$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: TSneN4dXJD4/NQL4GSkpXKRzhKV2RTMoW/guQeAxagM= Subject key identifier: C4:E2:ED:02:C4:79:FE:CB:61:58:A3:DB:8B:79:4A:B0:44:04:7F:0F Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: 012C Signing time: Wed 05 Nov 2025 04:49:03 +0000 Manifest this update: Wed 05 Nov 2025 04:49:02 +0000 Manifest next update: Wed 12 Nov 2025 04:49:02 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: Ckv9LXHLL+9kAG+R6JCthySQSvMBnZLupWHtwQBo+f0=) 2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: 8YLAmzfkAq7wWaHxcBzfEAiWvy9p4CNzd9sT8leEWdE=) 3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: wtDTYViLvQ71y8LfCWrpB6kCmz/GyFN75jh6EmmBpDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Nov 5 04:49:02 2025 GMT Not After : Nov 12 04:49:02 2025 GMT Subject: CN=690ad73e-e6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1c:87:96:d7:c4:89:ff:c0:3e:e6:a7:0f:5c: 50:18:53:b8:f6:13:fd:54:e7:16:5d:a7:71:8a:d4: 70:b7:d1:ba:0d:cc:e7:37:96:35:4b:ea:7a:19:4a: 19:f3:ce:41:20:bc:d7:b7:0c:73:b9:b3:56:97:a7: 05:97:53:0b:c9:79:00:63:e1:9d:58:c2:3f:fc:13: cf:34:33:bf:67:ab:f6:95:70:6f:7a:39:ec:58:6e: c6:00:77:9e:68:80:51:74:1e:15:7e:55:1c:5c:48: 7b:a4:74:f1:a6:a0:30:c8:1b:ab:93:7b:80:86:99: e6:48:ce:6b:33:c6:47:6c:95:77:03:42:e1:e1:9d: f0:b1:54:cb:e3:87:ca:6a:94:89:37:be:ac:c8:d1: a1:ae:d0:8f:af:50:4c:b5:47:11:d0:f8:63:e8:08: 1a:02:c6:81:06:e7:18:51:6b:dd:59:d8:78:e4:3e: 95:f0:29:ea:a0:9f:6b:be:31:11:02:79:c9:73:78: db:ec:45:54:64:3a:64:8f:be:d3:0c:3a:91:98:a3: 52:c1:95:37:0e:87:3a:60:1d:b9:be:f3:90:38:6b: 24:61:7b:51:54:83:07:ea:2f:73:17:c9:90:e0:93: 28:be:a1:07:2c:77:8a:16:50:fc:cc:3d:aa:12:b9: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:ED:02:C4:79:FE:CB:61:58:A3:DB:8B:79:4A:B0:44:04:7F:0F X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e4:11:f1:c6:f2:75:ab:dd:bd:df:ac:3f:89:01:94:d6:ad: 1d:e4:34:c3:a5:97:d8:fd:43:25:6b:26:42:38:9a:53:72:3e: e9:ac:54:38:09:bc:25:05:d1:c8:49:d6:8b:bc:e0:ce:b7:00: 1f:d5:f1:30:96:e3:61:ce:13:87:4a:5f:63:6c:ef:37:86:37: 51:dd:90:7f:4c:02:54:d2:3a:59:5f:23:ef:47:bf:37:4b:27: 40:0d:b5:1e:32:8d:e3:71:0d:39:a2:66:60:96:fe:02:32:f7: d9:3c:ce:c3:4e:93:3d:8c:24:c8:0d:e7:ae:d4:51:ee:0d:21: 28:a8:b0:30:9b:4c:b2:5f:cd:ac:e5:56:ee:3b:43:70:c3:11: 84:cf:85:9e:78:34:35:23:81:ff:ff:5b:60:f0:0e:e5:b0:06: 7c:4e:e9:12:48:2c:3f:d0:5c:4a:3f:9c:6a:55:2a:f9:93:35: eb:cc:fe:4f:58:ec:1b:c2:c4:bd:39:7c:16:be:de:14:f4:35: 0b:dc:7b:ec:69:c5:eb:3d:74:79:9f:8f:da:52:7c:f2:9b:26: 83:74:3a:25:2c:48:10:ab:8f:85:2f:e0:29:59:ba:af:26:34: b2:fa:0f:84:ab:11:18:03:7b:06:a8:9a:90:9f:2e:fa:29:e3: e2:f7:97:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjUxMTA1MDQ0OTAyWhcNMjUxMTEyMDQ0OTAyWjAYMRYwFAYD VQQDEw02OTBhZDczZS1lNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hyHltfEif/APuanD1xQGFO49hP9VOcWXadxitRwt9G6DcznN5Y1S+p6GUoZ 885BILzXtwxzubNWl6cFl1MLyXkAY+GdWMI//BPPNDO/Z6v2lXBvejnsWG7GAHee aIBRdB4VflUcXEh7pHTxpqAwyBurk3uAhpnmSM5rM8ZHbJV3A0Lh4Z3wsVTL44fK apSJN76syNGhrtCPr1BMtUcR0Phj6AgaAsaBBucYUWvdWdh45D6V8CnqoJ9rvjER AnnJc3jb7EVUZDpkj77TDDqRmKNSwZU3Doc6YB25vvOQOGskYXtRVIMH6i9zF8mQ 4JMovqEHLHeKFlD8zD2qErkfrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTi7QLE ef7LYVij24t5SrBEBH8PMB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn5BHxxvJ1q92936w/iQGU1q0d5DTDpZfY/UMlayZCOJpTcj7prFQ4 CbwlBdHISdaLvODOtwAf1fEwluNhzhOHSl9jbO83hjdR3ZB/TAJU0jpZXyPvR783 SydADbUeMo3jcQ05omZglv4CMvfZPM7DTpM9jCTIDeeu1FHuDSEoqLAwm0yyX82s 5VbuO0NwwxGEz4WeeDQ1I4H//1tg8A7lsAZ8TukSSCw/0FxKP5xqVSr5kzXrzP5P WOwbwsS9OXwWvt4U9DUL3HvsacXrPXR5n4/aUnzymyaDdDolLEgQq4+FL+ApWbqv JjSy+g+EqxEYA3sGqJqQny76KePi95cE -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:13 2025 by rpki-client