$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: UUVzDqlD9aUUXwQiLHpz+ZH1KwZq2VyqQ6uUvA6CpOs= Subject key identifier: 30:9F:E3:85:8B:48:48:4E:32:EE:11:AE:9F:2B:DE:3E:D4:F9:64:CF Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 59 Signing time: Mon 03 Nov 2025 07:09:52 +0000 Manifest this update: Mon 03 Nov 2025 07:09:52 +0000 Manifest next update: Mon 10 Nov 2025 07:09:52 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: gCdrdFWLicGWAba1sl8IE9ycpK6SpaVd3iflSNXOCow=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Nov 3 07:09:52 2025 GMT Not After : Nov 10 07:09:52 2025 GMT Subject: CN=69085540-6b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:19:89:31:4e:60:6b:0e:6d:15:e7:a4:c8: 7b:4b:0e:59:b6:4c:f3:2a:1e:05:64:4c:aa:06:63: ba:73:90:a9:55:23:a1:be:f7:f5:a3:e7:75:2e:70: 75:48:76:f9:08:be:5a:b9:97:2f:b4:6c:80:14:d1: c7:64:99:54:1d:5f:b5:a6:a0:f7:37:ca:9a:16:dc: 92:ab:39:17:69:2e:78:69:79:eb:18:5a:f7:dd:3f: 02:3d:ae:b3:b4:49:87:02:77:59:b6:b6:46:7a:45: 85:57:77:e2:e4:a4:0c:3a:9a:59:c8:cd:67:f5:98: 5c:91:a6:84:a2:2c:8c:b2:ad:ef:ff:83:51:00:24: f9:8a:1d:de:17:c9:5b:f5:86:ff:72:a1:3c:ae:ee: 9a:e2:4a:2a:bc:18:19:ec:5d:8b:80:3b:57:d7:00: cf:7c:5d:bf:f7:47:c0:df:64:3a:e7:93:a3:ea:16: 92:f4:2d:29:79:20:32:9c:41:0a:1c:26:45:8f:e0: 5d:71:c3:05:76:c7:18:2c:b6:25:9c:ee:b9:76:b9: a2:74:7c:73:da:8c:1c:71:01:3e:84:5d:30:f3:18: 97:2a:56:1c:d6:db:4c:f1:9f:9c:70:de:d8:55:02: 61:42:fd:8d:21:b8:33:10:67:a6:b3:b3:80:d3:5c: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9F:E3:85:8B:48:48:4E:32:EE:11:AE:9F:2B:DE:3E:D4:F9:64:CF X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6e:d7:38:4d:05:8a:d5:0b:0e:d4:4f:b6:6e:d1:29:95:51: 26:95:8e:71:24:30:8d:84:30:d6:2b:0c:ae:51:48:9e:1e:4e: dd:71:79:5a:26:12:e7:a1:eb:83:6d:fe:45:ab:19:ea:03:01: 09:b6:6c:1c:40:96:e0:3d:11:71:c3:eb:31:e0:ce:66:60:93: 2a:a4:8a:0d:6c:66:4c:90:dc:ba:cd:dc:2f:53:30:e9:7b:2d: 55:e6:6c:fb:c2:37:02:c5:a0:23:06:be:98:1e:98:5d:72:82: aa:d3:68:cf:d7:cf:78:a2:99:63:5d:f0:99:da:6e:e0:ce:45: 46:17:28:c4:08:51:59:b2:1d:fc:06:74:81:84:41:3a:ea:e6: 9c:95:74:c8:ba:ef:e5:d5:7e:fb:7e:b2:78:fe:c4:67:ae:ea: 60:b6:f6:35:aa:50:50:97:38:58:df:6e:8b:5f:64:80:81:e4: 79:6a:03:a9:db:d8:f4:3f:08:33:58:52:62:ff:d8:8f:df:e2: 2d:6e:b8:88:1e:6b:57:f3:e4:c3:56:75:f1:59:51:6a:10:6c: b5:61:4d:ca:02:cb:9c:53:29:94:26:5b:8c:2c:cb:fa:15:3b: b6:16:31:8c:59:7e:eb:1a:43:e0:d4:53:3e:9e:10:db:30:aa: d8:2b:df:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTExMDMwNzA5NTJaFw0yNTExMTAwNzA5NTJaMBgxFjAUBgNV BAMTDTY5MDg1NTQwLTZiNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPwhmJMU5gaw5tFeekyHtLDlm2TPMqHgVkTKoGY7pzkKlVI6G+9/Wj53UucHVI dvkIvlq5ly+0bIAU0cdkmVQdX7WmoPc3ypoW3JKrORdpLnhpeesYWvfdPwI9rrO0 SYcCd1m2tkZ6RYVXd+LkpAw6mlnIzWf1mFyRpoSiLIyyre//g1EAJPmKHd4XyVv1 hv9yoTyu7priSiq8GBnsXYuAO1fXAM98Xb/3R8DfZDrnk6PqFpL0LSl5IDKcQQoc JkWP4F1xwwV2xxgstiWc7rl2uaJ0fHPajBxxAT6EXTDzGJcqVhzW20zxn5xw3thV AmFC/Y0huDMQZ6azs4DTXJINAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMJ/jhYtI SE4y7hGunyvePtT5ZM8wHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBu1zhNBYrVCw7UT7Zu0SmVUSaVjnEkMI2EMNYrDK5RSJ4eTt1xeVom Eueh64Nt/kWrGeoDAQm2bBxAluA9EXHD6zHgzmZgkyqkig1sZkyQ3LrN3C9TMOl7 LVXmbPvCNwLFoCMGvpgemF1ygqrTaM/Xz3iimWNd8JnabuDORUYXKMQIUVmyHfwG dIGEQTrq5pyVdMi67+XVfvt+snj+xGeu6mC29jWqUFCXOFjfbotfZICB5HlqA6nb 2PQ/CDNYUmL/2I/f4i1uuIgea1fz5MNWdfFZUWoQbLVhTcoCy5xTKZQmW4wsy/oV O7YWMYxZfusaQ+DUUz6eENswqtgr38A= -----END CERTIFICATE-----Generated at Wed Nov 5 07:34:58 2025 by rpki-client