$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: ApYiqOu2wIgyTtb3qvvb92Ktp/+R3D7G+IeAvPxTotY= Subject key identifier: 23:C1:A9:A3:69:1E:1D:40:C6:CB:9C:C0:ED:34:05:10:17:64:FD:12 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 02E3 Signing time: Mon 03 Nov 2025 01:18:41 +0000 Manifest this update: Mon 03 Nov 2025 01:18:41 +0000 Manifest next update: Mon 10 Nov 2025 01:18:41 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: unXelP1IohQ01UmZdmfSn9PMpbceMH6Fi0XCt9BHBvU=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: 9v/ZeGZKD58JIKPG+TPtlKNDrryBJF2rWiKbvOcAj4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Nov 3 01:18:41 2025 GMT Not After : Nov 10 01:18:41 2025 GMT Subject: CN=690802f1-03e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:68:b7:7d:d2:99:bf:ad:e2:ba:21:7e:48:39: d4:fe:b1:a5:40:f4:b6:e5:bf:91:f5:58:84:08:fa: c5:fd:4b:51:21:1b:8e:2a:e6:d8:84:38:44:8d:9e: 7a:c5:1f:27:dc:2f:ab:ed:8d:9f:31:70:75:24:35: de:7e:57:d9:1e:93:f3:1e:37:18:54:db:44:5b:f5: 4d:13:43:89:19:db:6f:3a:3c:2f:ac:e8:72:fa:0f: e4:b0:60:a2:18:42:eb:f4:58:06:ad:a5:06:51:f3: df:29:07:d0:d0:e4:bd:82:af:23:5d:7a:7a:2b:e7: a5:c6:52:7c:c4:64:ad:74:54:36:3a:b0:43:f5:55: 6c:7e:f6:ea:d3:1e:7f:62:85:d8:2c:62:a5:52:09: f5:02:e9:d6:77:63:99:08:8a:b3:72:62:5a:ea:42: ea:e0:8f:b4:41:b4:09:f5:c4:f3:14:2e:57:ba:43: bb:5f:1e:35:10:40:c4:03:63:b0:35:cd:60:ad:39: 37:7b:e0:eb:45:2c:fb:27:38:a6:9c:fa:fa:e1:91: 38:08:a7:7e:5e:1c:90:4a:fa:02:a5:49:65:b7:19: 35:44:b4:07:f0:d9:9c:0b:8a:ba:70:61:61:95:2a: 2b:b1:0b:d4:82:a4:5b:ac:e2:c2:a8:ce:87:38:6a: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:A9:A3:69:1E:1D:40:C6:CB:9C:C0:ED:34:05:10:17:64:FD:12 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:3c:85:71:5f:b5:5b:7a:f1:42:43:c1:12:0d:87:ca:21:eb: a2:0f:59:53:46:cd:93:f1:1a:b1:7a:bb:bc:0b:52:15:2a:1c: ea:f3:8b:93:a9:fa:82:8c:65:22:d7:3a:f8:1a:25:59:69:58: c9:b0:82:a9:a4:42:1c:ef:0c:5d:2f:50:8c:06:90:63:28:b9: 7e:f7:e0:77:5a:5b:f2:a9:72:e6:ed:b2:b5:10:97:66:e8:e2: 19:58:1b:47:d6:8a:bd:e9:4f:b1:70:54:e6:37:f6:eb:25:1e: 22:ac:d1:63:65:88:65:83:e1:09:d5:32:04:89:4a:6b:b7:fa: b0:55:61:0e:c9:89:d0:28:da:5b:ad:4a:c1:39:98:26:45:a6: c0:5e:a9:b0:b6:a0:a3:7f:28:dc:f7:a7:81:87:a7:a4:39:12: ab:00:a0:25:e6:a5:b6:f9:c3:99:f5:63:97:0e:d2:0a:33:e0: b3:fa:28:a2:5e:cc:94:64:69:e2:b2:0e:18:34:a7:ef:73:90: 87:06:c1:01:f9:6f:37:bb:10:a3:b8:ba:6b:94:1c:2d:9e:36: 9e:9d:55:54:2a:1d:31:3a:e7:c7:10:dd:8c:e4:c0:33:9c:6a: 8f:dd:d6:52:18:f8:a1:4a:e3:52:ab:b4:d6:8c:20:03:e6:53: d9:17:66:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUxMTAzMDExODQxWhcNMjUxMTEwMDExODQxWjAYMRYwFAYD VQQDEw02OTA4MDJmMS0wM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mi3fdKZv63iuiF+SDnU/rGlQPS25b+R9ViECPrF/UtRIRuOKubYhDhEjZ56 xR8n3C+r7Y2fMXB1JDXeflfZHpPzHjcYVNtEW/VNE0OJGdtvOjwvrOhy+g/ksGCi GELr9FgGraUGUfPfKQfQ0OS9gq8jXXp6K+elxlJ8xGStdFQ2OrBD9VVsfvbq0x5/ YoXYLGKlUgn1AunWd2OZCIqzcmJa6kLq4I+0QbQJ9cTzFC5XukO7Xx41EEDEA2Ow Nc1grTk3e+DrRSz7JzimnPr64ZE4CKd+XhyQSvoCpUlltxk1RLQH8NmcC4q6cGFh lSorsQvUgqRbrOLCqM6HOGqxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPBqaNp Hh1AxsucwO00BRAXZP0SMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAPIVxX7VbevFCQ8ESDYfKIeuiD1lTRs2T8Rqxeru8C1IVKhzq84uT qfqCjGUi1zr4GiVZaVjJsIKppEIc7wxdL1CMBpBjKLl+9+B3WlvyqXLm7bK1EJdm 6OIZWBtH1oq96U+xcFTmN/brJR4irNFjZYhlg+EJ1TIEiUprt/qwVWEOyYnQKNpb rUrBOZgmRabAXqmwtqCjfyjc96eBh6ekORKrAKAl5qW2+cOZ9WOXDtIKM+Cz+iii XsyUZGnisg4YNKfvc5CHBsEB+W83uxCjuLprlBwtnjaenVVUKh0xOufHEN2M5MAz nGqP3dZSGPihSuNSq7TWjCAD5lPZF2bt -----END CERTIFICATE-----Generated at Tue Nov 4 12:46:27 2025 by rpki-client