$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: 1SltCdkUGgcLOV7yhTIm/Quwum84BTUAt2zjiKbXChk= Subject key identifier: 36:2D:3C:88:F9:E1:48:B1:EC:4A:06:44:26:07:7C:C2:E6:32:50:58 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0CFD Signing time: Tue 04 Nov 2025 18:13:45 +0000 Manifest this update: Tue 04 Nov 2025 18:13:44 +0000 Manifest next update: Tue 11 Nov 2025 18:13:44 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: vTp7JpgV5asJxdtGMFdEJa+SaqmjiWqS7E5B7DqOb7Y=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Nov 4 18:13:44 2025 GMT Not After : Nov 11 18:13:44 2025 GMT Subject: CN=690a4258-2d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:a5:62:ae:c5:74:7e:9a:69:b4:df:b4:a1: 82:e7:69:6e:e7:9e:ef:73:42:6d:be:b9:46:ee:63: 53:cc:74:cf:9e:42:96:52:e7:6b:87:52:22:ea:fb: df:8d:3b:82:cf:60:06:c9:98:1d:a1:3b:e4:d3:6c: 60:c0:18:f7:a8:b8:a5:90:da:d1:e4:80:43:66:98: 3a:cb:7d:bc:05:ab:cf:02:99:8f:a7:d3:4d:2c:f7: c8:b0:3b:84:1a:00:ba:f5:4d:9a:ca:71:e3:98:d5: 60:a4:90:d7:4b:aa:aa:4f:ed:dc:4c:53:99:a3:22: a0:a5:ca:c6:ab:25:0c:6f:59:7e:b7:0b:43:2b:bc: a2:2d:aa:2e:93:84:91:ee:f2:62:77:b0:81:e9:75: 96:b6:a2:23:ef:54:83:5b:6f:33:d4:29:e3:e7:7a: 88:fa:f9:1f:19:f6:d0:25:f2:4d:fc:f5:e1:58:5e: 76:43:6e:43:3c:f1:ac:f2:f2:2e:c9:bd:78:7a:de: e1:19:ef:4d:91:9c:e9:af:14:c4:9e:d2:66:8d:6a: b9:7d:01:3c:70:40:9c:d9:72:b1:0b:bb:83:e5:b9: b5:11:58:d9:b3:da:49:31:89:94:f3:d7:41:5f:84: c3:01:bf:f9:7a:22:bc:80:40:9a:7f:cc:4f:c3:f7: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:3C:88:F9:E1:48:B1:EC:4A:06:44:26:07:7C:C2:E6:32:50:58 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c3:9a:55:57:b4:29:aa:d6:26:7d:cc:c1:3f:b9:9e:3a:55: 77:97:f3:0d:1d:7e:9e:a1:c7:f2:e0:f1:51:62:46:43:5e:83: c6:8d:94:80:4b:d3:05:7a:4a:ae:29:eb:64:0c:4d:b9:0c:ff: a8:42:eb:e7:c0:b9:17:8a:66:d7:f7:65:02:c7:e3:b5:03:7c: f6:a7:64:24:52:a9:d8:4b:ac:f7:4c:45:18:a1:c0:4d:e6:73: a7:a9:fd:8a:96:36:ea:db:43:ef:70:0a:d3:42:bf:8f:ef:a3: e7:58:e5:42:29:29:46:38:8a:7a:45:5e:5d:1a:8b:6d:33:7c: e1:79:e4:2e:4c:a7:fb:04:7a:53:8d:8e:92:30:2a:4e:69:96: e1:1a:88:be:ec:be:37:af:46:cd:9b:f4:c9:44:e5:b6:ef:3b: 1e:f2:da:e5:83:29:d4:2f:bc:e3:b1:05:83:a4:76:56:90:0d: d1:bc:30:c7:98:e8:a4:0a:7a:6d:a1:fd:df:e0:2d:df:89:cf: ce:46:e4:3c:0a:28:60:2b:5c:34:8c:25:b7:db:66:9e:47:20: 3b:3b:77:ed:ba:9d:d7:4e:0d:a8:d5:6e:0c:4b:c1:1f:71:d7: 1b:68:c4:40:87:33:f2:33:bf:83:fb:2a:85:84:a0:74:f5:31: 78:23:c4:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUxMTA0MTgxMzQ0WhcNMjUxMTExMTgxMzQ0WjAYMRYwFAYD VQQDEw02OTBhNDI1OC0yZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMClYq7FdH6aabTftKGC52lu557vc0JtvrlG7mNTzHTPnkKWUudrh1Ii6vvf jTuCz2AGyZgdoTvk02xgwBj3qLilkNrR5IBDZpg6y328BavPApmPp9NNLPfIsDuE GgC69U2aynHjmNVgpJDXS6qqT+3cTFOZoyKgpcrGqyUMb1l+twtDK7yiLaouk4SR 7vJid7CB6XWWtqIj71SDW28z1Cnj53qI+vkfGfbQJfJN/PXhWF52Q25DPPGs8vIu yb14et7hGe9NkZzprxTEntJmjWq5fQE8cECc2XKxC7uD5bm1EVjZs9pJMYmU89dB X4TDAb/5eiK8gECaf8xPw/fS2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYtPIj5 4Uix7EoGRCYHfMLmMlBYMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfw5pVV7QpqtYmfczBP7meOlV3l/MNHX6eocfy4PFRYkZDXoPGjZSA S9MFekquKetkDE25DP+oQuvnwLkXimbX92UCx+O1A3z2p2QkUqnYS6z3TEUYocBN 5nOnqf2Kljbq20PvcArTQr+P76PnWOVCKSlGOIp6RV5dGottM3zheeQuTKf7BHpT jY6SMCpOaZbhGoi+7L43r0bNm/TJROW27zse8trlgynUL7zjsQWDpHZWkA3RvDDH mOikCnptof3f4C3fic/ORuQ8CihgK1w0jCW322aeRyA7O3ftup3XTg2o1W4MS8Ef cdcbaMRAhzPyM7+D+yqFhKB09TF4I8Rb -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:40 2025 by rpki-client