$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: 8ho3oDzxdfsZwx14RoWcuCXcl1cTbmPxdkLaBjOncp0= Subject key identifier: 1C:9D:8D:53:80:63:64:90:A4:ED:4E:A4:92:D0:50:61:8F:5F:F0:12 Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A31 Signing time: Sun 02 Nov 2025 19:43:00 +0000 Manifest this update: Sun 02 Nov 2025 19:43:00 +0000 Manifest next update: Sun 09 Nov 2025 19:43:00 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: b71rsumnmkM07KDUfo0qkk9skOeO/ynCcSenWMiHCz0=) 2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: wvtmiBqknG0Ex14oXMBXLdzRkgI1rAedN0Py7FPTv0Q=) 3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2633 (0xa49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Nov 2 19:43:00 2025 GMT Not After : Nov 9 19:43:00 2025 GMT Subject: CN=6907b444-b6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:18:f9:fe:8c:5a:90:66:f9:47:45:ab:5f: 67:f5:9b:19:5c:e5:1c:0d:e9:47:32:95:4f:f3:62: 6f:8d:c3:d0:da:7c:34:cf:f6:6e:12:f4:3f:84:83: 6a:48:ce:0f:f2:2d:9b:ee:59:65:2f:79:94:52:9b: 54:b2:21:f6:8b:cd:25:03:6c:0d:ff:27:3c:fe:68: 0d:23:8c:56:a2:ff:02:79:da:cf:7c:72:1d:3b:40: 54:12:29:02:37:26:35:7a:2c:0e:72:be:2b:c3:96: 64:9d:38:5e:db:c7:3d:e2:4c:70:b2:f0:7d:bd:5b: d1:e9:93:83:aa:05:f7:d3:10:40:23:3f:59:98:95: 5b:91:06:68:66:ee:48:d6:3a:72:68:3b:72:11:28: 62:80:dc:91:6c:3d:53:43:b0:36:0b:87:86:78:76: ca:5d:a2:9d:05:5b:e7:9a:5a:ce:bf:f6:0b:8e:3f: 73:4a:28:7f:f1:2c:80:07:23:fa:bd:81:df:0c:38: d8:c6:d8:69:28:95:b2:55:bc:d7:9a:9c:d4:b7:a5: 09:fe:e4:9a:e1:40:2e:ba:60:3e:a5:9a:28:4e:59: a7:8a:28:e5:64:d5:0c:7a:4d:3c:2d:82:b3:45:7b: ec:91:d4:84:fb:71:bb:40:4b:84:22:08:9e:8d:63: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9D:8D:53:80:63:64:90:A4:ED:4E:A4:92:D0:50:61:8F:5F:F0:12 X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2f:30:9b:12:7b:8f:08:37:8c:e5:f4:5a:53:57:d1:f4:6b: b3:7c:80:98:34:cb:59:0c:29:2a:31:0f:e3:f4:9f:03:97:fe: 94:67:8a:c2:ea:d6:2a:48:77:ce:6b:68:26:32:e5:7d:6e:f1: 1a:96:ac:d2:06:80:0b:32:98:28:f6:c9:65:bd:06:32:bc:cf: a9:b3:07:63:60:87:be:4f:7e:ca:4e:48:89:53:be:b6:12:e6: 7e:88:67:a7:74:fa:29:aa:f6:af:90:f4:34:44:c5:06:e9:8a: 7a:6c:7f:21:29:14:2c:59:53:98:5e:c3:d5:31:f5:cc:2d:1c: 26:49:8e:49:74:6e:9e:ed:3e:fa:80:b8:8e:dc:6c:ae:dc:f0: 2a:b7:fe:76:7d:29:da:d1:1d:51:13:1d:4e:9e:7b:c9:37:c2: 6d:6b:29:0f:fc:c4:63:a0:d9:62:a1:e9:da:74:a8:43:d1:87: d7:43:f7:38:2a:14:55:6d:ce:05:37:0e:d4:0c:4c:6f:56:0d: 35:ff:73:0c:da:98:ab:b0:13:39:a6:40:c1:33:11:2d:80:97: e0:4d:12:ef:d9:ba:1c:44:9d:c0:18:0b:54:2e:89:ec:31:d9: 87:64:01:e2:67:9b:2f:62:91:32:3c:9c:a2:78:79:17:b7:b7: cf:f1:1b:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUxMTAyMTk0MzAwWhcNMjUxMTA5MTk0MzAwWjAYMRYwFAYD VQQDEw02OTA3YjQ0NC1iNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdoY+f6MWpBm+UdFq19n9ZsZXOUcDelHMpVP82JvjcPQ2nw0z/ZuEvQ/hINq SM4P8i2b7lllL3mUUptUsiH2i80lA2wN/yc8/mgNI4xWov8CedrPfHIdO0BUEikC NyY1eiwOcr4rw5ZknThe28c94kxwsvB9vVvR6ZODqgX30xBAIz9ZmJVbkQZoZu5I 1jpyaDtyEShigNyRbD1TQ7A2C4eGeHbKXaKdBVvnmlrOv/YLjj9zSih/8SyAByP6 vYHfDDjYxthpKJWyVbzXmpzUt6UJ/uSa4UAuumA+pZooTlmniijlZNUMek08LYKz RXvskdSE+3G7QEuEIgiejWPDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBydjVOA Y2SQpO1OpJLQUGGPX/ASMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaLzCbEnuPCDeM5fRaU1fR9GuzfICYNMtZDCkqMQ/j9J8Dl/6UZ4rC 6tYqSHfOa2gmMuV9bvEalqzSBoALMpgo9sllvQYyvM+pswdjYIe+T37KTkiJU762 EuZ+iGendPopqvavkPQ0RMUG6Yp6bH8hKRQsWVOYXsPVMfXMLRwmSY5JdG6e7T76 gLiO3Gyu3PAqt/52fSna0R1REx1OnnvJN8JtaykP/MRjoNlioenadKhD0YfXQ/c4 KhRVbc4FNw7UDExvVg01/3MM2pirsBM5pkDBMxEtgJfgTRLv2bocRJ3AGAtULons MdmHZAHiZ5svYpEyPJyieHkXt7fP8RvM -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:47 2025 by rpki-client