$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: a3JOrWGiryTfUBBh7GiMJVHt3hB8NKIpsD5VXPMLJ7g= Subject key identifier: 65:21:87:BE:89:54:65:ED:64:E3:62:0D:6B:EB:45:98:B4:43:18:69 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0586 Signing time: Sun 02 Nov 2025 23:18:36 +0000 Manifest this update: Sun 02 Nov 2025 23:18:36 +0000 Manifest next update: Sun 09 Nov 2025 23:18:36 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: SZo4JheZPAzgkZj1MexhwHJpXagW7We7Z0l1tkVXBdg=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 4: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 5: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Nov 2 23:18:36 2025 GMT Not After : Nov 9 23:18:36 2025 GMT Subject: CN=6907e6cc-f863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:e3:94:b3:54:ff:f7:7f:b8:9d:0e:9e:cd: 03:51:6c:10:29:2e:6e:b4:96:f1:d1:1c:42:96:80: df:3e:b8:8c:f6:3d:63:b4:a1:c8:58:86:a1:98:16: d8:c2:62:c2:56:a9:60:ef:31:6a:16:05:d1:f6:13: d0:1a:63:07:82:6b:7b:64:1c:3f:0b:40:db:e7:28: d4:f0:7e:44:11:c9:4a:79:3b:fd:4e:16:cd:36:6f: b2:97:de:b2:2c:6b:57:42:96:dd:f4:19:95:6c:55: 52:6f:72:54:74:d5:bf:cd:38:55:f1:81:21:15:f5: a1:c2:d5:fb:fd:c4:c0:8d:b2:a0:7f:79:34:82:6e: a4:87:81:14:7a:24:c1:d9:43:f9:cc:a3:65:0c:70: f7:59:62:46:ed:53:63:31:5e:cd:b0:98:29:d3:72: b0:93:a9:2e:42:69:42:5e:8d:ef:5d:c0:35:1f:7b: fa:6c:2f:c8:88:4e:dd:59:14:08:41:21:27:40:32: a9:4f:46:07:20:5a:12:9e:a2:a0:fd:19:96:ca:7e: ef:84:64:75:e5:03:22:a1:d6:5a:be:8c:d8:0c:25: 13:69:1b:bc:88:55:75:83:17:76:15:0b:f2:1c:61: 20:06:79:ab:b6:92:3d:08:81:04:71:96:c4:02:2f: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:87:BE:89:54:65:ED:64:E3:62:0D:6B:EB:45:98:B4:43:18:69 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:11:b4:e6:1d:10:5d:09:0e:43:24:18:52:48:54:f9:85:e0: f3:c6:a2:a4:2b:8e:dd:72:59:f5:4f:bc:6d:8b:32:e1:30:1d: 04:dc:70:ce:7d:b7:63:5b:ef:56:a2:a2:ca:7f:bf:26:e7:88: 3d:43:7c:83:f7:b2:f7:7c:c3:19:c8:ba:43:79:03:e2:b5:0c: 34:6d:9d:a0:78:2a:a6:dc:bf:95:67:f1:3a:7a:3f:aa:63:d6: 9b:d9:2a:05:3b:a8:17:2a:c1:20:42:c9:f9:7a:21:04:74:09: 81:f3:72:f6:95:d8:79:cd:59:cd:b9:12:04:e3:ed:6a:2d:a4: 79:9b:64:e0:4c:96:89:4f:ba:2d:70:60:3f:ba:14:0c:8b:3c: 45:fc:b4:e4:6e:77:35:6c:b5:04:ec:e2:49:96:23:c3:95:ec: 73:8f:12:e9:fb:69:f5:04:24:18:f0:d1:f5:84:29:da:28:62: 63:34:38:42:94:54:f3:57:93:80:ba:1f:a2:e2:42:93:6e:5f: 10:8a:f4:a8:4b:70:c7:fd:4e:36:3b:15:46:9b:ec:5e:b3:23: 60:9c:5a:f9:26:ff:ca:d8:e1:f1:25:90:63:1a:24:a3:6a:92: ee:3d:62:c8:0a:24:de:73:64:52:1c:02:3d:48:91:a4:47:90: d3:6e:fd:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUxMTAyMjMxODM2WhcNMjUxMTA5MjMxODM2WjAYMRYwFAYD VQQDEw02OTA3ZTZjYy1mODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRDjlLNU//d/uJ0Ons0DUWwQKS5utJbx0RxCloDfPriM9j1jtKHIWIahmBbY wmLCVqlg7zFqFgXR9hPQGmMHgmt7ZBw/C0Db5yjU8H5EEclKeTv9ThbNNm+yl96y LGtXQpbd9BmVbFVSb3JUdNW/zThV8YEhFfWhwtX7/cTAjbKgf3k0gm6kh4EUeiTB 2UP5zKNlDHD3WWJG7VNjMV7NsJgp03Kwk6kuQmlCXo3vXcA1H3v6bC/IiE7dWRQI QSEnQDKpT0YHIFoSnqKg/RmWyn7vhGR15QMiodZavozYDCUTaRu8iFV1gxd2FQvy HGEgBnmrtpI9CIEEcZbEAi9kMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUhh76J VGXtZONiDWvrRZi0QxhpMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVEbTmHRBdCQ5DJBhSSFT5heDzxqKkK47dcln1T7xtizLhMB0E3HDO fbdjW+9WoqLKf78m54g9Q3yD97L3fMMZyLpDeQPitQw0bZ2geCqm3L+VZ/E6ej+q Y9ab2SoFO6gXKsEgQsn5eiEEdAmB83L2ldh5zVnNuRIE4+1qLaR5m2TgTJaJT7ot cGA/uhQMizxF/LTkbnc1bLUE7OJJliPDlexzjxLp+2n1BCQY8NH1hCnaKGJjNDhC lFTzV5OAuh+i4kKTbl8QivSoS3DH/U42OxVGm+xesyNgnFr5Jv/K2OHxJZBjGiSj apLuPWLICiTec2RSHAI9SJGkR5DTbv2/ -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:55 2025 by rpki-client