$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: oxxD0GnYp5HtWviyeXOesw7+WL9NDd9dCPiLZq+qeYk= Subject key identifier: 70:F6:01:3E:D3:D9:B7:BC:95:8B:F1:A2:4B:5C:5C:B7:71:F2:3B:23 Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 041E Signing time: Wed 05 Nov 2025 00:28:19 +0000 Manifest this update: Wed 05 Nov 2025 00:28:19 +0000 Manifest next update: Wed 12 Nov 2025 00:28:19 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: Dm/pS5pJ/P13dQCR1XeRDkVuzUT15g5PtqHh1+SsW/M=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Nov 5 00:28:19 2025 GMT Not After : Nov 12 00:28:19 2025 GMT Subject: CN=690a9a23-e8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:cc:60:35:dd:29:5c:72:4c:77:b5:20:55: 5b:4e:9d:6e:af:bc:4a:37:06:5c:d8:2a:52:71:32: 1b:fb:6d:d6:bc:c7:9c:eb:56:3c:2f:78:81:97:47: c5:b0:da:2d:57:27:44:35:4b:d6:a7:f9:d8:e6:0a: 53:15:d2:95:ae:d6:70:78:12:b7:59:2e:a4:a8:67: f4:dc:29:e6:cb:72:4c:c8:33:d1:9d:09:2a:18:8d: 22:69:1c:d9:e0:7d:c0:0f:e5:a7:aa:b4:a4:29:d2: 3a:bb:f1:a0:40:5d:86:68:59:5b:84:65:2e:d8:64: f2:1d:6a:97:ae:75:12:d6:c8:e5:a6:c7:ad:82:ac: 04:c2:59:13:ce:f3:38:bd:fd:59:28:15:3e:01:8a: a4:17:c9:95:58:2f:38:a1:33:21:3c:8e:3d:38:d9: 57:f9:06:17:30:91:a0:cd:f3:4f:d8:a3:36:af:02: 8e:6d:84:2b:83:f1:cf:6b:d6:f0:f8:71:7e:04:46: 97:82:20:3a:3b:e7:71:f7:cd:8a:4e:44:33:3e:17: 36:66:6d:a2:f2:db:4b:43:6b:c2:a0:16:6c:40:dd: cf:c8:13:bf:c5:44:7a:b9:61:1b:63:e8:6b:66:46: a9:74:6e:19:85:80:94:66:4e:fb:18:24:d5:f0:61: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:01:3E:D3:D9:B7:BC:95:8B:F1:A2:4B:5C:5C:B7:71:F2:3B:23 X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:04:93:c2:46:88:8a:2f:7e:4d:68:fc:85:1e:ba:1f:22:6a: 18:10:78:7a:75:60:50:e4:f1:5b:39:bb:94:88:20:ae:97:97: cf:ec:78:b0:e8:45:b1:ef:c4:00:e6:6c:15:aa:15:13:7d:5a: 04:c1:0e:31:c1:95:e2:9b:35:4c:f2:46:29:74:40:9d:0b:a1: 48:60:0b:8b:2c:76:84:a2:92:58:db:9b:c2:4f:b3:90:e3:66: f1:1c:24:2a:e3:57:6b:64:3f:c7:76:85:e6:e1:2d:ce:4c:2c: d5:e6:5e:35:4f:5b:f0:96:8d:85:ed:90:1b:a0:ae:a4:67:65: ba:12:58:ed:ac:dc:28:1b:ac:a8:57:73:58:cc:62:21:c1:c6: 9f:34:05:f7:83:18:72:26:92:e3:07:c3:80:7b:75:a0:d4:99: a9:f4:3b:fb:fb:98:d2:7f:20:9d:2b:8f:f4:cf:d7:b2:31:e9: 89:42:dc:55:b4:c1:3e:61:4e:e4:d8:d3:e0:f7:27:1e:af:61: 30:70:7d:a1:07:a0:99:2e:5e:4e:19:76:51:4a:cb:fa:fb:8b: a3:9b:eb:8a:b9:a1:bc:83:ed:70:90:7a:8e:de:03:ea:82:7c: d2:ac:d0:71:4d:be:ee:57:8b:7d:f4:44:c4:4a:e5:e8:35:37: f6:b7:81:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUxMTA1MDAyODE5WhcNMjUxMTEyMDAyODE5WjAYMRYwFAYD VQQDEw02OTBhOWEyMy1lOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZHMYDXdKVxyTHe1IFVbTp1ur7xKNwZc2CpScTIb+23WvMec61Y8L3iBl0fF sNotVydENUvWp/nY5gpTFdKVrtZweBK3WS6kqGf03Cnmy3JMyDPRnQkqGI0iaRzZ 4H3AD+WnqrSkKdI6u/GgQF2GaFlbhGUu2GTyHWqXrnUS1sjlpsetgqwEwlkTzvM4 vf1ZKBU+AYqkF8mVWC84oTMhPI49ONlX+QYXMJGgzfNP2KM2rwKObYQrg/HPa9bw +HF+BEaXgiA6O+dx982KTkQzPhc2Zm2i8ttLQ2vCoBZsQN3PyBO/xUR6uWEbY+hr ZkapdG4ZhYCUZk77GCTV8GE7DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD2AT7T 2be8lYvxoktcXLdx8jsjMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeBJPCRoiKL35NaPyFHrofImoYEHh6dWBQ5PFbObuUiCCul5fP7Hiw 6EWx78QA5mwVqhUTfVoEwQ4xwZXimzVM8kYpdECdC6FIYAuLLHaEopJY25vCT7OQ 42bxHCQq41drZD/HdoXm4S3OTCzV5l41T1vwlo2F7ZAboK6kZ2W6EljtrNwoG6yo V3NYzGIhwcafNAX3gxhyJpLjB8OAe3Wg1Jmp9Dv7+5jSfyCdK4/0z9eyMemJQtxV tME+YU7k2NPg9ycer2EwcH2hB6CZLl5OGXZRSsv6+4ujm+uKuaG8g+1wkHqO3gPq gnzSrNBxTb7uV4t99ETESuXoNTf2t4H9 -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:01 2025 by rpki-client