$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: a9inKBDnBa3bQKzMu/HbK6EzKJNlnbRMM5fjJqq1R9k= Subject key identifier: 3E:7F:06:76:B3:FA:72:A7:9D:FE:75:0B:FF:CD:E8:24:1C:31:44:F2 Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 02B0 Signing time: Mon 03 Nov 2025 01:26:33 +0000 Manifest this update: Mon 03 Nov 2025 01:26:33 +0000 Manifest next update: Mon 10 Nov 2025 01:26:33 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: vhsgbmd2YKm/S6ZCdSX1u1ozt5HOIMYgImQi1NGGhGc=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Nov 3 01:26:33 2025 GMT Not After : Nov 10 01:26:33 2025 GMT Subject: CN=690804c9-1266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:78:a8:0c:ce:b1:8a:cf:aa:62:42:07:9c: 08:29:68:c8:26:fb:59:4a:ab:57:2b:58:17:51:db: 96:8e:f1:6d:e3:34:a3:b0:08:c3:1c:9b:87:6a:fd: e9:5d:05:4d:6b:1a:d5:94:8a:1d:f6:cf:7b:fc:7d: 7a:fc:06:6a:17:45:99:04:2d:d6:15:64:34:96:26: a7:66:bc:eb:10:63:4d:2d:ef:a1:45:18:28:fd:90: 8d:00:7b:ea:34:c4:8c:cb:7e:1d:e6:93:1d:a2:be: f6:45:f0:82:38:36:bd:8d:14:6e:a3:1e:66:ec:38: b3:08:41:1c:62:23:1a:97:ba:b4:fb:bd:96:7d:12: ec:4b:d2:e9:df:fb:9d:ea:10:c6:2f:43:5e:c7:e1: d2:57:5e:08:87:c6:f7:23:da:dd:15:a4:0c:c2:db: 6c:9f:ac:69:8b:1c:95:35:90:8f:03:0d:f6:86:6b: b1:fc:21:c8:ca:b2:62:0b:26:65:3a:3e:b1:7e:6c: 87:a5:f8:51:fd:f7:30:22:a9:ce:52:c1:d9:81:a8: a3:49:d9:f1:e0:cf:00:43:9f:8b:b8:ff:d9:18:7a: 85:9c:dd:79:6c:40:f0:d7:c9:0b:e5:9b:0b:b6:b0: ec:c4:52:3b:96:c1:d3:43:a1:6c:35:93:27:5a:64: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:06:76:B3:FA:72:A7:9D:FE:75:0B:FF:CD:E8:24:1C:31:44:F2 X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b8:e5:13:38:2b:61:60:a7:da:1c:84:6f:48:83:6c:3f:1c: 6f:75:2e:5f:63:c6:7a:56:00:c9:4a:a7:0d:63:7e:d0:a9:58: 91:e5:9a:ea:24:7f:34:4b:51:d5:a3:17:e7:cc:7b:d2:aa:ed: 39:7e:bc:51:09:1f:d2:77:8c:89:8e:30:6e:f9:7c:f3:65:14: aa:63:05:b8:71:79:7e:c5:a8:46:f9:89:1b:d5:77:f1:5e:5b: d8:6b:57:14:49:f7:90:38:9d:41:ab:10:c2:c7:03:33:5a:23: 3c:d9:a9:a0:57:00:eb:d1:fa:49:4b:4b:89:6d:b0:ed:8a:39: e1:61:03:32:30:3e:20:34:f1:18:30:b3:0d:30:6c:71:92:8c: ec:8c:68:59:4c:88:d4:b5:55:cc:77:e7:31:9d:30:df:d6:7d: 95:31:dd:1d:c3:e6:63:9b:6f:1b:9b:d6:58:e4:23:03:d3:29: 99:cb:f1:52:22:10:c7:74:35:17:51:49:49:29:fd:36:f9:4e: ea:11:e9:b5:e8:f9:d0:3b:d1:62:14:64:2d:66:5b:5d:8a:2e: 68:28:8c:71:9f:da:07:4e:29:ab:aa:2c:d1:b3:c1:f0:8b:e7: d9:33:22:72:5b:28:99:0e:59:98:a2:5a:32:8f:f5:72:7d:1b: 29:b8:cc:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUxMTAzMDEyNjMzWhcNMjUxMTEwMDEyNjMzWjAYMRYwFAYD VQQDEw02OTA4MDRjOS0xMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhN4qAzOsYrPqmJCB5wIKWjIJvtZSqtXK1gXUduWjvFt4zSjsAjDHJuHav3p XQVNaxrVlIod9s97/H16/AZqF0WZBC3WFWQ0lianZrzrEGNNLe+hRRgo/ZCNAHvq NMSMy34d5pMdor72RfCCODa9jRRuox5m7DizCEEcYiMal7q0+72WfRLsS9Lp3/ud 6hDGL0Nex+HSV14Ih8b3I9rdFaQMwttsn6xpixyVNZCPAw32hmux/CHIyrJiCyZl Oj6xfmyHpfhR/fcwIqnOUsHZgaijSdnx4M8AQ5+LuP/ZGHqFnN15bEDw18kL5ZsL trDsxFI7lsHTQ6FsNZMnWmQKTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5/Bnaz +nKnnf51C//N6CQcMUTyMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHuOUTOCthYKfaHIRvSINsPxxvdS5fY8Z6VgDJSqcNY37QqViR5Zrq JH80S1HVoxfnzHvSqu05frxRCR/Sd4yJjjBu+XzzZRSqYwW4cXl+xahG+Ykb1Xfx XlvYa1cUSfeQOJ1BqxDCxwMzWiM82amgVwDr0fpJS0uJbbDtijnhYQMyMD4gNPEY MLMNMGxxkozsjGhZTIjUtVXMd+cxnTDf1n2VMd0dw+Zjm28bm9ZY5CMD0ymZy/FS IhDHdDUXUUlJKf02+U7qEem16PnQO9FiFGQtZltdii5oKIxxn9oHTimrqizRs8Hw i+fZMyJyWyiZDlmYoloyj/VyfRspuMwV -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:00 2025 by rpki-client