$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft File: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json) Hash identifier: MxVIBeVORu6jpQcF/tDhP/KZyxiPhbDibVq7nsqRw2A= Subject key identifier: 85:12:B6:6A:F5:86:FE:B0:A8:E6:4C:7F:7B:C8:F7:B0:95:77:06:30 Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft Manifest number: 01A9 Signing time: Mon 03 Nov 2025 03:25:56 +0000 Manifest this update: Mon 03 Nov 2025 03:25:55 +0000 Manifest next update: Mon 10 Nov 2025 03:25:55 +0000 Files and hashes: 1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: jeawn+MR3fhBGtw7hkd9S6suCJyKgTWVxTZ9/QITATk=) 2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: 2LU2kXGp5EWAt98D0+OWBHo4gLhboNnOR5ayZb+/nEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Validity Not Before: Nov 3 03:25:55 2025 GMT Not After : Nov 10 03:25:55 2025 GMT Subject: CN=690820c4-e580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:4b:12:f6:9e:b5:dc:b2:c2:1c:f3:ed:0b: e2:f8:39:1f:bf:61:bc:32:da:ef:f2:49:d9:a7:3f: 40:e9:8f:6e:be:2e:42:47:58:82:76:7b:4f:91:b0: ac:74:29:3e:4f:93:70:3f:a6:8a:21:55:c2:08:b2: c0:26:46:ba:88:d1:f9:eb:53:f5:6f:b9:8f:43:53: 6b:93:a3:14:6b:10:94:68:8c:cb:81:f6:40:b6:8c: de:9f:a5:7f:88:4c:b3:47:51:05:64:1f:9a:a3:0d: fb:96:b4:d2:0c:be:82:87:dc:0e:41:8e:9a:21:5c: 67:83:93:39:be:94:2f:fd:a1:db:fb:7c:fc:14:cd: fa:bb:4c:49:c1:4a:96:3b:3e:e6:27:99:cb:5c:9d: 46:21:15:43:87:00:5e:c3:8c:42:42:6e:b6:39:f6: b3:db:1c:15:dd:7e:72:bc:a8:de:36:d9:a2:3a:43: a5:dd:4c:0f:a4:ad:50:40:9d:48:5a:09:ef:4c:d9: 13:23:b4:63:2a:94:bf:27:b8:32:6b:b8:d9:4e:d7: a7:19:cc:58:3d:d1:90:73:c3:1a:90:de:b4:ac:41: 90:4d:1f:8d:5e:c6:4b:84:d5:97:ec:b3:be:c7:0e: ce:59:0e:a0:10:0c:80:a2:79:de:56:03:f2:1a:cd: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:12:B6:6A:F5:86:FE:B0:A8:E6:4C:7F:7B:C8:F7:B0:95:77:06:30 X509v3 Authority Key Identifier: keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e8:15:5d:d9:ae:e7:b0:6f:bf:96:9e:79:85:e1:76:03:3b: b0:38:2c:9f:6d:7a:1a:70:d5:c2:a6:0d:b1:ff:12:86:2b:a8: 7d:65:4c:d2:b9:95:2e:42:9b:f8:6b:9e:24:01:f6:ee:ee:b1: 6c:b3:7a:b2:89:3d:e9:c6:4a:81:dd:80:68:b2:65:3f:0a:e5: e5:aa:13:61:13:47:46:2b:84:d2:db:88:e1:23:39:0b:ed:a8: 45:00:3c:6a:f5:73:d7:47:86:33:f6:9a:e3:69:c1:49:16:e0: d0:11:80:3e:28:f6:45:95:50:4e:75:8b:c3:94:ce:c3:72:fe: 90:46:f6:f4:7d:fd:c6:2b:95:f4:89:bc:fc:c8:6f:3d:31:ed: 73:91:52:af:1e:90:79:21:2d:cc:ba:3e:da:52:8b:7b:b2:62: b7:71:7f:58:43:3d:1f:85:f9:28:d0:aa:81:2d:f9:12:af:0b: 46:23:97:19:06:03:73:e2:ad:fc:9d:75:29:1c:3d:71:f3:52: 55:3c:0a:da:2b:1e:fc:38:22:b5:cd:9e:ee:f1:9a:26:6a:26: ba:d7:f9:ac:06:d3:24:2c:0e:cd:eb:70:4d:60:b4:f7:4d:f9: ae:58:49:ef:c2:99:79:3c:ac:6a:a7:93:5f:2d:50:d7:c1:58: e9:19:84:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNUMxMTAvBgNVBAUTKEU3NzEzMkU0RkVBRDA0RUVENEZFOTQ2RDYwN0EwRENC NTdBNDIwNjUwHhcNMjUxMTAzMDMyNTU1WhcNMjUxMTEwMDMyNTU1WjAYMRYwFAYD VQQDEw02OTA4MjBjNC1lNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0BLEvaetdyywhzz7Qvi+Dkfv2G8Mtrv8knZpz9A6Y9uvi5CR1iCdntPkbCs dCk+T5NwP6aKIVXCCLLAJka6iNH561P1b7mPQ1Nrk6MUaxCUaIzLgfZAtozen6V/ iEyzR1EFZB+aow37lrTSDL6Ch9wOQY6aIVxng5M5vpQv/aHb+3z8FM36u0xJwUqW Oz7mJ5nLXJ1GIRVDhwBew4xCQm62Ofaz2xwV3X5yvKjeNtmiOkOl3UwPpK1QQJ1I WgnvTNkTI7RjKpS/J7gya7jZTtenGcxYPdGQc8MakN60rEGQTR+NXsZLhNWX7LO+ xw7OWQ6gEAyAonneVgPyGs08vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUStmr1 hv6wqOZMf3vI97CVdwYwMB8GA1UdIwQYMBaAFOdxMuT+rQTu1P6UbWB6DctXpCBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE1Qy81RjA3MjYzODRG MzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJPN1VfcFJ0WUhvTnkxZWtJ R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzRXk1UDZ0Qk83VV9wUnRZSG9OeTFla0lHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE1Qy81RjA3MjYzODRGMzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJP N1VfcFJ0WUhvTnkxZWtJR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF6BVd2a7nsG+/lp55heF2AzuwOCyfbXoacNXCpg2x/xKGK6h9ZUzS uZUuQpv4a54kAfbu7rFss3qyiT3pxkqB3YBosmU/CuXlqhNhE0dGK4TS24jhIzkL 7ahFADxq9XPXR4Yz9prjacFJFuDQEYA+KPZFlVBOdYvDlM7Dcv6QRvb0ff3GK5X0 ibz8yG89Me1zkVKvHpB5IS3Muj7aUot7smK3cX9YQz0fhfko0KqBLfkSrwtGI5cZ BgNz4q38nXUpHD1x81JVPAraKx78OCK1zZ7u8Zomaia61/msBtMkLA7N63BNYLT3 TfmuWEnvwpl5PKxqp5NfLVDXwVjpGYQG -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:44 2025 by rpki-client