$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json) Hash identifier: FX87ZEUkMFkF8DQFZQJILznM/9nmCe/lIO6T21SkJoU= Subject key identifier: 18:84:C0:8C:A1:09:0A:D2:BE:7B:D8:D5:1F:BB:BB:CF:41:F1:97:33 Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft Manifest number: 67 Signing time: Wed 05 Nov 2025 07:17:30 +0000 Manifest this update: Wed 05 Nov 2025 07:17:30 +0000 Manifest next update: Wed 12 Nov 2025 07:17:30 +0000 Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: 2KeTA8c8Typw43WT3tSUdDlmy9zGEHEYdBlxn66EFKs=) 2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: cj52P7EVA7EzNB+cRXY75TfIttWbZ7w7qirjXKEDn/Y=) 3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: UkjJv6j01kk67tAR7WvPOWkiQImQuY607Dwbp++ebI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Validity Not Before: Nov 5 07:17:30 2025 GMT Not After : Nov 12 07:17:30 2025 GMT Subject: CN=690afa0a-7e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:d1:43:bc:0f:2a:58:47:55:0a:b2:b0:5a: d7:ce:ba:60:12:3c:99:99:e6:39:e1:39:ba:4e:ac: 23:ae:5c:2e:8f:21:06:e4:16:92:c7:22:be:2f:9c: 78:3e:43:e4:7e:e1:c7:cb:e5:04:b1:9e:40:0c:a7: 79:5d:4b:7e:c4:a6:17:8a:fd:21:a1:83:81:45:73: 06:9d:0c:2c:ea:f1:7d:0a:e8:f1:72:93:3d:51:b6: 74:6c:88:77:95:77:d7:da:02:dd:20:8b:e9:d2:70: 3a:d6:68:aa:4c:9e:4f:65:25:df:4b:60:1f:73:c6: b2:be:8c:d4:b7:0f:64:05:04:3e:f0:fd:a7:32:99: 4c:55:b6:89:7b:ff:0d:73:80:0c:33:0f:e9:0b:21: 6d:f5:09:94:7e:55:32:e0:2d:a1:29:e2:39:d8:de: 30:db:24:8d:c4:38:fd:8d:2f:33:84:2d:fc:9a:5e: 5f:c4:42:89:6a:0a:b6:d6:f9:8c:0f:93:b1:e0:45: 64:b3:0c:f0:85:40:6f:9d:e9:bf:d2:4b:db:3e:9c: 51:e6:26:9e:83:d1:1b:a8:01:3a:94:45:f9:f9:90: 67:8e:e5:5c:ce:0b:a2:14:83:0b:4b:8d:7c:3d:51: bb:9d:78:82:da:00:83:a6:d4:d1:c0:a9:c1:a5:e3: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:84:C0:8C:A1:09:0A:D2:BE:7B:D8:D5:1F:BB:BB:CF:41:F1:97:33 X509v3 Authority Key Identifier: keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0d:5b:1a:71:e5:1c:6f:01:33:1a:50:1b:e2:45:ca:71:08: a0:c1:df:d1:2a:df:0f:2c:17:51:f6:f3:0f:66:ef:48:6b:f9: 8c:bc:2b:36:e4:7b:71:c4:71:71:bc:ba:37:44:bb:36:9a:15: aa:a6:7a:2a:5b:9f:71:bb:b0:c7:0d:59:f7:b5:e0:5b:2d:2c: 77:ee:3d:9a:38:a4:e8:9a:88:22:cf:3a:98:05:1b:20:e0:4f: ac:a9:c9:d2:92:9f:30:b7:d3:52:c3:c7:43:e4:5a:e2:22:83: 60:1a:d0:88:d8:55:f0:79:7f:af:08:17:f6:ca:d1:6e:29:49: be:8d:15:83:44:1d:fd:95:5d:9f:ac:61:e1:18:fa:f2:c3:a3: d5:f4:91:2b:32:28:b8:3c:dd:14:05:eb:2c:20:52:2d:c4:23: 49:42:df:8a:0d:8c:73:a8:50:fd:76:2b:4f:bd:67:16:95:7d: b5:b4:63:f1:ce:83:37:72:bf:c8:57:63:c2:b9:81:7e:50:1d: 88:47:fb:b3:9a:17:ec:ab:9e:01:85:6f:76:b2:8e:d0:ef:d5: 1a:2e:37:13:e9:b9:d7:43:eb:8c:e1:5d:c6:16:cb:59:84:5b: 0a:45:79:78:85:37:03:68:8f:f1:a0:c2:5a:eb:d7:0f:4e:5f: ab:9c:80:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REUxMzExMC8GA1UEBRMoNDlGRDMzRDZGNTFBRDZBNDk4ODQ0NjlGQTM5RkVGMDQz MjMzNkY4MTAeFw0yNTExMDUwNzE3MzBaFw0yNTExMTIwNzE3MzBaMBgxFjAUBgNV BAMTDTY5MGFmYTBhLTdlMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFP9FDvA8qWEdVCrKwWtfOumASPJmZ5jnhObpOrCOuXC6PIQbkFpLHIr4vnHg+ Q+R+4cfL5QSxnkAMp3ldS37EpheK/SGhg4FFcwadDCzq8X0K6PFykz1RtnRsiHeV d9faAt0gi+nScDrWaKpMnk9lJd9LYB9zxrK+jNS3D2QFBD7w/acymUxVtol7/w1z gAwzD+kLIW31CZR+VTLgLaEp4jnY3jDbJI3EOP2NLzOELfyaXl/EQolqCrbW+YwP k7HgRWSzDPCFQG+d6b/SS9s+nFHmJp6D0RuoATqURfn5kGeO5VzOC6IUgwtLjXw9 UbudeILaAIOm1NHAqcGl4/G9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGITAjKEJ CtK+e9jVH7u7z0HxlzMwHwYDVR0jBBgwFoAUSf0z1vUa1qSYhEafo5/vBDIzb4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERTEzLzE1MUZFNDdFMkE1 NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2YwejF2VWExcVNZaEVhZm81X3ZCREl6YjRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RTEzLzE1MUZFNDdFMkE1NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFT WWhFYWZvNV92QkRJemI0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYNWxpx5RxvATMaUBviRcpxCKDB39Eq3w8sF1H28w9m70hr+Yy8Kzbk e3HEcXG8ujdEuzaaFaqmeipbn3G7sMcNWfe14FstLHfuPZo4pOiaiCLPOpgFGyDg T6ypydKSnzC301LDx0PkWuIig2Aa0IjYVfB5f68IF/bK0W4pSb6NFYNEHf2VXZ+s YeEY+vLDo9X0kSsyKLg83RQF6ywgUi3EI0lC34oNjHOoUP12K0+9ZxaVfbW0Y/HO gzdyv8hXY8K5gX5QHYhH+7OaF+yrngGFb3ayjtDv1RouNxPpuddD64zhXcYWy1mE WwpFeXiFNwNoj/Ggwlrr1w9OX6ucgCg= -----END CERTIFICATE-----Generated at Wed Nov 5 16:58:59 2025 by rpki-client