$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json) Hash identifier: 7hNBPbz682jBzBIQsr6E3lPfgMlXhjbXt9vwJA3LSVE= Subject key identifier: 57:BC:AB:6E:8C:0F:D6:6C:6F:40:81:D2:50:BE:FF:94:62:6C:6E:C3 Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft Manifest number: DC Signing time: Wed 05 Nov 2025 05:46:22 +0000 Manifest this update: Wed 05 Nov 2025 05:46:22 +0000 Manifest next update: Wed 12 Nov 2025 05:46:22 +0000 Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: 8S0ONsodF6IGdHK1ORzVSRrm0ypDdIGl8gapxbRcGRk=) 2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: 10tMqu+nwfPiB/Sv877/PBI+cY8PjVYEl7SPzvcI+/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Validity Not Before: Nov 5 05:46:22 2025 GMT Not After : Nov 12 05:46:22 2025 GMT Subject: CN=690ae4ae-a2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a0:c6:21:9c:7c:71:65:95:6d:54:5b:ca:08: 4c:a5:5a:b1:9d:1a:ca:dc:5c:43:54:ea:2d:3f:62: 41:77:10:75:f6:f8:fd:75:d9:d5:a9:ef:54:5a:95: dc:b6:2c:5b:ea:94:24:8d:29:a7:f8:10:2b:58:bf: 35:fe:7a:73:6b:fa:a2:c1:3c:ba:1f:95:7a:be:d1: fb:86:59:66:1a:b9:33:8f:a5:ad:e2:98:a0:03:ec: ba:a1:76:10:c8:d0:5b:20:94:74:13:3c:01:21:5b: 06:44:94:10:4d:92:72:f8:9c:c2:40:dd:8c:c1:62: 7e:2f:f9:cc:a6:38:d3:19:51:69:66:e9:aa:be:ba: fc:73:1e:e6:df:89:ea:95:be:fe:27:26:8f:fa:95: a8:d9:dc:37:fd:13:7b:1e:13:b4:be:a0:d4:9b:fb: 29:c7:82:44:ba:e6:2f:6d:70:81:c7:5e:2c:9a:02: c4:80:d2:74:27:d3:d4:04:6a:cd:e6:34:87:25:87: 13:8f:6e:0b:9f:d4:9f:53:01:48:a4:be:a6:40:19: 85:37:5a:c5:a3:27:75:a4:1a:f3:6b:7f:2a:e3:ab: 49:af:e4:39:df:d1:db:43:fb:90:c5:14:36:43:47: f3:32:73:93:87:c9:93:3c:e2:b9:8b:56:78:76:99: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:AB:6E:8C:0F:D6:6C:6F:40:81:D2:50:BE:FF:94:62:6C:6E:C3 X509v3 Authority Key Identifier: keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ff:64:f8:43:dc:0d:c5:fa:e9:af:3f:d5:ca:c2:bd:cd:14: 72:e5:e4:2f:b1:4d:3f:c9:56:7e:75:35:53:d6:4f:62:f5:ee: e8:f6:cf:31:16:33:8b:2d:8b:85:1a:b5:b3:59:c2:7f:31:cb: 66:9d:c9:3c:a9:2c:96:1f:bc:d3:49:ee:b2:1e:8b:c1:60:ff: 71:39:5d:a3:a6:19:6e:7b:7f:74:dd:06:1b:3d:ef:01:c8:39: 6f:69:db:85:2c:ef:04:b2:b1:8c:d2:76:1a:8b:aa:71:9d:61: da:51:fe:c8:58:d0:9d:9d:4e:86:c0:45:2c:4b:f9:1d:f2:49: 30:1d:df:91:3d:4d:8d:0d:dd:bb:1a:d0:72:30:0e:18:1d:87: 87:b2:c7:c3:21:8d:1c:d7:85:a9:bc:35:52:44:18:c5:7a:27: 26:6f:76:97:a6:28:53:27:fd:0d:5a:62:d7:5e:38:2b:d9:13: d1:dc:55:d7:f7:e4:4a:de:04:b5:47:46:95:f3:af:39:b2:f8: 19:ab:2b:99:2d:f3:e1:99:ee:6a:a5:f1:70:ec:66:bd:56:5c: 33:76:6f:90:87:f8:dc:32:11:44:0f:07:13:93:c9:17:d1:62: 89:a9:39:a5:c1:75:ab:9c:48:84:2d:80:7a:a9:e8:6d:3e:10: 19:8a:8e:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDE3NUQ0MjAyMkJGNTBCRDZDMjBGMzBCMUM1QUQ4Qzk0 RTA4NUJDNEUwHhcNMjUxMTA1MDU0NjIyWhcNMjUxMTEyMDU0NjIyWjAYMRYwFAYD VQQDEw02OTBhZTRhZS1hMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+KDGIZx8cWWVbVRbyghMpVqxnRrK3FxDVOotP2JBdxB19vj9ddnVqe9UWpXc tixb6pQkjSmn+BArWL81/npza/qiwTy6H5V6vtH7hllmGrkzj6Wt4pigA+y6oXYQ yNBbIJR0EzwBIVsGRJQQTZJy+JzCQN2MwWJ+L/nMpjjTGVFpZumqvrr8cx7m34nq lb7+JyaP+pWo2dw3/RN7HhO0vqDUm/spx4JEuuYvbXCBx14smgLEgNJ0J9PUBGrN 5jSHJYcTj24Ln9SfUwFIpL6mQBmFN1rFoyd1pBrza38q46tJr+Q539HbQ/uQxRQ2 Q0fzMnOTh8mTPOK5i1Z4dpnmYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe8q26M D9Zsb0CB0lC+/5RibG7DMB8GA1UdIwQYMBaAFBddQgIr9QvWwg8wscWtjJTghbxO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9FQUJGRUJGMjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5YkNEekN4eGEyTWxPQ0Z2 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0YxMUNBaXYxQzliQ0R6Q3h4YTJNbE9DRnZFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9FQUJGRUJGMjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5 YkNEekN4eGEyTWxPQ0Z2RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd/2T4Q9wNxfrprz/VysK9zRRy5eQvsU0/yVZ+dTVT1k9i9e7o9s8x FjOLLYuFGrWzWcJ/Mctmnck8qSyWH7zTSe6yHovBYP9xOV2jphlue3903QYbPe8B yDlvaduFLO8EsrGM0nYai6pxnWHaUf7IWNCdnU6GwEUsS/kd8kkwHd+RPU2NDd27 GtByMA4YHYeHssfDIY0c14WpvDVSRBjFeicmb3aXpihTJ/0NWmLXXjgr2RPR3FXX 9+RK3gS1R0aV8685svgZqyuZLfPhme5qpfFw7Ga9Vlwzdm+Qh/jcMhFEDwcTk8kX 0WKJqTmlwXWrnEiELYB6qehtPhAZio46 -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:22 2025 by rpki-client