$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft File: pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json) Hash identifier: ZSP0FSR/u4d04I00/09b157SRxGkm+ifpZKHcqxwXYE= Subject key identifier: 0B:AF:26:B0:12:F4:FB:84:A1:C3:C2:2F:43:15:B4:E0:49:4D:AB:1A Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft Manifest number: FE Signing time: Wed 05 Nov 2025 05:20:03 +0000 Manifest this update: Wed 05 Nov 2025 05:20:03 +0000 Manifest next update: Wed 12 Nov 2025 05:20:03 +0000 Files and hashes: 1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: HIMUyyd8TosrATCsdQuelWBpDFvTgwV/5f+AzupZ6hc=) 2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: n9WiQjAGu9O9bLeoq38kpAQ+Tw7nAmw19T1TLy6Ivwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43 Validity Not Before: Nov 5 05:20:03 2025 GMT Not After : Nov 12 05:20:03 2025 GMT Subject: CN=690ade83-9c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:a9:60:30:74:38:d8:80:fd:a8:58:92:b1: 47:9a:fa:b7:b9:f3:f0:b4:aa:1e:2c:68:ec:95:e1: 82:93:f1:d3:0a:da:4f:14:b2:b6:34:d0:0c:21:c6: 6e:e3:ae:b5:2c:8f:4c:92:49:38:35:0a:1e:15:da: 29:6e:0d:c5:e7:e6:15:ce:73:47:2c:d6:29:27:99: b0:34:01:43:05:4a:3d:28:0c:72:b0:64:78:f0:c0: f9:e9:9d:fc:c0:7d:98:f6:5e:83:4f:14:8f:28:5b: 4d:03:db:2d:05:6b:8d:11:d2:26:72:46:b8:94:fb: f6:41:02:d9:53:dd:2c:dc:20:57:86:1c:10:05:3c: 5d:c8:8b:f8:ac:0d:21:cb:79:b1:1e:a2:ce:9b:52: 98:05:eb:34:19:d0:47:af:4d:4d:61:93:16:f0:a7: 4d:50:fa:1c:63:4b:33:db:52:61:5f:6e:4c:09:da: ec:6c:43:1c:d9:cf:08:1e:a7:3f:9d:4c:4d:8e:39: f9:d6:54:83:44:78:fe:a5:a9:19:95:b1:4f:da:d2: 17:54:cb:67:45:f3:2c:7a:29:67:40:fd:61:3d:7c: 6d:cd:9e:ea:9c:9b:9c:a7:c1:f6:11:dd:5c:92:d4: 32:45:79:ea:3d:00:db:7a:fe:d2:8e:3e:7f:08:40: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:26:B0:12:F4:FB:84:A1:C3:C2:2F:43:15:B4:E0:49:4D:AB:1A X509v3 Authority Key Identifier: keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:21:01:39:0e:ed:43:5f:af:88:c8:1b:6b:97:47:8b:82:82: 33:10:6a:d9:33:cf:c4:36:37:4a:a2:74:69:6b:a3:ec:36:40: 3c:12:55:ed:62:bc:d5:06:fb:75:8f:d0:81:95:4d:82:4f:88: 6c:28:ba:69:4b:18:f9:21:23:3d:fd:69:c1:eb:39:98:05:9e: e3:20:db:53:45:dc:01:63:6a:ce:ea:96:7e:1a:41:d6:87:b5: 71:9c:16:05:2f:85:bb:a6:08:19:ff:91:32:6e:df:47:97:20: 5b:f0:7f:8e:80:f7:c2:b3:de:50:1e:62:a0:63:62:70:f5:b2: a1:d9:c7:39:ce:69:80:26:16:cb:fb:96:46:8f:47:33:37:4f: 83:9e:58:c4:0b:55:a2:e2:c2:b1:d4:fb:31:4a:56:b4:06:87: ec:5e:dc:9a:80:f7:dc:56:5e:59:92:bf:57:b1:01:d9:17:90: d1:75:5e:85:d1:48:51:43:cf:6e:a4:19:cf:4d:6e:4e:82:28: b0:cb:e6:67:95:c1:65:b0:c4:8b:ad:1b:14:97:38:aa:37:63: 7f:70:0d:f6:c9:e6:5c:68:97:9a:a9:e4:c2:7c:da:bd:7b:94: ba:4c:d9:0a:73:88:0d:70:fd:16:65:b7:60:f2:93:e9:87:b0: ba:29:1d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE2MTgxMTAvBgNVBAUTKEE1MkJGMDI4NzcxOTE5NDk3MTJEM0RBRDI5RDRBQjdB Mjc3OUVDNDMwHhcNMjUxMTA1MDUyMDAzWhcNMjUxMTEyMDUyMDAzWjAYMRYwFAYD VQQDEw02OTBhZGU4My05YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gqpYDB0ONiA/ahYkrFHmvq3ufPwtKoeLGjsleGCk/HTCtpPFLK2NNAMIcZu 4661LI9Mkkk4NQoeFdopbg3F5+YVznNHLNYpJ5mwNAFDBUo9KAxysGR48MD56Z38 wH2Y9l6DTxSPKFtNA9stBWuNEdImcka4lPv2QQLZU90s3CBXhhwQBTxdyIv4rA0h y3mxHqLOm1KYBes0GdBHr01NYZMW8KdNUPocY0sz21JhX25MCdrsbEMc2c8IHqc/ nUxNjjn51lSDRHj+pakZlbFP2tIXVMtnRfMseilnQP1hPXxtzZ7qnJucp8H2Ed1c ktQyRXnqPQDbev7Sjj5/CEB92QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuvJrAS 9PuEocPCL0MVtOBJTasaMB8GA1UdIwQYMBaAFKUr8Ch3GRlJcS09rSnUq3oneexD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTYxOC81NTdFQUIzQzNB QkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdVbHhMVDJ0S2RTcmVpZDU3 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdndLSGNaR1VseExUMnRLZFNyZWlkNTdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTYxOC81NTdFQUIzQzNBQkUxMUVGODYxOUQyMjBDNEY5QUUwMi9wU3Z3S0hjWkdV bHhMVDJ0S2RTcmVpZDU3RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMIQE5Du1DX6+IyBtrl0eLgoIzEGrZM8/ENjdKonRpa6PsNkA8ElXt YrzVBvt1j9CBlU2CT4hsKLppSxj5ISM9/WnB6zmYBZ7jINtTRdwBY2rO6pZ+GkHW h7VxnBYFL4W7pggZ/5Eybt9HlyBb8H+OgPfCs95QHmKgY2Jw9bKh2cc5zmmAJhbL +5ZGj0czN0+DnljEC1Wi4sKx1PsxSla0BofsXtyagPfcVl5Zkr9XsQHZF5DRdV6F 0UhRQ89upBnPTW5Ogiiwy+ZnlcFlsMSLrRsUlziqN2N/cA32yeZcaJeaqeTCfNq9 e5S6TNkKc4gNcP0WZbdg8pPph7C6KR3o -----END CERTIFICATE-----Generated at Wed Nov 5 17:58:39 2025 by rpki-client