$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: PIg+zpzkpJJsSqBt2Wpq4MVXHZjOMFT0aYoXI/h3pOA= Subject key identifier: 49:E1:B8:EC:FE:0A:15:9B:88:33:95:65:6E:20:CC:7E:8C:39:A3:90 Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 01CD Signing time: Wed 05 Nov 2025 02:59:19 +0000 Manifest this update: Wed 05 Nov 2025 02:59:19 +0000 Manifest next update: Wed 12 Nov 2025 02:59:19 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: LsLLXtCz1JPiqbBqY7dHb9XrU2Tf6PBAiOVXB3Br4Ok=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: Nov 5 02:59:19 2025 GMT Not After : Nov 12 02:59:19 2025 GMT Subject: CN=690abd87-ee1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:dc:f6:8b:0e:06:25:60:21:e8:0b:4e:3e:a6: 55:98:51:fb:59:86:7e:d2:df:23:36:b7:8e:32:9c: e7:ab:af:af:14:64:18:7d:86:68:40:42:60:36:91: cb:da:8d:d4:2d:19:37:23:82:08:26:b2:d5:b2:ab: dc:bf:7c:3a:26:e7:62:18:e2:e0:ae:e9:19:4f:45: 80:9a:b9:c7:8c:01:03:6d:06:82:57:59:fb:d6:15: 14:00:d5:db:1f:d0:5f:96:49:a0:6e:9b:77:7e:99: 51:f8:b5:d2:38:73:86:6f:56:35:29:5b:97:09:94: e3:34:0b:c5:d8:a8:80:6b:d1:62:ac:82:11:b3:bf: 23:38:c3:c7:7a:12:d8:c5:39:75:17:85:93:87:f3: 0f:c3:ad:b6:22:ff:b1:34:d3:32:af:cd:ba:cf:38: 5e:07:28:f3:1e:5c:22:4e:d5:bc:2d:90:8b:80:7f: df:57:54:bd:09:b4:5b:5d:f8:b0:3a:45:dc:b7:cf: f7:17:9d:68:86:21:a0:5e:67:5f:ba:c9:11:86:ee: d0:4a:46:cb:f0:a7:32:a7:fc:3c:45:b1:35:3c:2c: 2d:17:34:09:30:31:37:a5:23:f9:b0:97:ab:3a:d5: 41:5e:f3:66:04:d0:1e:2d:15:82:26:2e:07:c4:f0: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:B8:EC:FE:0A:15:9B:88:33:95:65:6E:20:CC:7E:8C:39:A3:90 X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:98:c3:57:1a:b8:10:a8:82:6e:fe:e3:5a:6b:03:2f:30:fa: e5:1b:b2:e5:28:0c:3f:41:a8:53:ec:12:e3:6c:e1:7b:b3:a8: 37:72:e9:5e:c3:5a:ab:11:2a:84:75:bc:e5:d0:ac:de:11:0f: 6f:ed:55:28:c5:5f:0b:1f:e0:72:e0:75:e6:c3:72:c1:8a:fe: 95:c7:17:e3:57:48:e0:d2:1b:a0:3c:c4:4d:da:7f:96:f7:53: 14:52:62:65:08:38:35:1f:14:8c:4b:80:92:85:20:02:01:62: 17:59:0a:ce:fe:6a:51:cd:1f:16:55:ae:96:e0:b9:6f:97:f0: df:f9:5d:73:33:27:4d:41:9d:8d:24:9b:a6:ed:8c:4e:61:45: 53:aa:3b:b0:99:9b:3a:ad:7a:ff:42:f0:0a:83:f8:94:dc:7d: 58:ae:be:d4:41:d0:90:65:61:78:82:e4:66:92:bb:d6:ea:a4: 28:4d:3e:56:5c:bd:ac:97:fd:3b:e5:86:2d:2d:10:ab:ed:f8: 0c:de:66:2f:0f:5b:cd:6a:9b:29:0c:87:4d:7d:1a:8e:41:68: aa:e0:6f:9e:c2:c1:89:6d:4b:6c:71:5b:cf:ee:c1:59:1f:b0: a4:24:c9:06:aa:c3:a3:c6:32:c1:87:18:69:2a:0f:b0:99:b0: fe:77:90:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjUxMTA1MDI1OTE5WhcNMjUxMTEyMDI1OTE5WjAYMRYwFAYD VQQDEw02OTBhYmQ4Ny1lZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tz2iw4GJWAh6AtOPqZVmFH7WYZ+0t8jNreOMpznq6+vFGQYfYZoQEJgNpHL 2o3ULRk3I4IIJrLVsqvcv3w6JudiGOLgrukZT0WAmrnHjAEDbQaCV1n71hUUANXb H9Bflkmgbpt3fplR+LXSOHOGb1Y1KVuXCZTjNAvF2KiAa9FirIIRs78jOMPHehLY xTl1F4WTh/MPw622Iv+xNNMyr826zzheByjzHlwiTtW8LZCLgH/fV1S9CbRbXfiw OkXct8/3F51ohiGgXmdfuskRhu7QSkbL8Kcyp/w8RbE1PCwtFzQJMDE3pSP5sJer OtVBXvNmBNAeLRWCJi4HxPBvfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnhuOz+ ChWbiDOVZW4gzH6MOaOQMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKmMNXGrgQqIJu/uNaawMvMPrlG7LlKAw/QahT7BLjbOF7s6g3cule w1qrESqEdbzl0KzeEQ9v7VUoxV8LH+By4HXmw3LBiv6VxxfjV0jg0hugPMRN2n+W 91MUUmJlCDg1HxSMS4CShSACAWIXWQrO/mpRzR8WVa6W4Llvl/Df+V1zMydNQZ2N JJum7YxOYUVTqjuwmZs6rXr/QvAKg/iU3H1Yrr7UQdCQZWF4guRmkrvW6qQoTT5W XL2sl/075YYtLRCr7fgM3mYvD1vNapspDIdNfRqOQWiq4G+ewsGJbUtscVvP7sFZ H7CkJMkGqsOjxjLBhxhpKg+wmbD+d5D2 -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:32 2025 by rpki-client