$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: 0lBaV/JayswDdAlLt9FcOcn3+ELkZXjOa5TaIuwjRas= Subject key identifier: 8E:FF:83:AC:F1:22:30:02:E4:76:CA:54:22:0A:E4:8C:7A:BE:13:F5 Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0BE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0BB7 Signing time: Sun 02 Nov 2025 18:58:10 +0000 Manifest this update: Sun 02 Nov 2025 18:58:09 +0000 Manifest next update: Sun 09 Nov 2025 18:58:09 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: JCab4grOP2zVraxEK6SaesR27ow85Q0cB94jscWXgss=) 2: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: riSPm8Um648H2O5onROefisDf6lA1aFxuieJBfuqrKc=) 3: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: jfARn5Pllx6IMjPiI7FxZYgxXYW94DALaj8qH2++9WY=) 4: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: dwF4PLUAXx1X1N5mZQhJUj6aIS0fEqRxQ0gkZCCE5EA=) 5: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: akcNDk8y+ODsfpu3oKFQYxPcSwPpaVaD8Gu1z5j+dkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Nov 2 18:58:09 2025 GMT Not After : Nov 9 18:58:09 2025 GMT Subject: CN=6907a9c2-e93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e7:79:86:03:78:c5:a1:cd:c3:a8:8d:8c:78: 25:a0:97:de:9c:bc:fa:e5:4c:5c:7f:e0:68:7f:fb: 00:1b:3b:87:4c:3b:7f:62:51:94:62:a5:66:e7:0b: 21:82:0b:5b:5f:d9:ff:3f:55:2c:a4:4b:df:8f:05: bd:21:10:68:5b:4c:46:b3:57:5b:b2:ba:86:2c:53: 36:d8:b5:94:ff:2a:49:73:13:d8:a6:c9:71:18:54: b8:77:b4:70:c7:e2:d3:82:fa:9e:aa:fd:5e:0f:15: d3:ef:38:8b:96:9a:ab:c6:fb:b9:22:3e:d1:ac:27: 92:aa:9c:12:0b:a9:3f:22:b5:ad:a9:af:e5:29:b8: 6b:cd:ad:07:d8:db:47:35:36:28:95:48:37:df:89: 73:8d:c6:b3:e1:8a:7a:b8:fb:d7:ee:34:c7:8c:6f: 94:90:c0:af:82:35:89:5d:f9:56:76:00:af:be:00: f1:ad:b9:50:58:98:51:4c:a0:c8:e6:8c:fe:a0:42: df:74:3d:af:3d:86:2d:78:36:11:fa:c2:53:ef:d6: bd:f3:15:6f:ed:28:89:24:fe:7e:3a:44:63:0f:ab: 4c:35:52:c7:28:e4:98:ad:26:34:a8:8d:99:4c:db: a8:40:89:bc:b2:9d:16:e8:41:e9:f1:40:1f:1a:97: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FF:83:AC:F1:22:30:02:E4:76:CA:54:22:0A:E4:8C:7A:BE:13:F5 X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ca:4c:2f:65:bc:1a:c3:a0:92:b0:ac:e4:60:17:75:81:06: 1c:6a:e6:e4:c7:16:37:98:b7:0c:14:74:a7:97:e5:56:e2:e7: a8:e3:c8:1b:73:37:58:9f:58:76:4b:1c:48:cb:dd:21:1b:75: 93:cb:f8:1c:ce:07:a0:d3:4c:53:b0:19:94:80:4f:2f:8a:a2: 38:e1:a8:3d:b3:25:80:42:ca:8f:20:4e:2c:4f:ef:f8:fa:f5: 12:b7:dc:c5:c8:4f:24:54:b8:eb:e0:9b:93:87:a9:37:ee:2e: dc:eb:6d:6f:77:61:e2:d7:8b:e1:23:f8:d8:70:c2:ec:29:87: 3c:28:29:78:dc:db:1f:7e:ba:7f:b5:ad:8e:fd:08:9a:33:c6: ad:9a:44:49:8e:6a:02:72:4e:30:fb:31:b2:90:58:b3:c6:60: 7b:37:e3:65:ae:6e:53:b9:17:ce:a3:bb:62:56:82:c0:db:f6: 25:b6:2f:31:52:bc:ed:09:61:98:8c:d2:07:36:04:38:7e:25: cc:c7:d6:8c:9b:6a:fe:e2:01:a3:a1:7e:ad:67:fe:b7:b1:63: ba:57:b4:44:f8:40:e5:db:47:5e:89:69:71:d3:2f:b9:d2:7f: 63:39:5a:5b:e8:81:b7:d1:dd:47:53:6a:3e:2c:9e:ad:2e:97: 8b:f4:e0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUxMTAyMTg1ODA5WhcNMjUxMTA5MTg1ODA5WjAYMRYwFAYD VQQDEw02OTA3YTljMi1lOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ed5hgN4xaHNw6iNjHgloJfenLz65Uxcf+Bof/sAGzuHTDt/YlGUYqVm5wsh ggtbX9n/P1UspEvfjwW9IRBoW0xGs1dbsrqGLFM22LWU/ypJcxPYpslxGFS4d7Rw x+LTgvqeqv1eDxXT7ziLlpqrxvu5Ij7RrCeSqpwSC6k/IrWtqa/lKbhrza0H2NtH NTYolUg334lzjcaz4Yp6uPvX7jTHjG+UkMCvgjWJXflWdgCvvgDxrblQWJhRTKDI 5oz+oELfdD2vPYYteDYR+sJT79a98xVv7SiJJP5+OkRjD6tMNVLHKOSYrSY0qI2Z TNuoQIm8sp0W6EHp8UAfGpf9nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7/g6zx IjAC5HbKVCIK5Ix6vhP1MB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtykwvZbwaw6CSsKzkYBd1gQYcaubkxxY3mLcMFHSnl+VW4ueo48gb czdYn1h2SxxIy90hG3WTy/gczgeg00xTsBmUgE8viqI44ag9syWAQsqPIE4sT+/4 +vUSt9zFyE8kVLjr4JuTh6k37i7c621vd2Hi14vhI/jYcMLsKYc8KCl43Nsffrp/ ta2O/QiaM8atmkRJjmoCck4w+zGykFizxmB7N+Nlrm5TuRfOo7tiVoLA2/Ylti8x UrztCWGYjNIHNgQ4fiXMx9aMm2r+4gGjoX6tZ/63sWO6V7RE+EDl20deiWlx0y+5 0n9jOVpb6IG30d1HU2o+LJ6tLpeL9OBL -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:43 2025 by rpki-client