$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: TItgVTF5BZmei1tFzhLQp9FB8Lvb4oCHkBTPTZdF+0I= Subject key identifier: 53:AE:EC:C6:9C:CC:5D:B1:92:51:A7:3F:FF:83:DA:C1:E5:9C:68:F6 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 0A2A Signing time: Tue 04 Nov 2025 19:51:47 +0000 Manifest this update: Tue 04 Nov 2025 19:51:47 +0000 Manifest next update: Tue 11 Nov 2025 19:51:47 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: HhFgpHpWtgklrtsj3fDTcPP8GON5GseCr/cvgaYUCpg=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Nov 4 19:51:47 2025 GMT Not After : Nov 11 19:51:47 2025 GMT Subject: CN=690a5953-e632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:5e:da:c8:c5:40:ff:ea:1c:96:14:da:f8: 29:20:8e:f5:f6:77:32:71:7a:98:aa:66:ed:e7:e6: 1b:b1:e8:70:6c:9d:8c:90:56:3c:51:9b:cc:d0:85: 2b:8b:c7:56:8f:b8:8f:11:68:7e:73:3b:1c:5e:97: 7c:f7:ee:1c:a8:35:e5:b3:9f:c1:fb:48:1a:7b:78: 82:5a:c2:2a:2c:5c:aa:31:8d:9f:bb:41:18:0a:eb: 86:b0:98:48:41:eb:35:0e:5e:dd:ab:c4:a1:b5:93: d3:6f:50:f2:8b:45:06:a5:0d:ff:e1:b2:d3:ab:e0: 0d:18:4f:f6:41:7a:14:13:20:ac:6f:23:b9:58:96: d6:50:62:a7:f5:2e:ed:3c:31:dd:55:7e:63:51:47: 1f:9e:85:0f:48:1b:a2:fc:af:77:75:99:4b:b7:7b: 40:0d:6e:eb:73:ea:85:81:4a:6a:82:fb:55:a8:17: c7:a7:1c:55:3f:be:8c:34:9b:62:a9:72:81:f5:96: 23:0c:14:74:c7:12:d6:a9:ec:90:39:9e:62:b7:66: a8:50:2c:dd:32:c2:32:bc:e8:f4:95:9c:06:d3:8d: a0:ef:cb:cb:2f:f3:e7:7e:26:93:81:ff:da:e3:28: 05:5f:c6:ec:1c:ff:65:0b:fd:9c:0a:b9:ca:ef:e5: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AE:EC:C6:9C:CC:5D:B1:92:51:A7:3F:FF:83:DA:C1:E5:9C:68:F6 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9b:f0:89:74:10:a7:77:d7:3b:60:1b:08:64:53:96:ce:5a: d0:be:ea:d2:26:e7:a3:38:19:84:c9:3a:a3:03:d9:c0:fb:07: b2:e3:b4:e1:d7:c1:c2:02:53:47:45:a8:9b:b0:bd:cd:3b:86: 44:15:55:d7:43:cd:82:6c:c9:9c:b8:a9:66:1d:30:18:fe:09: 5d:c3:7d:77:20:dc:d8:f1:ff:a5:c0:6f:b6:44:9f:a4:3d:13: e5:07:fc:4d:31:34:f6:08:c5:48:b1:a7:f4:c4:e6:50:88:f7: 02:89:d6:dc:48:be:c2:bf:01:b5:d0:6c:8a:9a:4c:da:d5:6a: 05:b5:a9:d9:0a:6c:e7:f8:9b:7a:13:0b:a3:94:3a:21:35:0c: f0:bd:66:ed:6f:34:d8:bd:44:77:7f:c4:a9:7a:26:d7:70:93: 77:ea:a4:5a:27:76:79:f0:02:c3:ab:bf:49:80:0c:11:0d:68: ed:e4:57:72:fc:4a:b0:0f:b3:67:84:6b:4b:6a:4e:1d:2c:1e: f4:f2:47:9c:c5:84:64:5f:3e:6f:a7:6d:00:67:d3:f8:06:aa: 05:64:bc:16:6e:16:12:e3:73:ac:03:b6:c8:33:4b:26:b6:96: fe:ca:55:04:ec:1b:ee:c7:7e:db:2d:92:ab:1e:0a:48:74:2c: 43:73:9c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUxMTA0MTk1MTQ3WhcNMjUxMTExMTk1MTQ3WjAYMRYwFAYD VQQDEw02OTBhNTk1My1lNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fBe2sjFQP/qHJYU2vgpII719ncycXqYqmbt5+YbsehwbJ2MkFY8UZvM0IUr i8dWj7iPEWh+czscXpd89+4cqDXls5/B+0gae3iCWsIqLFyqMY2fu0EYCuuGsJhI Qes1Dl7dq8ShtZPTb1Dyi0UGpQ3/4bLTq+ANGE/2QXoUEyCsbyO5WJbWUGKn9S7t PDHdVX5jUUcfnoUPSBui/K93dZlLt3tADW7rc+qFgUpqgvtVqBfHpxxVP76MNJti qXKB9ZYjDBR0xxLWqeyQOZ5it2aoUCzdMsIyvOj0lZwG042g78vLL/PnfiaTgf/a 4ygFX8bsHP9lC/2cCrnK7+Wt/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOu7Mac zF2xklGnP/+D2sHlnGj2MB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRm/CJdBCnd9c7YBsIZFOWzlrQvurSJuejOBmEyTqjA9nA+wey47Th 18HCAlNHRaibsL3NO4ZEFVXXQ82CbMmcuKlmHTAY/gldw313INzY8f+lwG+2RJ+k PRPlB/xNMTT2CMVIsaf0xOZQiPcCidbcSL7CvwG10GyKmkza1WoFtanZCmzn+Jt6 EwujlDohNQzwvWbtbzTYvUR3f8SpeibXcJN36qRaJ3Z58ALDq79JgAwRDWjt5Fdy /EqwD7NnhGtLak4dLB708kecxYRkXz5vp20AZ9P4BqoFZLwWbhYS43OsA7bIM0sm tpb+ylUE7Bvux37bLZKrHgpIdCxDc5xF -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:47 2025 by rpki-client