkwBVqZ0yYjzUk6eaAWR0honeAZdUb9XAAYzg59OHrF9BBQmFvrb flEoRdXs5TOOJ8UK55JVdDFQETu1NQ9Q4UpAoINPUUls4rgW8wc4L9VXOa6wKQ3A VaCU1Wm8oE7ziP0wAwk8FTUPJf/j76ZauZPaz0Cp8XL5rAbGrqRirzM5fqchX+TE F1HJA0v1WlmS5RxxCsgxvMZ6NuqnUAVmxTMUJD7mBD/qetsIeNkyjp250UddnLaN M54jT0F0EPAYay8eN8czWEtmo6lX0L1s -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:27 2025 by rpki-client