$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft File: exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json) Hash identifier: mHSIo5HVLl75undnw3A9+ZAF/Y2QGWEHfYGh0YwYAxs= Subject key identifier: 5E:3E:9E:22:21:FB:43:CB:AB:30:17:86:8F:19:A5:09:21:4F:5C:1A Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft Manifest number: 0721 Signing time: Tue 04 Nov 2025 21:55:58 +0000 Manifest this update: Tue 04 Nov 2025 21:55:57 +0000 Manifest next update: Tue 11 Nov 2025 21:55:57 +0000 Files and hashes: 1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: VcErf8Un8CxHKsL3TmksCphas/dTwZl08NuuiBn94so=) 2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: j+SLkRZH2vvm2qi+dkzE/z5Oabn+2rsps1uNHGkmv7k=) 3: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: BaFLyya1TKBoY7+XhzGxuRAAndNMkd2YqYS4SQJwVwc=) 4: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: BAzJ3kqWS8LM+5cYcosGy9mSxoxPjvYNZBBQJtxyjWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Validity Not Before: Nov 4 21:55:57 2025 GMT Not After : Nov 11 21:55:57 2025 GMT Subject: CN=690a766d-2434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:5f:b7:00:5e:b5:f2:b2:6a:e1:14:30:d6: 51:23:37:a2:5e:25:44:8c:bf:d9:28:91:50:80:42: a4:0d:f8:74:1b:cd:03:bb:06:19:8a:e6:86:73:15: b9:9d:e9:0b:1f:b5:e2:38:ad:09:c0:09:72:97:16: 27:62:91:a8:38:e4:66:7c:97:6b:4e:89:4d:72:dc: fd:7f:0f:13:90:bc:67:a0:6d:df:25:14:13:a1:0c: 0a:5e:72:60:38:e6:19:9b:b9:83:3a:83:ab:ea:f3: 24:87:79:7f:21:4e:c8:b5:0c:17:62:fa:5e:4c:c0: d4:e0:b7:51:84:5d:f3:ee:77:02:f8:b3:6f:13:cf: 3c:d0:ce:00:ec:af:27:52:45:e0:c8:d8:cb:7d:37: 4a:58:8a:ec:83:f5:d6:30:27:5e:e6:4e:59:fb:09: b3:fc:20:6e:cd:f1:19:97:18:58:d9:29:cb:ed:d2: 57:f5:11:16:c2:21:0c:c7:39:21:cb:8f:7e:c0:11: 1b:34:42:86:15:a9:31:dc:bb:5b:ac:d7:cd:7f:4c: c0:fc:eb:98:26:5c:8d:f1:74:b6:42:c8:12:af:71: c8:5d:cb:27:ef:81:6c:41:93:97:86:67:d6:8d:a4: ef:5f:98:a9:29:ff:e3:8d:22:2b:84:9c:87:ed:5b: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3E:9E:22:21:FB:43:CB:AB:30:17:86:8F:19:A5:09:21:4F:5C:1A X509v3 Authority Key Identifier: keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a9:58:0f:66:cc:3d:6b:61:a2:1d:77:9a:9f:f9:22:f0:e1: 1e:88:3a:fa:ce:73:cc:76:34:09:6e:05:04:cf:12:5e:25:e5: ac:70:cb:ff:9d:43:db:bd:51:1d:f7:34:ba:3b:1b:cd:93:98: 97:b6:70:e3:34:9e:6c:e4:a6:93:73:95:8a:d0:18:9c:cc:18: 1f:fe:cb:32:1d:f9:ad:02:f6:ac:50:64:72:00:21:46:e5:5e: d3:ed:22:af:e3:24:98:89:1a:84:0a:df:53:4f:dc:cd:ae:a8: 80:2c:7b:55:bc:bb:1e:35:af:fc:7d:51:de:51:47:ad:f9:be: a9:93:12:fc:f0:2f:bc:37:b1:f3:2c:16:ef:23:2e:9a:8e:92: 12:a2:9a:2b:03:9d:22:dd:97:5a:64:ca:59:f5:82:67:16:c5: a2:43:0a:51:a0:72:2e:fb:a7:6a:ea:8f:24:65:ed:b3:dc:75: 90:1c:eb:17:9d:f4:d1:ff:9b:d8:d5:76:f7:a8:7d:16:fd:01: c6:d6:0d:16:c3:f3:47:4e:e5:27:36:e2:f0:4c:1d:4c:b5:c4: 9d:f6:2e:49:28:90:c5:ae:ed:c5:b8:dd:bf:11:2e:24:2a:38: 30:40:f0:11:f2:0b:16:35:a6:80:68:11:4e:9e:11:b9:69:96: 82:da:ae:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCM0QxMTAvBgNVBAUTKDdCMTUwMTVEREI5Rjg0NDEyQTY3REIzRTI2RkVDQjRE RENCQkQ5ODAwHhcNMjUxMTA0MjE1NTU3WhcNMjUxMTExMjE1NTU3WjAYMRYwFAYD VQQDEw02OTBhNzY2ZC0yNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bNftwBetfKyauEUMNZRIzeiXiVEjL/ZKJFQgEKkDfh0G80DuwYZiuaGcxW5 nekLH7XiOK0JwAlylxYnYpGoOORmfJdrTolNctz9fw8TkLxnoG3fJRQToQwKXnJg OOYZm7mDOoOr6vMkh3l/IU7ItQwXYvpeTMDU4LdRhF3z7ncC+LNvE8880M4A7K8n UkXgyNjLfTdKWIrsg/XWMCde5k5Z+wmz/CBuzfEZlxhY2SnL7dJX9REWwiEMxzkh y49+wBEbNEKGFakx3LtbrNfNf0zA/OuYJlyN8XS2QsgSr3HIXcsn74FsQZOXhmfW jaTvX5ipKf/jjSIrhJyH7Vv3uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4+niIh +0PLqzAXho8ZpQkhT1waMB8GA1UdIwQYMBaAFHsVAV3bn4RBKmfbPib+y03cu9mA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkIzRC8wRTk3OEU2NDU5 NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhFRXFaOXMtSnY3TFRkeTcy WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4VUJYZHVmaEVFcVo5cy1KdjdMVGR5NzJZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkIzRC8wRTk3OEU2NDU5NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhF RXFaOXMtSnY3TFRkeTcyWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2qVgPZsw9a2GiHXean/ki8OEeiDr6znPMdjQJbgUEzxJeJeWscMv/ nUPbvVEd9zS6OxvNk5iXtnDjNJ5s5KaTc5WK0BiczBgf/ssyHfmtAvasUGRyACFG 5V7T7SKv4ySYiRqECt9TT9zNrqiALHtVvLseNa/8fVHeUUet+b6pkxL88C+8N7Hz LBbvIy6ajpISoporA50i3ZdaZMpZ9YJnFsWiQwpRoHIu+6dq6o8kZe2z3HWQHOsX nfTR/5vY1Xb3qH0W/QHG1g0Ww/NHTuUnNuLwTB1MtcSd9i5JKJDFru3FuN2/ES4k KjgwQPAR8gsWNaaAaBFOnhG5aZaC2q4Y -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:29 2025 by rpki-client