$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: h3FDMVwN6BlBA84o7l63htvvkhOGE5YQY0/EI6HdAzo= Subject key identifier: 96:FC:F8:69:3D:0D:8D:4D:68:A3:68:DC:E7:C7:3E:DE:79:0B:68:25 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 01C4 Signing time: Mon 03 Nov 2025 02:55:42 +0000 Manifest this update: Mon 03 Nov 2025 02:55:42 +0000 Manifest next update: Mon 10 Nov 2025 02:55:42 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: r/TcpZb47TIJgSt3tTqRSqvVsa/jgchZU1t8rY1gEjk=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: r5pIAbK8kOI15XkP+OMpWTYz9FMauuzr/FnyF6gxDgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Nov 3 02:55:42 2025 GMT Not After : Nov 10 02:55:42 2025 GMT Subject: CN=690819ae-62ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:3c:cf:53:73:2f:63:fb:2f:77:5a:ac:a8: ce:05:59:42:e4:8d:c0:19:67:20:84:ac:2c:dd:d7: d6:8a:87:e2:41:fc:26:95:17:6d:3f:9f:38:51:8d: b0:f3:22:a4:66:5e:07:3c:93:67:92:60:ae:06:c1: f5:e9:92:5a:23:05:e5:ff:73:04:1c:02:ee:83:5f: c3:cf:5e:c2:29:ec:48:de:f8:f6:36:f8:04:1f:c6: d1:90:9f:8e:04:e3:49:02:21:29:98:99:86:14:7e: 8e:26:2b:3d:c8:70:88:8c:6b:ff:3a:10:81:3d:74: 33:56:bc:33:57:55:9e:45:1e:30:6f:c3:c6:95:b5: 44:36:46:82:c6:67:e5:06:94:0c:2d:3b:22:cb:a7: c8:b3:60:ad:48:6c:63:fd:d0:fc:35:f1:a2:e2:43: cc:74:ec:d4:83:18:94:ec:1e:46:2f:4a:5a:93:83: 3e:66:c2:4f:88:a4:e9:ba:57:17:22:8c:cb:02:75: 4d:0b:17:71:51:01:21:db:05:db:53:5f:af:29:36: 65:9e:21:ff:58:10:26:aa:b9:86:e6:74:ba:6b:af: ea:5a:6d:03:02:5d:7e:f6:fe:74:c2:74:d2:ea:e7: 16:08:48:a1:52:78:09:11:f8:40:9a:02:35:8b:d1: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FC:F8:69:3D:0D:8D:4D:68:A3:68:DC:E7:C7:3E:DE:79:0B:68:25 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:44:c3:7c:5b:aa:77:86:d8:b8:bd:c4:d8:47:b2:12:44:8c: 10:5a:10:78:5f:47:7c:ed:b8:b0:58:fc:c9:a7:49:ef:61:24: 0e:3f:98:35:5a:05:2b:0a:9f:45:d7:0c:22:90:6e:67:87:fd: f7:a7:3a:33:04:b2:42:7c:85:82:2c:86:e6:b0:91:26:0d:c7: 7d:ac:f5:d1:e8:f0:60:cc:ab:11:8a:c8:60:10:a9:31:4e:eb: 41:19:13:d6:10:8a:e6:ce:b0:77:b0:c8:3d:59:be:bc:c1:00: 3d:6b:21:71:79:b5:be:69:2e:5c:a1:92:0a:9d:ee:6b:7a:e9: 54:cc:f1:ce:c9:2d:64:99:09:55:5e:23:e6:54:f9:bc:e1:99: da:2b:42:cd:7b:1e:00:16:eb:a2:1b:b4:db:a4:e6:5f:13:23: b8:c9:b6:91:c3:49:c9:61:6a:e9:3f:a7:2e:1a:02:29:d6:a2: 03:5f:d7:b7:3a:44:21:d3:7d:57:ae:96:8e:a9:2e:77:30:72: e1:20:c0:67:7c:a9:23:ea:63:dd:24:ff:cf:22:1d:82:41:f6: 51:22:4e:8f:be:9a:17:e6:e1:db:ef:a1:09:ed:8c:72:77:15: 11:84:8e:78:c0:d0:f4:06:0f:41:cd:57:91:9d:1c:a4:ac:d3: 97:4f:af:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjUxMTAzMDI1NTQyWhcNMjUxMTEwMDI1NTQyWjAYMRYwFAYD VQQDEw02OTA4MTlhZS02MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnc8z1NzL2P7L3darKjOBVlC5I3AGWcghKws3dfWiofiQfwmlRdtP584UY2w 8yKkZl4HPJNnkmCuBsH16ZJaIwXl/3MEHALug1/Dz17CKexI3vj2NvgEH8bRkJ+O BONJAiEpmJmGFH6OJis9yHCIjGv/OhCBPXQzVrwzV1WeRR4wb8PGlbVENkaCxmfl BpQMLTsiy6fIs2CtSGxj/dD8NfGi4kPMdOzUgxiU7B5GL0pak4M+ZsJPiKTpulcX IozLAnVNCxdxUQEh2wXbU1+vKTZlniH/WBAmqrmG5nS6a6/qWm0DAl1+9v50wnTS 6ucWCEihUngJEfhAmgI1i9GWcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb8+Gk9 DY1NaKNo3OfHPt55C2glMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSRMN8W6p3hti4vcTYR7ISRIwQWhB4X0d87biwWPzJp0nvYSQOP5g1 WgUrCp9F1wwikG5nh/33pzozBLJCfIWCLIbmsJEmDcd9rPXR6PBgzKsRishgEKkx TutBGRPWEIrmzrB3sMg9Wb68wQA9ayFxebW+aS5coZIKne5reulUzPHOyS1kmQlV XiPmVPm84ZnaK0LNex4AFuuiG7TbpOZfEyO4ybaRw0nJYWrpP6cuGgIp1qIDX9e3 OkQh031XrpaOqS53MHLhIMBnfKkj6mPdJP/PIh2CQfZRIk6PvpoX5uHb76EJ7Yxy dxURhI54wND0Bg9BzVeRnRykrNOXT69v -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:42 2025 by rpki-client