$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft File: V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json) Hash identifier: YOAiAxveIuPWG2i8aM1I5vkx0fECSeXEptamZYtiYDo= Subject key identifier: C5:2E:B3:FE:0A:4C:A3:E8:6B:77:41:71:DD:0C:EC:80:65:F2:37:37 Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 Certificate issuer: /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft Manifest number: 43 Signing time: Mon 03 Nov 2025 07:26:40 +0000 Manifest this update: Mon 03 Nov 2025 07:26:40 +0000 Manifest next update: Mon 10 Nov 2025 07:26:40 +0000 Files and hashes: 1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: 4/sJe2NDVlXVnkQtZ/Jj78jVFXOM+BieSsWpn2yuYdk=) 2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: I9mTloe+CBVyT9j1b2vknypKCm7MYiUBGA2nLvqI+nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Validity Not Before: Nov 3 07:26:40 2025 GMT Not After : Nov 10 07:26:40 2025 GMT Subject: CN=69085930-1d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:aa:c3:aa:be:cb:4a:73:3e:f7:88:1f:61: f1:ec:3b:bd:02:4f:cb:7b:f8:62:b1:04:ff:e3:0c: 17:a7:1d:f3:65:f8:71:4b:62:93:10:5d:0f:0b:4c: f3:ae:76:75:57:48:75:33:57:af:67:d6:bc:18:8e: 0b:a8:c1:fa:06:35:cc:de:ad:d9:b7:0f:69:7a:81: 18:0e:71:2c:67:50:57:04:4d:48:0e:13:bb:34:a2: b1:d8:12:53:14:34:70:ce:aa:77:9e:e5:c8:ce:51: 8a:9b:11:c4:b1:a3:e2:dd:6c:b0:db:e2:d6:84:c5: 7e:b1:60:c1:36:cb:9f:4e:74:91:8e:46:ec:6b:a8: a0:02:11:95:31:5c:f5:7f:8e:fb:59:5f:26:4c:2c: e9:49:d7:53:30:d4:7e:6e:f4:c3:44:e7:8e:72:65: 56:42:60:39:9f:e2:79:d5:ed:a4:5b:ea:f5:ea:b6: e8:f6:ff:a5:48:65:42:2d:87:bc:af:cf:7c:62:2a: 6f:79:71:e4:4d:8d:47:b4:68:fe:e2:6b:72:69:7f: 48:3b:5e:8f:a3:51:da:a3:21:95:2b:9f:2e:11:31: 97:66:d9:88:1f:50:fb:f8:c3:52:ca:7d:11:ad:7a: db:ee:ab:5b:f1:7d:fd:89:12:e6:1f:2f:83:56:8c: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:B3:FE:0A:4C:A3:E8:6B:77:41:71:DD:0C:EC:80:65:F2:37:37 X509v3 Authority Key Identifier: keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:1e:b1:47:e2:42:ae:8d:f6:ec:ff:94:a6:77:0d:73:37:64: ac:bb:1e:de:28:a4:16:22:f7:62:4b:d6:b5:95:78:84:b9:15: 6b:2e:55:db:6d:71:4e:7d:4e:fd:da:b6:d4:62:4d:a9:dd:ea: 75:e9:7c:c2:33:0b:a1:50:37:cc:ec:50:81:f3:75:68:9d:13: 10:dc:4e:1a:0f:7c:88:10:89:5a:9b:d7:e3:41:9b:48:b9:9f: 9c:af:62:57:b0:32:e2:bd:e8:f6:8d:e1:b5:ae:cf:71:9e:7e: f5:be:bd:9c:fd:2e:c3:43:7e:64:ee:1d:49:71:58:58:37:7e: d8:74:ca:dd:47:a2:6d:22:e5:60:26:d8:12:56:06:b7:a2:7e: 0c:85:7e:da:0d:5e:d9:fc:e4:5e:0b:c0:3a:9a:26:c0:d4:e1: eb:2d:ee:42:70:fe:b4:4d:a0:7b:d7:03:64:cf:85:62:df:d8: 61:33:f8:df:df:f9:46:4a:e6:f3:9c:c4:0e:5e:a7:ed:c5:0f: 70:46:91:82:44:0a:10:48:01:46:70:1d:69:84:d0:1f:aa:4c: d0:f8:3b:f2:44:e4:d1:5d:25:85:d7:5c:13:5e:7a:54:7e:cd: 8c:2a:29:ad:b2:95:44:06:36:24:9a:8c:dc:e5:aa:a9:bd:4d: 88:34:26:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoNTc0REIzRDYyNURFODQyMDJFM0FDOUMxQzNENUIwNzc0 RDZCNzhFMzAeFw0yNTExMDMwNzI2NDBaFw0yNTExMTAwNzI2NDBaMBgxFjAUBgNV BAMTDTY5MDg1OTMwLTFkMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC29arDqr7LSnM+94gfYfHsO70CT8t7+GKxBP/jDBenHfNl+HFLYpMQXQ8LTPOu dnVXSHUzV69n1rwYjguowfoGNczerdm3D2l6gRgOcSxnUFcETUgOE7s0orHYElMU NHDOqnee5cjOUYqbEcSxo+LdbLDb4taExX6xYME2y59OdJGORuxrqKACEZUxXPV/ jvtZXyZMLOlJ11Mw1H5u9MNE545yZVZCYDmf4nnV7aRb6vXqtuj2/6VIZUIth7yv z3xiKm95ceRNjUe0aP7ia3Jpf0g7Xo+jUdqjIZUrny4RMZdm2YgfUPv4w1LKfRGt etvuq1vxff2JEuYfL4NWjKP1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxS6z/gpM o+hrd0Fx3QzsgGXyNzcwHwYDVR0jBBgwFoAUV02z1iXehCAuOsnBw9Wwd01reOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzQ5QTFBODc4NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENBdU9zbkJ3OVd3ZDAxcmVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjAyejFpWGVoQ0F1T3NuQnc5V3dkMDFyZU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzQ5QTFBODc4NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENB dU9zbkJ3OVd3ZDAxcmVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANcesUfiQq6N9uz/lKZ3DXM3ZKy7Ht4opBYi92JL1rWVeIS5FWsuVdtt cU59Tv3attRiTand6nXpfMIzC6FQN8zsUIHzdWidExDcThoPfIgQiVqb1+NBm0i5 n5yvYlewMuK96PaN4bWuz3GefvW+vZz9LsNDfmTuHUlxWFg3fth0yt1Hom0i5WAm 2BJWBreifgyFftoNXtn85F4LwDqaJsDU4est7kJw/rRNoHvXA2TPhWLf2GEz+N/f +UZK5vOcxA5ep+3FD3BGkYJEChBIAUZwHWmE0B+qTND4O/JE5NFdJYXXXBNeelR+ zYwqKa2ylUQGNiSajNzlqqm9TYg0Jqc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:53:16 2025 by rpki-client