$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json) Hash identifier: t+UVghGkgm780HtBV+1Rpt1pHXY9wzaXhXIEyZFdvZ8= Subject key identifier: C1:DF:1C:1D:1B:BA:70:B0:B2:64:10:4C:59:FC:89:64:5C:68:02:9F Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft Manifest number: 0C8B Signing time: Tue 04 Nov 2025 19:19:44 +0000 Manifest this update: Tue 04 Nov 2025 19:19:43 +0000 Manifest next update: Tue 11 Nov 2025 19:19:43 +0000 Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: JlhxgkDBCWk5mnLAHf+w58+vP/f8ksVgr9GdvvnIobc=) 2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=) 3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=) 4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Validity Not Before: Nov 4 19:19:43 2025 GMT Not After : Nov 11 19:19:43 2025 GMT Subject: CN=690a51d0-df92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:7b:10:80:2d:a8:08:81:3e:3e:ea:a9:b6: 49:4b:91:df:3a:40:c5:d7:1b:2a:2e:03:6d:27:ca: ba:cc:72:40:30:85:f2:07:b9:74:bb:bc:04:7c:f1: 97:fc:d3:9a:86:58:20:fe:95:49:e6:4f:ed:bb:8c: c4:2d:61:ff:fa:16:aa:76:2a:f8:fc:e5:ff:12:ea: 63:bb:c1:f5:9f:4b:e4:53:2e:96:04:86:2a:1a:02: 9d:d9:43:6d:ac:c3:45:e3:40:a0:0a:4a:45:aa:19: 32:16:87:06:3a:93:3e:a2:1e:ca:6e:4e:46:46:14: 60:e1:9d:1c:d3:50:ed:e6:f5:51:45:15:b9:26:f3: d4:13:53:7b:a4:b4:fa:a2:2b:2c:aa:7b:33:d3:a8: 95:72:8a:ff:4f:33:b9:dd:d9:be:f4:51:0b:54:d9: dc:82:db:7d:cd:c4:e2:da:af:3e:ce:a5:b9:35:b9: 1c:7d:23:91:a8:65:c8:ed:b1:69:46:08:99:39:ef: dd:4e:5e:12:ef:e1:f6:83:63:1c:e3:09:03:c1:8a: 2a:0c:db:89:43:eb:47:ca:43:61:a6:b7:b9:48:e8: 64:f3:3b:4e:10:98:11:2e:b7:95:e7:a6:2d:6a:77: 01:b9:80:46:e7:97:09:bd:4f:9a:80:79:f3:31:86: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DF:1C:1D:1B:BA:70:B0:B2:64:10:4C:59:FC:89:64:5C:68:02:9F X509v3 Authority Key Identifier: keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ff:f9:f1:f8:33:01:b2:e6:fd:dd:1d:d8:81:67:f6:69:e0: 42:b5:ad:39:24:fb:de:a8:c1:d5:94:7f:3a:36:26:e1:53:9b: 80:f6:fe:36:fd:13:14:7c:5f:5a:a1:b4:77:d2:be:e1:11:db: 86:e9:80:55:93:02:09:86:b7:4a:9e:58:f9:f9:14:db:15:e2: 0b:dc:8a:b4:47:a8:40:0b:20:ab:97:fc:77:0b:b6:71:3c:d9: e9:18:54:6d:86:84:3f:d0:95:ec:1f:19:49:7a:87:92:63:f2: 65:0e:c6:a0:d7:aa:c6:d2:b1:bc:20:7c:28:fe:ff:dc:3e:82: a8:e2:e0:cd:64:c3:c4:57:82:65:ec:d8:e3:7b:d6:f5:90:91: 1f:9e:1c:03:f8:d1:34:66:bb:71:c2:df:1d:c6:bb:69:4d:80: 8f:e3:4e:2d:09:fb:42:af:b1:6c:ee:7e:33:bd:e2:98:44:ea: 01:88:34:04:93:cc:22:59:53:a8:66:2d:b5:26:8e:cb:37:ee: 4f:12:9e:bc:63:15:90:e7:d7:6e:d4:8f:38:a2:d8:e7:45:3b: cb:75:f5:7b:5b:9c:8f:5e:c1:dc:5e:db:fa:4f:01:95:b4:67: 02:e8:ad:7f:66:79:4f:22:36:2d:4a:26:ee:83:7f:c0:22:4a: 12:d0:eb:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC RTJDQUIxRTYwHhcNMjUxMTA0MTkxOTQzWhcNMjUxMTExMTkxOTQzWjAYMRYwFAYD VQQDEw02OTBhNTFkMC1kZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5Z7EIAtqAiBPj7qqbZJS5HfOkDF1xsqLgNtJ8q6zHJAMIXyB7l0u7wEfPGX /NOahlgg/pVJ5k/tu4zELWH/+haqdir4/OX/Eupju8H1n0vkUy6WBIYqGgKd2UNt rMNF40CgCkpFqhkyFocGOpM+oh7Kbk5GRhRg4Z0c01Dt5vVRRRW5JvPUE1N7pLT6 oissqnsz06iVcor/TzO53dm+9FELVNncgtt9zcTi2q8+zqW5NbkcfSORqGXI7bFp RgiZOe/dTl4S7+H2g2Mc4wkDwYoqDNuJQ+tHykNhpre5SOhk8ztOEJgRLreV56Yt ancBuYBG55cJvU+agHnzMYbZZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHfHB0b unCwsmQQTFn8iWRcaAKfMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3 MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL QVNBQkIybVI5WnEtTEtzZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs//nx+DMBsub93R3YgWf2aeBCta05JPveqMHVlH86NibhU5uA9v42 /RMUfF9aobR30r7hEduG6YBVkwIJhrdKnlj5+RTbFeIL3Iq0R6hACyCrl/x3C7Zx PNnpGFRthoQ/0JXsHxlJeoeSY/JlDsag16rG0rG8IHwo/v/cPoKo4uDNZMPEV4Jl 7Njje9b1kJEfnhwD+NE0Zrtxwt8dxrtpTYCP404tCftCr7Fs7n4zveKYROoBiDQE k8wiWVOoZi21Jo7LN+5PEp68YxWQ59du1I84otjnRTvLdfV7W5yPXsHcXtv6TwGV tGcC6K1/ZnlPIjYtSibug3/AIkoS0OvB -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:23 2025 by rpki-client