$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: h5zlGfh1rAENvqhburJkyza0t2qzajyB3qJ5wkQDuUM= Subject key identifier: 5F:80:54:99:4D:13:EB:89:6A:2A:33:59:D2:5C:FF:0B:38:DD:90:DA Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: D0 Signing time: Mon 03 Nov 2025 05:45:13 +0000 Manifest this update: Mon 03 Nov 2025 05:45:13 +0000 Manifest next update: Mon 10 Nov 2025 05:45:13 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: EyT9h8kP6M8QfAZbwWSeeD3qH9Kd6LN0NIL3GgpCI58=) 2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=) 3: EFC2CA2489D311F0B3F8631DC4F9AE02.roa (hash: vaEXmxxOCfh4t7B3q+8C9by77OCY+clJhF+kP80doZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: Nov 3 05:45:13 2025 GMT Not After : Nov 10 05:45:13 2025 GMT Subject: CN=69084169-922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:84:ed:0d:85:db:9b:9d:27:f3:0e:61:ff: 88:9c:ff:fc:e8:91:16:55:22:a1:ae:bd:76:07:c1: e9:dc:63:0b:05:22:3d:5e:cd:14:9c:7e:cb:90:4d: 8a:df:00:0e:2b:97:b8:f5:c1:2e:7a:50:46:7f:36: 67:d0:e6:aa:f5:bc:56:89:a8:72:79:3c:20:4d:1d: 1d:d6:f4:d0:66:f9:25:9c:c0:bd:c0:e5:52:41:47: 49:ff:76:d7:b6:f8:9c:d2:ab:3d:d4:ed:66:fe:b5: 9a:da:70:68:af:95:5b:71:8c:bc:4c:ba:79:00:f8: 9d:a4:8f:00:8c:8d:20:fe:d7:54:78:21:5e:63:97: ef:94:d4:67:44:df:1c:82:2e:70:2a:0b:8a:64:75: 3c:de:25:5d:b3:d5:fa:84:27:80:42:d2:63:63:bb: 1e:77:a4:a9:ab:65:f4:6e:ec:dd:92:6e:17:9e:23: bf:f6:3f:af:89:7f:fb:a1:b9:e1:57:88:ab:40:b4: 04:c0:7e:f3:f8:62:f7:31:d1:bb:c0:37:51:e4:32: ec:36:bb:0b:33:08:a3:27:01:8c:8d:b8:67:5f:be: 88:11:4a:cc:08:b0:b2:8d:f8:41:b1:34:5a:24:85: 1a:5d:43:42:09:f4:4d:ff:8e:c2:58:65:f6:0d:5d: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:54:99:4D:13:EB:89:6A:2A:33:59:D2:5C:FF:0B:38:DD:90:DA X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ad:39:1c:07:c9:f4:cc:23:0e:2e:b2:90:a2:3c:cc:68:01: b8:23:25:d8:c4:bd:96:96:dc:06:7a:3c:56:6a:d5:b8:14:11: b1:9f:d4:89:45:93:5a:4e:da:3a:c3:20:a1:6c:f5:e5:1b:79: 05:cf:89:eb:ea:f4:8a:57:d3:b9:d0:ff:18:74:f0:74:e4:aa: 73:3d:38:7e:98:2c:52:39:4d:94:10:47:e8:c1:3a:f2:d2:71: 2c:49:f8:ac:77:7e:ab:46:af:29:85:9b:1c:fb:36:73:b7:2f: 15:9f:4a:93:74:29:25:ea:83:fe:be:ae:cc:78:52:a3:16:49: 0d:1c:f9:33:ba:f3:59:0b:c1:ac:f6:67:84:af:04:f9:a4:3d: fc:12:c9:f7:75:48:6b:4a:91:dd:c3:ee:a1:74:a9:fe:22:c6: e0:ed:14:3d:b3:6c:ce:03:95:d4:6e:94:31:c4:a9:85:b5:3b: 29:83:cb:94:3d:11:01:02:e1:d5:ff:71:6f:26:19:cc:2d:22: ca:61:2d:0f:01:95:a2:65:a6:0c:d0:35:70:4b:ee:b1:17:fa: 09:06:d8:d3:69:4d:a8:ee:09:1e:63:c2:9c:87:ed:37:18:52: b5:f5:5d:7b:9f:71:47:d8:56:4d:86:3b:03:98:e6:e5:ec:33: 08:e9:09:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzNjQxMTAvBgNVBAUTKDQ3MENERkQ0OUY1REZGMjEyNTc4REVDNURBMjFGMjFE QTBCM0ZBRDIwHhcNMjUxMTAzMDU0NTEzWhcNMjUxMTEwMDU0NTEzWjAYMRYwFAYD VQQDEw02OTA4NDE2OS05MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AWE7Q2F25udJ/MOYf+InP/86JEWVSKhrr12B8Hp3GMLBSI9Xs0UnH7LkE2K 3wAOK5e49cEuelBGfzZn0Oaq9bxWiahyeTwgTR0d1vTQZvklnMC9wOVSQUdJ/3bX tvic0qs91O1m/rWa2nBor5VbcYy8TLp5APidpI8AjI0g/tdUeCFeY5fvlNRnRN8c gi5wKguKZHU83iVds9X6hCeAQtJjY7sed6Spq2X0buzdkm4XniO/9j+viX/7obnh V4irQLQEwH7z+GL3MdG7wDdR5DLsNrsLMwijJwGMjbhnX76IEUrMCLCyjfhBsTRa JIUaXUNCCfRN/47CWGX2DV2MOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+AVJlN E+uJaiozWdJc/ws43ZDaMB8GA1UdIwQYMBaAFEcM39SfXf8hJXjexdoh8h2gs/rS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjM2NC8wNDA1NjZBODg0 Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95RWxlTjdGMmlIeUhhQ3ot dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjM2NC8wNDA1NjZBODg0Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95 RWxlTjdGMmlIeUhhQ3otdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAprTkcB8n0zCMOLrKQojzMaAG4IyXYxL2WltwGejxWatW4FBGxn9SJ RZNaTto6wyChbPXlG3kFz4nr6vSKV9O50P8YdPB05KpzPTh+mCxSOU2UEEfowTry 0nEsSfisd36rRq8phZsc+zZzty8Vn0qTdCkl6oP+vq7MeFKjFkkNHPkzuvNZC8Gs 9meErwT5pD38Esn3dUhrSpHdw+6hdKn+Isbg7RQ9s2zOA5XUbpQxxKmFtTspg8uU PREBAuHV/3FvJhnMLSLKYS0PAZWiZaYM0DVwS+6xF/oJBtjTaU2o7gkeY8Kch+03 GFK19V17n3FH2FZNhjsDmObl7DMI6QnS -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:15 2025 by rpki-client