$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json) Hash identifier: wyWavsdnAt90qhOtoxE8g7qlUHnyTTzWfKB42fVw3VE= Subject key identifier: E1:55:D7:15:B1:82:1C:25:BF:2C:60:33:6F:B5:0C:33:8C:CE:66:96 Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Certificate serial: 083F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft Manifest number: 0835 Signing time: Tue 04 Nov 2025 20:52:01 +0000 Manifest this update: Tue 04 Nov 2025 20:52:00 +0000 Manifest next update: Tue 11 Nov 2025 20:52:00 +0000 Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: wsF3IJLoHVRqpgvQNu41IDa02HwqAsnD/TKa9627r8Y=) 2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: LwXV2swiHkwzhmRJHgtxVwl/mp8FDjhnbQvKS2GLsds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Validity Not Before: Nov 4 20:52:00 2025 GMT Not After : Nov 11 20:52:00 2025 GMT Subject: CN=690a6770-2495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:0a:18:e2:cf:0c:1f:db:80:03:7b:a7:d5: af:3f:77:e9:d4:62:ac:f1:eb:0e:58:12:8b:46:02: d1:cd:ad:c8:d1:0e:7e:92:6c:5c:70:02:18:69:a2: 25:c8:08:c3:c0:62:48:40:5c:8d:e5:bd:40:ae:aa: 73:e9:9a:da:28:9a:be:00:8d:e1:a5:88:11:b6:83: 09:09:e3:ed:90:95:f8:3c:05:e7:cd:89:15:e3:96: 47:ac:93:99:f2:4e:af:43:72:e2:83:44:f5:35:41: e3:fc:a9:ef:31:42:55:fe:27:7c:0b:4e:26:b8:88: b7:07:4d:9f:af:c1:3c:c0:37:63:bf:56:53:19:8c: ca:a1:de:b2:5c:00:9e:a3:aa:4b:65:54:e7:d0:2a: fd:db:52:9d:9d:2a:3a:5d:e7:64:a1:c4:2e:75:c5: 90:c7:06:a8:82:73:4f:22:ef:35:00:a1:8d:9c:a5: ef:d6:f9:ca:06:60:69:6f:12:72:22:43:ac:d6:a3: 48:22:56:45:71:9b:09:44:ef:60:55:78:df:71:e9: bc:50:dc:59:00:b3:19:7c:1c:4a:20:b9:bb:24:a6: 3e:29:59:59:db:3d:b7:1c:7e:1c:7f:1a:38:c2:61: 46:24:7e:73:09:54:ad:84:9b:0f:6c:d8:52:f1:3d: 73:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:D7:15:B1:82:1C:25:BF:2C:60:33:6F:B5:0C:33:8C:CE:66:96 X509v3 Authority Key Identifier: keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e6:55:d0:7a:9e:3b:b0:b0:ee:ac:ba:72:5a:8c:8c:25:a2: 07:5e:ee:4e:16:61:93:00:39:4c:02:af:7f:d8:5e:64:3e:69: a6:13:e3:53:eb:ab:7a:8d:c7:aa:65:40:99:02:47:bf:5c:2a: 0c:a7:1d:5b:d8:91:10:8c:20:be:25:12:23:8c:0c:39:74:59: 5a:9c:43:67:45:28:3a:32:0f:c6:b1:45:e3:57:04:b1:5f:2b: e8:26:bd:be:6f:1c:ff:f5:6a:41:9a:e0:eb:60:8b:db:b8:ef: 6c:e7:a3:7a:ce:30:c7:4d:05:f5:ad:f0:d0:ca:f2:3e:be:4b: ca:94:8e:d8:0e:5c:a0:cd:98:fa:c6:ac:1f:42:c5:08:82:6f: ff:7f:ba:7b:2d:12:7e:d5:02:89:17:d3:8b:6b:bb:ac:86:21: 0a:e8:dc:cb:3e:16:c5:ac:28:f9:50:2a:a0:da:1a:1b:16:01: 2c:bf:93:e7:b6:d7:e6:a2:57:40:12:98:56:b1:a5:2e:01:c0: 10:e3:cc:88:78:f7:3a:a2:d3:87:63:97:39:9e:2e:f7:dd:a4: 70:30:38:a2:61:37:7c:95:ef:f1:37:56:71:d5:50:60:28:f3: 5d:1d:c7:9f:d1:95:ee:37:19:d6:f1:84:53:86:dd:e5:03:23: bd:bb:f6:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUyMDk0MjhDN0NC MjdFQTg4MUYwHhcNMjUxMTA0MjA1MjAwWhcNMjUxMTExMjA1MjAwWjAYMRYwFAYD VQQDEw02OTBhNjc3MC0yNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLgKGOLPDB/bgAN7p9WvP3fp1GKs8esOWBKLRgLRza3I0Q5+kmxccAIYaaIl yAjDwGJIQFyN5b1Arqpz6ZraKJq+AI3hpYgRtoMJCePtkJX4PAXnzYkV45ZHrJOZ 8k6vQ3Lig0T1NUHj/KnvMUJV/id8C04muIi3B02fr8E8wDdjv1ZTGYzKod6yXACe o6pLZVTn0Cr921KdnSo6XedkocQudcWQxwaognNPIu81AKGNnKXv1vnKBmBpbxJy IkOs1qNIIlZFcZsJRO9gVXjfcem8UNxZALMZfBxKILm7JKY+KVlZ2z23HH4cfxo4 wmFGJH5zCVSthJsPbNhS8T1zTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFV1xWx ghwlvyxgM2+1DDOMzmaWMB8GA1UdIwQYMBaAFAfNnTHtYYYq9QPlIJQox8sn6ogf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDYwOS8wQzYwOUI5Q0VD MTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhpcjFBLVVnbENqSHl5ZnFp QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4MmRNZTFoaGlyMUEtVWdsQ2pIeXlmcWlCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhp cjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc5lXQep47sLDurLpyWoyMJaIHXu5OFmGTADlMAq9/2F5kPmmmE+NT 66t6jceqZUCZAke/XCoMpx1b2JEQjCC+JRIjjAw5dFlanENnRSg6Mg/GsUXjVwSx XyvoJr2+bxz/9WpBmuDrYIvbuO9s56N6zjDHTQX1rfDQyvI+vkvKlI7YDlygzZj6 xqwfQsUIgm//f7p7LRJ+1QKJF9OLa7ushiEK6NzLPhbFrCj5UCqg2hobFgEsv5Pn ttfmoldAEphWsaUuAcAQ48yIePc6otOHY5c5ni733aRwMDiiYTd8le/xN1Zx1VBg KPNdHcef0ZXuNxnW8YRTht3lAyO9u/Za -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:23 2025 by rpki-client