$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: YuWBMdE81FpoSFHKnrvcTKf5uwOxJ+73m/EfTOdeWrQ= Subject key identifier: 21:65:A9:95:40:21:70:DA:AB:92:95:19:3F:51:56:D2:15:01:12:2A Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 05C2 Signing time: Sun 02 Nov 2025 23:05:45 +0000 Manifest this update: Sun 02 Nov 2025 23:05:44 +0000 Manifest next update: Sun 09 Nov 2025 23:05:44 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: S0ID59OtNnYbHEQVu/N7CingSgW//XoacV1tXMBnf5Q=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Nov 2 23:05:44 2025 GMT Not After : Nov 9 23:05:44 2025 GMT Subject: CN=6907e3c8-94a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:93:f4:08:34:c0:e8:9a:98:7c:42:d0:df: 9f:13:3c:7c:08:df:9a:5c:09:15:61:f2:31:c1:99: 8b:3e:e0:3d:83:88:3a:df:11:5b:39:51:dd:f7:ee: ac:35:88:8d:04:34:37:53:fb:f4:cc:32:f1:45:ce: e8:70:34:eb:9e:df:dd:1b:44:1c:5a:93:15:a2:64: da:54:3e:d4:7a:93:70:37:4f:5a:dd:96:67:92:fb: 07:5c:c0:45:0e:df:c1:c3:00:65:eb:2d:28:8b:2c: f2:ae:26:49:15:f9:fb:bb:83:d8:03:a2:8e:6a:0c: c0:67:10:0a:bc:a5:24:08:1c:4c:fd:a0:65:5e:e1: 7f:bd:78:19:14:7f:59:ba:14:d2:8d:35:d5:11:75: 2b:38:dc:46:e6:b1:5f:f3:14:e9:30:3f:55:b7:db: 73:2d:58:95:fb:c1:ba:4a:b8:f9:9b:c3:5c:5f:71: 05:45:c1:38:03:dc:43:44:9d:79:73:9c:8d:af:67: 03:29:29:9c:b3:98:4b:9b:f9:ab:46:dd:21:19:32: 81:a7:a3:95:c9:43:e5:cf:4c:af:49:5a:3b:41:60: 49:68:75:83:da:c2:26:04:a7:b8:45:ab:23:ac:14: a5:57:e5:76:3e:10:3d:c9:2d:9f:d4:89:22:da:dc: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:65:A9:95:40:21:70:DA:AB:92:95:19:3F:51:56:D2:15:01:12:2A X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a1:3a:02:bd:5a:17:d6:a4:fb:f1:11:73:95:7f:f0:1e:4e: 36:f6:17:8e:94:0f:02:36:4b:f4:50:bf:8b:4b:87:e8:58:e2: bf:f3:d4:a4:df:cd:66:58:15:8c:08:81:70:d3:00:6c:86:c1: 83:63:29:1b:b4:39:51:4e:50:ce:4a:2b:2c:1b:9f:30:6a:f2: c1:92:83:ef:52:c8:5b:1a:01:96:84:91:2d:62:cf:9a:6d:2b: c0:b0:d1:ca:4d:85:ae:a4:dc:95:d7:bc:5c:fe:08:9b:70:2a: ca:93:d4:fa:ef:d3:63:82:63:f5:01:b1:84:0c:5b:e5:90:b6: 8d:28:ac:12:6c:3b:d5:b4:36:a7:67:db:0c:2f:b4:da:21:7b: 8f:2d:94:7f:0a:27:77:38:c1:84:6b:e7:7b:7e:ce:cf:e7:d9: 7c:e2:0c:0a:26:10:4f:3e:9a:57:3f:d8:a6:f3:5c:0e:ea:b6: f4:a7:66:c9:55:f1:b1:05:75:f6:92:ac:83:bc:21:ce:fc:19: 67:96:b9:15:e9:e5:c5:3d:15:01:91:95:d1:6e:75:a3:e9:7c: 85:3b:c0:21:bc:14:7b:cc:07:16:e3:b3:c5:5f:39:35:60:d9: 08:a5:7e:6d:ed:43:a2:1b:7a:76:e3:14:e5:5c:35:5f:53:1c: 3c:f0:c5:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUxMTAyMjMwNTQ0WhcNMjUxMTA5MjMwNTQ0WjAYMRYwFAYD VQQDEw02OTA3ZTNjOC05NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGCT9Ag0wOiamHxC0N+fEzx8CN+aXAkVYfIxwZmLPuA9g4g63xFbOVHd9+6s NYiNBDQ3U/v0zDLxRc7ocDTrnt/dG0QcWpMVomTaVD7UepNwN09a3ZZnkvsHXMBF Dt/BwwBl6y0oiyzyriZJFfn7u4PYA6KOagzAZxAKvKUkCBxM/aBlXuF/vXgZFH9Z uhTSjTXVEXUrONxG5rFf8xTpMD9Vt9tzLViV+8G6Srj5m8NcX3EFRcE4A9xDRJ15 c5yNr2cDKSmcs5hLm/mrRt0hGTKBp6OVyUPlz0yvSVo7QWBJaHWD2sImBKe4Rasj rBSlV+V2PhA9yS2f1Iki2twahwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFlqZVA IXDaq5KVGT9RVtIVARIqMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCboToCvVoX1qT78RFzlX/wHk429heOlA8CNkv0UL+LS4foWOK/89Sk 381mWBWMCIFw0wBshsGDYykbtDlRTlDOSissG58wavLBkoPvUshbGgGWhJEtYs+a bSvAsNHKTYWupNyV17xc/gibcCrKk9T679NjgmP1AbGEDFvlkLaNKKwSbDvVtDan Z9sML7TaIXuPLZR/Cid3OMGEa+d7fs7P59l84gwKJhBPPppXP9im81wO6rb0p2bJ VfGxBXX2kqyDvCHO/BlnlrkV6eXFPRUBkZXRbnWj6XyFO8AhvBR7zAcW47PFXzk1 YNkIpX5t7UOiG3p24xTlXDVfUxw88MVD -----END CERTIFICATE-----Generated at Tue Nov 4 08:14:07 2025 by rpki-client