$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: vOtPmqckeGCnY2LAyFLC3LXLqUIPJGOyX3i6IuGGaKY= Subject key identifier: 2F:91:6C:6D:6D:3A:FD:A2:1A:A4:20:1D:DF:D6:FC:F1:59:66:F2:00 Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: AE Signing time: Wed 05 Nov 2025 06:21:19 +0000 Manifest this update: Wed 05 Nov 2025 06:21:18 +0000 Manifest next update: Wed 12 Nov 2025 06:21:18 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: yMu9H11GScuOxMe8/njmGc7lKkQzUfufufbN154Uf+4=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Nov 5 06:21:18 2025 GMT Not After : Nov 12 06:21:18 2025 GMT Subject: CN=690aecde-3abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:c5:64:62:00:9d:47:27:e9:18:3e:11:e9: f7:17:43:18:fa:1b:9f:c6:17:bd:23:4d:33:cf:a8: 53:7c:51:b2:1a:b4:c5:a2:d6:ff:87:82:56:83:6a: 42:81:1e:92:cb:2f:bf:c9:6c:ce:ea:cb:ab:44:fc: 80:63:de:27:70:eb:a8:c7:3a:6b:3f:04:1d:df:c7: 96:7c:6f:01:34:f1:33:82:ba:2e:4c:96:58:77:86: 34:0f:c5:85:64:1a:ab:dd:49:da:c4:0c:9c:49:74: a8:45:4a:ac:9b:6a:ff:af:62:82:84:9c:be:61:88: 97:77:21:5a:07:e0:f8:da:ac:b2:31:a4:61:6c:59: 32:19:4a:d3:b3:43:32:c9:5e:84:5b:4a:84:2f:12: f0:fc:d6:02:84:67:a7:79:61:da:c8:6d:ca:77:ed: 80:a9:66:14:70:1b:ea:06:49:23:42:36:a6:99:92: 83:03:a6:e1:5f:b9:0c:c8:57:8c:84:1f:44:cf:e0: e9:1f:84:45:ab:51:fa:aa:cc:7a:70:46:5f:c1:63: 36:f1:d3:d6:c8:05:97:7a:95:f6:40:8d:26:1e:c7: f7:c1:31:cd:b5:bf:24:bc:aa:c1:c2:fd:31:ae:79: c5:a9:7b:ba:e6:8b:9b:d2:63:a7:d5:87:1c:9a:c2: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:6C:6D:6D:3A:FD:A2:1A:A4:20:1D:DF:D6:FC:F1:59:66:F2:00 X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:58:b8:d3:c1:4b:55:cc:0c:33:70:04:bc:d1:c5:b2:ef:de: cb:ee:db:e5:62:82:6a:57:18:78:7f:7a:4a:8c:2a:e1:10:d6: 15:66:fc:04:7d:e4:ee:7d:57:a0:59:59:4f:44:1f:f9:3d:ed: 33:04:e9:34:d7:95:8c:37:57:bd:33:27:f6:48:6c:ca:62:aa: 47:11:07:8b:9d:b4:b2:86:22:41:4f:0f:30:8a:90:c6:86:e2: b8:b1:7e:37:8f:73:96:b7:d0:55:05:53:75:3c:0d:ab:e9:d4: 98:1d:fa:26:4b:17:e4:13:c4:55:31:c0:ef:25:77:ee:a3:a4: e2:b8:da:a3:d0:31:d1:ab:c4:e8:a0:18:7c:27:3d:5c:46:ed: f5:4e:d9:8f:dc:61:33:47:7b:65:f8:e8:c3:a0:db:c6:8d:a2: b8:3e:4b:f3:4d:33:0f:0a:f7:60:d9:9c:f2:99:c6:53:b0:6c: 9c:b3:e1:30:e6:e5:c8:6c:4b:a5:a9:99:64:4a:af:46:4c:de: 7b:6c:5d:10:92:39:7e:e9:98:43:94:e7:34:79:0a:46:11:69: c4:46:b0:01:c8:4b:8c:b1:c6:ed:76:b3:bf:67:70:50:1e:00: a1:cb:5b:4e:60:c9:dd:82:36:23:f2:ad:3c:c5:92:52:12:83: dd:a1:76:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKDY5MjM2RTU5OTYzMDBBMkZENzg1RUY4NTc4M0M1QzI5 QzVCNEU4NzQwHhcNMjUxMTA1MDYyMTE4WhcNMjUxMTEyMDYyMTE4WjAYMRYwFAYD VQQDEw02OTBhZWNkZS0zYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZXFZGIAnUcn6Rg+Een3F0MY+hufxhe9I00zz6hTfFGyGrTFotb/h4JWg2pC gR6Syy+/yWzO6surRPyAY94ncOuoxzprPwQd38eWfG8BNPEzgrouTJZYd4Y0D8WF ZBqr3UnaxAycSXSoRUqsm2r/r2KChJy+YYiXdyFaB+D42qyyMaRhbFkyGUrTs0My yV6EW0qELxLw/NYChGeneWHayG3Kd+2AqWYUcBvqBkkjQjammZKDA6bhX7kMyFeM hB9Ez+DpH4RFq1H6qsx6cEZfwWM28dPWyAWXepX2QI0mHsf3wTHNtb8kvKrBwv0x rnnFqXu65oub0mOn1YccmsJYYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+RbG1t Ov2iGqQgHd/W/PFZZvIAMB8GA1UdIwQYMBaAFGkjblmWMAov14XvhXg8XCnFtOh0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GMEU3NkUxMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0NpX1hoZS1GZUR4Y0tjVzA2 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GMEU3NkUxMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0Np X1hoZS1GZUR4Y0tjVzA2SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqWLjTwUtVzAwzcAS80cWy797L7tvlYoJqVxh4f3pKjCrhENYVZvwE feTufVegWVlPRB/5Pe0zBOk015WMN1e9Myf2SGzKYqpHEQeLnbSyhiJBTw8wipDG huK4sX43j3OWt9BVBVN1PA2r6dSYHfomSxfkE8RVMcDvJXfuo6TiuNqj0DHRq8To oBh8Jz1cRu31TtmP3GEzR3tl+OjDoNvGjaK4PkvzTTMPCvdg2ZzymcZTsGycs+Ew 5uXIbEulqZlkSq9GTN57bF0Qkjl+6ZhDlOc0eQpGEWnERrAByEuMscbtdrO/Z3BQ HgChy1tOYMndgjYj8q08xZJSEoPdoXbW -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:20 2025 by rpki-client