$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: wHm5d+g3eZQ9FEEMp+jTXkathcRhp22vWvq30W2hnqk= Subject key identifier: 99:68:CE:E6:6F:FF:DF:B5:36:15:40:88:14:05:0E:7B:57:19:BF:E5 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 1265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 1243 Signing time: Tue 04 Nov 2025 17:13:30 +0000 Manifest this update: Tue 04 Nov 2025 17:13:30 +0000 Manifest next update: Tue 11 Nov 2025 17:13:30 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: 6wP29s6yS4xq9lYphWpHQDp4SgComsgR2Nfvfz8vAjg=) 2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: IlsMtwiQzSq4LTeLK5xGeprYL7keFREC86Udlg/108c=) 3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: Ra6HDO1XoeogbYK2SKPiF6ZGlKvyMdWPBrFkbBpAK0o=) 4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: hm02D0CoN1wXYmBN20AJ0Eit445l76gPSN2cqsUGYq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4709 (0x1265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Nov 4 17:13:30 2025 GMT Not After : Nov 11 17:13:30 2025 GMT Subject: CN=690a343a-bcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:59:ca:df:7d:df:63:76:bf:cb:68:7c:bc:48: 9f:ac:2f:60:2b:eb:09:d1:4b:59:72:1a:a4:23:48: f0:e4:1d:af:ec:08:b7:83:23:0d:e1:d3:b7:86:d2: b2:23:85:7c:09:3a:14:de:76:04:8c:21:a3:60:ce: d5:cf:dd:98:af:d8:39:2a:d6:e7:55:4b:dc:17:4c: fb:97:38:b1:00:7a:a7:ce:ad:9c:73:ff:e0:d8:70: 87:7e:fd:b3:11:0a:eb:4e:7a:de:9f:06:eb:fb:50: 4e:fb:51:28:74:98:70:e4:52:f1:3a:dd:b6:9f:1b: 66:f5:e9:19:78:56:f4:57:bc:54:48:cd:01:6e:f8: 30:0e:33:c8:ad:a4:01:4a:91:0d:e9:f1:b4:22:75: 7e:bd:9e:5e:5c:36:95:60:a3:ac:f9:92:f5:df:a0: 7e:24:8e:f3:93:0a:cd:92:7d:3e:06:83:6c:c0:f1: 9d:0b:a1:21:c5:fd:48:89:3a:f3:3b:c8:c4:46:c3: 1f:bc:f3:28:ce:88:80:de:14:bf:60:d9:c0:80:04: e9:68:67:ad:20:80:62:60:8f:8e:43:82:51:8e:e0: c0:bf:f9:04:f7:e5:a3:65:cc:c6:83:0c:d9:4e:fc: 64:cb:1c:22:07:8f:aa:7e:7e:4a:b2:54:25:f8:aa: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:68:CE:E6:6F:FF:DF:B5:36:15:40:88:14:05:0E:7B:57:19:BF:E5 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:08:d2:a0:2d:56:27:e0:69:03:71:40:70:4e:86:41:f9:6e: b3:0b:96:20:68:db:56:7f:ec:16:eb:11:fa:73:3f:3a:f1:78: 21:77:db:3f:d5:e1:d2:33:42:a4:81:9b:e9:ac:30:8c:0b:2a: 62:56:aa:6e:a1:13:96:85:8c:45:4f:d5:3b:a4:e0:d3:6f:54: 28:43:7b:c1:6b:c1:9d:5a:18:66:de:bd:86:5d:9a:e9:e8:36: b5:58:f2:68:77:7e:19:0a:48:fa:03:3b:8c:29:69:a1:a0:00: aa:79:0d:13:87:e6:e8:27:c9:52:50:7b:ed:06:45:fc:04:04: 21:e0:a2:3e:77:b0:9e:86:65:c7:1e:25:75:88:23:f2:41:47: dd:8e:6c:26:95:58:c9:e3:85:05:52:6b:2c:e3:c0:00:07:86: 59:1b:0a:05:d7:6d:62:1b:9f:15:b2:a2:85:75:09:d7:be:e7: 55:81:87:a8:c1:d8:c5:55:0e:b3:c0:c3:44:84:96:73:70:b4: 12:9c:e9:69:ff:27:f5:ab:44:7a:b5:49:15:8a:e3:8c:6f:37: 8a:8f:7d:57:e3:00:0f:cb:0d:1d:69:a5:b7:93:91:31:3f:25: 94:53:43:fa:46:04:90:b3:83:13:61:4d:58:14:ac:ea:bc:47: 16:f2:93:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjUxMTA0MTcxMzMwWhcNMjUxMTExMTcxMzMwWjAYMRYwFAYD VQQDEw02OTBhMzQzYS1iY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FnK333fY3a/y2h8vEifrC9gK+sJ0UtZchqkI0jw5B2v7Ai3gyMN4dO3htKy I4V8CToU3nYEjCGjYM7Vz92Yr9g5KtbnVUvcF0z7lzixAHqnzq2cc//g2HCHfv2z EQrrTnrenwbr+1BO+1EodJhw5FLxOt22nxtm9ekZeFb0V7xUSM0BbvgwDjPIraQB SpEN6fG0InV+vZ5eXDaVYKOs+ZL136B+JI7zkwrNkn0+BoNswPGdC6Ehxf1IiTrz O8jERsMfvPMozoiA3hS/YNnAgATpaGetIIBiYI+OQ4JRjuDAv/kE9+WjZczGgwzZ TvxkyxwiB4+qfn5KslQl+KrbmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlozuZv /9+1NhVAiBQFDntXGb/lMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1CNKgLVYn4GkDcUBwToZB+W6zC5YgaNtWf+wW6xH6cz868Xghd9s/ 1eHSM0KkgZvprDCMCypiVqpuoROWhYxFT9U7pODTb1QoQ3vBa8GdWhhm3r2GXZrp 6Da1WPJod34ZCkj6AzuMKWmhoACqeQ0Th+boJ8lSUHvtBkX8BAQh4KI+d7CehmXH HiV1iCPyQUfdjmwmlVjJ44UFUmss48AAB4ZZGwoF121iG58VsqKFdQnXvudVgYeo wdjFVQ6zwMNEhJZzcLQSnOlp/yf1q0R6tUkViuOMbzeKj31X4wAPyw0daaW3k5Ex PyWUU0P6RgSQs4MTYU1YFKzqvEcW8pPm -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:36 2025 by rpki-client