$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: dlt3eZYWxVbeCyGa+/01pojvLFFqRGog7Y7K4yZJicM= Subject key identifier: 68:D6:90:A0:5D:3E:BE:A5:49:5B:28:AC:DF:86:3A:1D:87:4E:2C:30 Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: 010B Signing time: Wed 05 Nov 2025 05:08:09 +0000 Manifest this update: Wed 05 Nov 2025 05:08:08 +0000 Manifest next update: Wed 12 Nov 2025 05:08:08 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: 4MgiQoxA2ayx4pyvv1qoLgBjxSs1iYPaI+RFlJ5UQ1A=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: GcLg66G+nJPqXwCpBzyC3D0WjujSmh3tIwuu+y3/BEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Nov 5 05:08:08 2025 GMT Not After : Nov 12 05:08:08 2025 GMT Subject: CN=690adbb9-ed5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:1e:cf:7b:b9:55:9b:d2:39:c2:be:8f:9a: 95:1b:3d:c0:06:b1:6b:36:e7:28:ef:3a:3b:e1:66: e7:6b:2b:df:3e:03:a2:d3:3d:01:33:8f:b6:62:3c: 93:94:ef:5f:ba:33:a7:6d:c8:ab:17:2d:0f:18:2f: 63:78:75:5c:b6:99:b2:e1:54:1a:ab:66:93:cb:ff: f3:aa:da:e6:e4:39:ea:f0:1a:0c:06:cc:94:f1:70: 3a:e9:ba:07:63:59:7a:be:d1:48:0d:46:e6:13:02: 7f:63:b6:c8:9c:eb:7e:45:84:30:37:7a:00:ef:7d: bc:84:19:12:8f:e0:56:61:86:f1:49:bb:6f:46:4b: 88:a4:1c:1b:e3:41:4f:a9:3a:be:7a:84:dd:b1:aa: 3a:98:9b:dd:1d:81:58:c4:d6:49:ce:21:62:6d:48: f3:38:79:1b:95:1d:7d:6d:49:69:95:8e:66:71:86: 93:e8:69:41:53:56:54:b1:16:f3:53:50:71:6f:c8: 0e:17:ce:27:a4:8c:2a:97:58:e2:d1:de:b5:55:01: 15:7a:1b:10:8b:97:06:94:1e:8f:71:6d:45:4f:3e: 65:5f:b3:64:17:e6:8b:11:45:cf:11:62:b3:f7:c8: db:55:91:64:d8:9b:08:9e:17:c9:dd:17:83:30:a6: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D6:90:A0:5D:3E:BE:A5:49:5B:28:AC:DF:86:3A:1D:87:4E:2C:30 X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ba:11:96:8b:c1:4e:d9:a1:33:05:f3:85:60:4f:32:3a:6a: 22:30:70:44:aa:a4:38:96:18:cb:2f:ec:8a:4d:47:8b:11:99: 5a:28:69:2f:4d:27:8c:cb:92:ff:b5:2c:50:e3:bd:42:2a:2c: 38:a9:f4:35:c8:c0:ee:da:d7:c0:72:0a:bf:8a:45:5d:7b:0e: 23:f6:70:d4:1c:f9:40:15:c1:46:2c:20:20:a8:f2:e8:f6:21: a2:53:16:1b:ab:77:91:3d:89:1b:9d:07:27:c8:23:26:4c:d4: 1e:20:ba:1c:52:98:2d:a5:b0:e7:80:fd:fe:6f:d6:1c:0c:4b: 6a:ee:89:8e:0b:c9:4c:4b:3f:b1:60:2e:e7:db:2c:ce:31:72: 82:ee:a8:44:f2:7a:eb:d2:a5:07:42:09:15:55:12:db:fc:fb: 9e:f5:f0:b2:12:6b:6f:7d:7e:86:f5:50:6a:68:27:c7:44:df: 73:f7:14:44:7e:8d:8b:72:14:a1:c8:66:f2:9f:5a:af:bb:27: 91:bf:98:ed:9e:3e:15:33:61:0d:84:4e:91:01:23:35:da:9e: 85:c1:8b:4a:e3:6b:4f:88:b7:bb:19:d4:20:e6:cb:bd:dc:6e: c6:74:ba:5b:41:ae:3a:0a:d3:8b:d9:8e:66:ea:1c:83:07:88: a6:b0:fc:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUxMTA1MDUwODA4WhcNMjUxMTEyMDUwODA4WjAYMRYwFAYD VQQDEw02OTBhZGJiOS1lZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2koez3u5VZvSOcK+j5qVGz3ABrFrNuco7zo74WbnayvfPgOi0z0BM4+2YjyT lO9fujOnbcirFy0PGC9jeHVctpmy4VQaq2aTy//zqtrm5Dnq8BoMBsyU8XA66boH Y1l6vtFIDUbmEwJ/Y7bInOt+RYQwN3oA7328hBkSj+BWYYbxSbtvRkuIpBwb40FP qTq+eoTdsao6mJvdHYFYxNZJziFibUjzOHkblR19bUlplY5mcYaT6GlBU1ZUsRbz U1Bxb8gOF84npIwql1ji0d61VQEVehsQi5cGlB6PcW1FTz5lX7NkF+aLEUXPEWKz 98jbVZFk2JsInhfJ3ReDMKYvfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjWkKBd Pr6lSVsorN+GOh2HTiwwMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcuhGWi8FO2aEzBfOFYE8yOmoiMHBEqqQ4lhjLL+yKTUeLEZlaKGkv TSeMy5L/tSxQ471CKiw4qfQ1yMDu2tfAcgq/ikVdew4j9nDUHPlAFcFGLCAgqPLo 9iGiUxYbq3eRPYkbnQcnyCMmTNQeILocUpgtpbDngP3+b9YcDEtq7omOC8lMSz+x YC7n2yzOMXKC7qhE8nrr0qUHQgkVVRLb/Pue9fCyEmtvfX6G9VBqaCfHRN9z9xRE fo2LchShyGbyn1qvuyeRv5jtnj4VM2ENhE6RASM12p6FwYtK42tPiLe7GdQg5su9 3G7GdLpbQa46CtOL2Y5m6hyDB4imsPwy -----END CERTIFICATE-----Generated at Wed Nov 5 13:38:06 2025 by rpki-client