$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: huLEZfZcKR3vBvqBGN60wh1EgeyTQLJDZIC0RwDVq6s= Subject key identifier: 95:BF:DF:52:86:50:A7:C5:29:30:9F:14:31:60:98:31:8B:AC:9D:37 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 06F3 Signing time: Tue 04 Nov 2025 22:08:48 +0000 Manifest this update: Tue 04 Nov 2025 22:08:47 +0000 Manifest next update: Tue 11 Nov 2025 22:08:47 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: 1pFWjZrYOp4Vy3I1e/jktsqWxgcGmfKOnWU9in7nDWc=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: Y3wS66fd5YHhzaA4qhuEKsiBBLTblPlxdtXJBZSBnBU=) 3: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (hash: obljP3RXfrVGEpE3yYP91fJo6xaTDVgNzc+FKAwytnw=) 4: E959541EB28511ED8893C51CC4F9AE02.roa (hash: tDIvvxPbUPRWOTPf8MK/oVddDXGtUARS3nkFkQGylVE=) 5: DFBF8CDC6AF911F08AB48F35C4F9AE02.roa (hash: LvOncBacp+KNSMfj7m7RG6y+20TTs0UeSnhzak3/ObY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Nov 4 22:08:47 2025 GMT Not After : Nov 11 22:08:47 2025 GMT Subject: CN=690a7970-c663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:9c:e8:88:31:76:3b:05:cb:2d:39:c8:49: 01:2e:03:75:b2:c7:c7:09:ea:13:d7:b4:2f:33:03: 98:cf:e4:f8:0f:d0:ca:14:e2:1e:e3:e3:41:c8:f5: 66:5e:63:97:31:ed:60:7c:ff:b9:65:17:65:5f:80: df:aa:3d:85:8e:03:76:b6:a4:b1:c6:a0:76:ce:6d: 29:33:d0:0d:ff:ad:b5:af:8b:01:a0:26:b3:e7:98: c4:fa:4c:1a:9d:40:0f:34:78:32:ff:86:e7:e9:e4: f7:e1:dd:be:ec:4f:cc:1f:b1:49:e2:c8:46:0a:8e: 16:fb:e1:fa:6f:4d:21:75:50:9d:61:14:26:a9:11: 5c:d8:55:ff:08:92:10:92:18:fb:d7:55:6e:d3:85: 9d:da:b3:74:eb:9d:41:c0:1d:a5:27:ce:1b:7a:4d: e3:78:c6:69:a1:2f:a3:d5:15:68:91:32:d3:7b:a6: 15:12:c5:5b:ad:4a:7a:00:23:d7:28:72:c6:36:61: 6c:cd:18:6c:ec:d3:74:48:88:9d:b8:88:f4:63:be: b9:49:33:17:a9:06:15:95:bf:93:8e:5e:09:2d:4f: 9f:3d:c8:0d:7d:89:6f:fa:02:8a:a1:e0:07:20:70: 25:a4:fa:31:26:a2:ae:35:38:da:0c:1c:c5:99:b4: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BF:DF:52:86:50:A7:C5:29:30:9F:14:31:60:98:31:8B:AC:9D:37 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:58:fe:fc:75:d8:32:04:87:d5:16:e1:c5:11:d9:95:54:12: 0b:9c:85:a9:08:07:2f:81:4a:5b:d1:af:53:b9:93:91:13:55: 2b:6e:32:78:b6:bc:3b:d6:11:ec:ab:fc:e2:22:4d:7c:11:8f: 64:e2:7e:58:71:4e:36:a4:57:6e:f1:4f:0e:5c:84:ed:83:63: f4:0a:ea:e7:8c:7b:ef:bb:cc:d2:ec:8e:0e:52:5c:a1:b2:aa: 62:02:f5:93:13:47:81:c4:c8:d1:12:46:60:d2:b6:e6:5a:be: 3b:1a:fa:3f:e3:b4:f0:20:41:22:4a:49:c1:ba:da:ed:05:a1: 30:b4:36:29:30:2c:62:df:81:18:d9:9d:b9:ce:66:69:d4:90: e1:a9:13:e7:4b:fe:63:63:5e:6f:a8:18:ea:eb:82:69:28:6d: 04:5e:2e:43:ad:e4:9e:d9:19:c5:13:8e:5a:57:7c:32:2b:54: 30:50:69:80:76:2d:6e:ed:6f:aa:0c:ea:29:c2:a2:c8:15:e0: 20:eb:61:4a:0f:e6:7a:41:06:1a:9b:ac:b1:d5:c7:26:f4:07: c0:9d:73:de:b0:63:a7:6c:30:84:66:1f:ba:ab:b7:19:e7:c2: e8:71:d4:c2:30:72:5e:29:1c:3e:f2:86:2c:4c:16:71:97:1d: 23:6d:54:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUxMTA0MjIwODQ3WhcNMjUxMTExMjIwODQ3WjAYMRYwFAYD VQQDEw02OTBhNzk3MC1jNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT6c6IgxdjsFyy05yEkBLgN1ssfHCeoT17QvMwOYz+T4D9DKFOIe4+NByPVm XmOXMe1gfP+5ZRdlX4Dfqj2FjgN2tqSxxqB2zm0pM9AN/621r4sBoCaz55jE+kwa nUAPNHgy/4bn6eT34d2+7E/MH7FJ4shGCo4W++H6b00hdVCdYRQmqRFc2FX/CJIQ khj711Vu04Wd2rN0651BwB2lJ84bek3jeMZpoS+j1RVokTLTe6YVEsVbrUp6ACPX KHLGNmFszRhs7NN0SIiduIj0Y765STMXqQYVlb+Tjl4JLU+fPcgNfYlv+gKKoeAH IHAlpPoxJqKuNTjaDBzFmbTuwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJW/31KG UKfFKTCfFDFgmDGLrJ03MB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApWP78ddgyBIfVFuHFEdmVVBILnIWpCAcvgUpb0a9TuZORE1UrbjJ4 trw71hHsq/ziIk18EY9k4n5YcU42pFdu8U8OXITtg2P0CurnjHvvu8zS7I4OUlyh sqpiAvWTE0eBxMjREkZg0rbmWr47Gvo/47TwIEEiSknButrtBaEwtDYpMCxi34EY 2Z25zmZp1JDhqRPnS/5jY15vqBjq64JpKG0EXi5DreSe2RnFE45aV3wyK1QwUGmA di1u7W+qDOopwqLIFeAg62FKD+Z6QQYam6yx1ccm9AfAnXPesGOnbDCEZh+6q7cZ 58LocdTCMHJeKRw+8oYsTBZxlx0jbVQm -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:58 2025 by rpki-client