$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json) Hash identifier: jDQS1EtkA/lrQimeJnEXuAX+5VQ/99i8aHaH1U23rnE= Subject key identifier: F0:06:95:55:C7:24:36:18:BE:2E:26:98:6A:E8:AF:C1:89:F7:31:CC Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft Manifest number: 9A Signing time: Wed 05 Nov 2025 06:33:50 +0000 Manifest this update: Wed 05 Nov 2025 06:33:49 +0000 Manifest next update: Wed 12 Nov 2025 06:33:49 +0000 Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: 2HXE6hvPh8fCyjR7BCXkSDtm7pMzB/dgG+u5I9cItbs=) 2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: f1IFYkIgMkQ3+JyMSl70ACqIsH3T9EI7K8/rW2krDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Validity Not Before: Nov 5 06:33:49 2025 GMT Not After : Nov 12 06:33:49 2025 GMT Subject: CN=690aefce-92bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:ee:ab:e9:1a:b2:6c:d4:62:d0:3e:73:03: 90:47:3d:9b:33:c2:fa:41:27:c3:4f:b6:3b:b0:2f: 87:ab:8d:52:97:d1:e0:2d:42:e4:0d:f3:b7:c6:1b: 86:dd:e9:7c:a5:7c:92:c5:63:47:9d:e7:3e:6a:86: 79:03:b5:3c:47:1c:92:82:f7:36:ee:53:42:27:4c: 9e:1f:26:70:dc:c2:70:4c:ba:70:c2:50:e1:96:82: 0d:0c:66:86:42:2c:ed:3c:56:6b:f7:30:4f:d6:22: ae:9b:a6:b1:af:b3:41:1c:e3:40:28:ca:0c:75:da: 64:76:21:6e:09:83:b0:61:19:5f:a5:8c:ad:4b:c2: 01:30:a5:39:a4:9f:0c:8c:94:9f:60:6d:41:52:7b: ad:80:d1:74:86:5c:ba:fc:dc:eb:e5:49:43:ce:a5: 1a:73:c7:c3:f3:30:98:4d:49:84:44:36:62:ee:3b: 1e:ac:12:76:33:c1:82:8f:e8:8f:d3:27:95:fe:e0: 8c:e5:fe:6f:1d:c8:05:d6:eb:80:ec:f5:08:7d:7d: f7:39:ed:ca:73:eb:5b:4e:0c:da:e7:15:da:bd:94: 52:31:ab:7c:cb:06:0a:ce:e2:fe:6b:16:0e:87:dc: ce:e6:fc:6e:9c:f2:16:5f:08:41:a5:c1:3c:e9:79: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:06:95:55:C7:24:36:18:BE:2E:26:98:6A:E8:AF:C1:89:F7:31:CC X509v3 Authority Key Identifier: keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:2e:da:03:b9:a3:ba:ff:6f:10:30:c1:3f:2d:f0:be:bd:db: c7:e4:a8:12:89:42:9c:58:68:4c:93:83:7d:b7:4b:e9:bf:ec: 89:6b:a7:56:e8:f5:bd:4c:f7:eb:ef:a8:24:43:0d:bc:a7:d2: 71:ba:12:d6:af:9f:4e:e9:1f:27:fd:8e:3d:cd:48:da:46:8e: 54:03:98:06:07:60:ac:a8:6f:0a:ae:bc:1d:13:16:a4:3f:be: e1:ea:11:8a:87:c6:5a:d9:df:c3:c1:26:7e:0b:16:e3:47:7a: a0:7e:cc:7e:d5:86:aa:6d:b7:7b:88:30:3e:35:66:1e:25:74: e5:01:7b:76:e1:6e:36:45:4f:3e:fe:aa:81:9a:16:58:2c:f9: 88:12:d2:b4:01:30:85:ad:9c:fb:d2:7a:60:d8:1b:e5:88:b1: d2:80:9a:4a:13:90:68:a5:08:d7:ba:45:39:01:f7:1a:f1:62: a7:70:35:3c:1a:fc:e4:86:02:d7:4b:5e:95:cc:65:e7:c3:32: ae:ae:d5:e7:03:3c:e7:de:53:1f:8f:ee:2b:30:a1:5e:c7:42: b2:ec:9d:81:cd:48:72:96:48:f5:62:cb:bc:47:70:bc:68:cd: 0f:ca:d3:d8:64:b5:53:c1:79:a8:08:08:fa:4d:3e:96:69:a4: e1:eb:18:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKEUzOEE1RURFMTk2OEM5Mzc1RTUxNTUxRkFFOTg4ODhB MEJCNTQ0OTAwHhcNMjUxMTA1MDYzMzQ5WhcNMjUxMTEyMDYzMzQ5WjAYMRYwFAYD VQQDEw02OTBhZWZjZS05MmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjLuq+kasmzUYtA+cwOQRz2bM8L6QSfDT7Y7sC+Hq41Sl9HgLULkDfO3xhuG 3el8pXySxWNHnec+aoZ5A7U8RxySgvc27lNCJ0yeHyZw3MJwTLpwwlDhloINDGaG QiztPFZr9zBP1iKum6axr7NBHONAKMoMddpkdiFuCYOwYRlfpYytS8IBMKU5pJ8M jJSfYG1BUnutgNF0hly6/Nzr5UlDzqUac8fD8zCYTUmERDZi7jserBJ2M8GCj+iP 0yeV/uCM5f5vHcgF1uuA7PUIfX33Oe3Kc+tbTgza5xXavZRSMat8ywYKzuL+axYO h9zO5vxunPIWXwhBpcE86XmwXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAGlVXH JDYYvi4mmGror8GJ9zHMMB8GA1UdIwQYMBaAFOOKXt4ZaMk3XlFVH66YiIoLtUSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9ERTNGODg5QUNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lUZGVVVlVmcnBpSWlndTFS SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9ERTNGODg5QUNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lU ZGVVVlVmcnBpSWlndTFSSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJLtoDuaO6/28QMME/LfC+vdvH5KgSiUKcWGhMk4N9t0vpv+yJa6dW 6PW9TPfr76gkQw28p9JxuhLWr59O6R8n/Y49zUjaRo5UA5gGB2CsqG8KrrwdExak P77h6hGKh8Za2d/DwSZ+CxbjR3qgfsx+1Yaqbbd7iDA+NWYeJXTlAXt24W42RU8+ /qqBmhZYLPmIEtK0ATCFrZz70npg2BvliLHSgJpKE5BopQjXukU5Afca8WKncDU8 GvzkhgLXS16VzGXnwzKurtXnAzzn3lMfj+4rMKFex0Ky7J2BzUhylkj1Ysu8R3C8 aM0PytPYZLVTwXmoCAj6TT6WaaTh6xjV -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:35 2025 by rpki-client