$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: b5su/hjhz1XYTkGL3FiYAQnLGiA8f5v5ORZk33O1b+M= Subject key identifier: B3:C0:54:2C:E7:8C:98:27:16:70:5B:6E:B9:B1:B1:45:8F:9F:32:22 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 27DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2785 Signing time: Thu 06 Nov 2025 15:24:11 +0000 Manifest this update: Thu 06 Nov 2025 15:24:10 +0000 Manifest next update: Thu 13 Nov 2025 15:24:10 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: QdRwSUeAYvyOpvuy3BUaYeJf1y6QnwMX5xK8aEGj2sU=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: tAGi/sSZ9el7Z/s+1sNJT90gzy4cpKpqrErB6Bm68K0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 15:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10202 (0x27da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Nov 6 15:24:10 2025 GMT Not After : Nov 13 15:24:10 2025 GMT Subject: CN=690cbd9b-3e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:8f:17:dc:53:49:3a:71:0b:f5:ec:b5:63: 14:7a:a4:e9:83:0f:83:ef:63:0b:c8:4d:5b:f6:cc: 97:63:68:3f:e5:57:69:6f:c7:d4:8e:21:00:5b:f8: cd:41:b8:79:af:d8:32:f1:8f:4d:de:9b:81:01:2e: 70:b6:77:9a:b5:b8:43:20:d5:29:4d:f6:66:0b:75: 95:31:06:a4:90:7c:b4:ec:02:5a:c6:5e:7f:f8:7a: 1c:d7:d1:70:f4:ac:67:a8:c7:f2:b5:ce:bf:f9:a1: d0:2a:eb:82:34:08:3f:45:98:5f:34:a0:3c:af:09: eb:5c:95:ad:5b:54:8e:53:60:6d:62:25:d8:9c:75: 57:81:84:28:85:83:87:56:55:48:cd:95:1e:2a:4d: 29:c2:df:8e:83:9f:ed:12:46:d8:9d:f9:eb:93:b1: 55:e0:e3:af:07:d0:9c:7d:d4:68:cb:0f:f2:c8:42: d2:03:26:52:34:d0:e6:46:b2:8a:20:fb:02:65:cc: 03:5b:20:e3:a5:dc:03:03:cf:59:50:9d:1e:32:11: ad:c8:63:87:e6:e8:55:ee:7f:de:09:e6:d2:e7:11: 3e:ac:91:ef:2c:ac:34:42:cd:12:bc:29:93:34:7b: 4a:6d:13:22:ab:34:99:a5:54:e7:af:b1:3a:1f:d2: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C0:54:2C:E7:8C:98:27:16:70:5B:6E:B9:B1:B1:45:8F:9F:32:22 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:32:18:ed:b0:29:e5:f4:11:78:99:05:4d:cf:b7:2c:40:b8: 7e:04:f4:34:32:fe:43:08:c7:97:fd:0f:e3:3d:09:33:cb:ca: 09:ec:05:8f:ef:e2:16:09:ad:fc:06:ed:9d:62:b6:86:3f:71: 32:1f:32:4f:87:2f:46:53:37:8c:6a:b8:f0:16:2c:d4:78:86: 61:85:8d:a6:66:96:be:f6:2c:5d:06:20:09:5b:64:12:15:bc: eb:57:c9:ae:34:95:2a:f4:eb:41:bc:b5:ee:af:c8:13:56:b9: 20:11:b9:7a:3c:e2:42:38:51:9f:3c:3c:5a:02:16:ea:14:f4: 2c:ef:8e:57:ed:e6:ae:5f:a9:89:2a:62:87:4b:6c:06:66:cc: 1a:8f:a0:91:86:7a:ec:54:32:1b:49:26:2f:7d:15:ce:ea:88: a9:05:1e:6b:fd:7a:28:d0:f2:17:56:5e:4b:4e:15:b0:59:80: 3c:45:42:64:95:6f:cb:0f:12:fb:1c:9e:74:b7:09:33:22:43: 02:8e:5b:05:1a:13:b2:4d:90:57:95:94:ce:2b:e4:14:d8:bb: 9c:ed:2d:d5:f7:b4:50:a9:f2:80:f7:26:86:1c:1e:4b:59:7b: 23:d3:39:53:e1:6d:b0:67:7d:37:48:db:0c:50:f4:03:81:a1: 88:d8:d7:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUxMTA2MTUyNDEwWhcNMjUxMTEzMTUyNDEwWjAYMRYwFAYD VQQDEw02OTBjYmQ5Yi0zZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHGPF9xTSTpxC/XstWMUeqTpgw+D72MLyE1b9syXY2g/5Vdpb8fUjiEAW/jN Qbh5r9gy8Y9N3puBAS5wtneatbhDINUpTfZmC3WVMQakkHy07AJaxl5/+Hoc19Fw 9KxnqMfytc6/+aHQKuuCNAg/RZhfNKA8rwnrXJWtW1SOU2BtYiXYnHVXgYQohYOH VlVIzZUeKk0pwt+Og5/tEkbYnfnrk7FV4OOvB9CcfdRoyw/yyELSAyZSNNDmRrKK IPsCZcwDWyDjpdwDA89ZUJ0eMhGtyGOH5uhV7n/eCebS5xE+rJHvLKw0Qs0SvCmT NHtKbRMiqzSZpVTnr7E6H9JUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPAVCzn jJgnFnBbbrmxsUWPnzIiMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJMhjtsCnl9BF4mQVNz7csQLh+BPQ0Mv5DCMeX/Q/jPQkzy8oJ7AWP 7+IWCa38Bu2dYraGP3EyHzJPhy9GUzeMarjwFizUeIZhhY2mZpa+9ixdBiAJW2QS FbzrV8muNJUq9OtBvLXur8gTVrkgEbl6POJCOFGfPDxaAhbqFPQs745X7eauX6mJ KmKHS2wGZswaj6CRhnrsVDIbSSYvfRXO6oipBR5r/Xoo0PIXVl5LThWwWYA8RUJk lW/LDxL7HJ50twkzIkMCjlsFGhOyTZBXlZTOK+QU2Luc7S3V97RQqfKA9yaGHB5L WXsj0zlT4W2wZ303SNsMUPQDgaGI2Nfh -----END CERTIFICATE-----Generated at Fri Nov 7 16:14:18 2025 by rpki-client