$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: vJMlOt0Kdp8yDczrSVUffNmTrRJ2cEFkehEKxuDsU/Y= Subject key identifier: 3C:68:D8:43:49:09:30:F0:A2:86:76:3C:66:A8:06:19:7C:8F:D7:13 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 0724 Signing time: Tue 04 Nov 2025 21:54:20 +0000 Manifest this update: Tue 04 Nov 2025 21:54:19 +0000 Manifest next update: Tue 11 Nov 2025 21:54:19 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: qIuyu50JfvTPfOJkzyza/3PGjQen0/cfxThmHSJDgoE=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Nov 4 21:54:19 2025 GMT Not After : Nov 11 21:54:19 2025 GMT Subject: CN=690a760b-6b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:1c:15:11:9e:d6:b0:d0:06:a2:bf:42:0f: b9:92:e0:ae:19:11:af:53:50:c3:fb:c0:82:ec:b9: 44:19:df:c5:41:8b:75:dc:9d:05:1a:df:cd:5d:56: 72:dc:9a:c4:cf:1e:6b:e6:65:0b:29:62:70:2b:c4: 19:ba:81:9b:ce:54:62:3a:60:b4:10:f2:1f:1b:f7: 58:94:6d:b2:d7:25:f7:cd:7c:8b:f6:b4:b3:c7:c9: 3b:f5:eb:54:84:b1:36:f4:d8:e2:4f:80:08:07:ff: be:1d:96:1b:68:ad:4c:62:e1:cb:94:6e:6e:17:01: ca:8e:b4:fa:ca:01:f6:70:16:aa:76:fc:6e:49:29: d0:8f:b4:02:5d:a6:fb:ad:8b:13:44:9d:d3:c6:47: 42:3f:be:ea:e6:ad:1a:b1:7e:76:1c:56:3a:f6:7c: 04:c6:8b:66:d0:18:b1:8e:7b:1f:5a:ae:22:86:f3: ba:32:0d:bd:c9:f1:36:16:bc:e2:9d:80:47:29:b7: dd:e8:6a:92:61:9f:8e:b6:6e:3e:6c:43:dd:d3:b1: 8a:46:c6:24:05:12:9d:f0:24:6a:56:78:a4:98:68: 96:79:13:3a:99:80:d3:df:a0:44:d6:6d:5f:4e:fa: d9:e9:b3:bb:a8:6e:cf:94:cb:80:83:ef:47:3a:43: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:D8:43:49:09:30:F0:A2:86:76:3C:66:A8:06:19:7C:8F:D7:13 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b1:ac:f7:dd:2d:bb:eb:d3:04:8d:7b:c9:c0:6e:5b:52:b8: 64:be:c4:ba:41:64:4f:94:d1:07:0e:b5:41:07:24:35:9f:dc: 13:02:2e:95:3c:59:51:a4:b1:de:cf:0e:e1:5f:aa:d9:c5:c7: 32:66:60:db:6a:e6:84:3b:03:f8:ea:ed:e5:8d:29:62:d9:96: 10:3e:a1:88:2b:7d:45:0b:cf:30:ed:19:46:28:5e:51:d3:18: b0:40:8c:cb:9e:a2:44:d1:47:19:ef:86:d4:53:28:39:98:6f: f5:1f:9d:ba:1a:87:42:b7:11:74:3d:e2:cc:f7:3d:d4:54:67: 96:bb:01:78:ee:5a:ba:d2:06:75:da:77:c8:db:56:54:34:d5: db:9a:38:9d:a4:a9:7d:68:51:34:81:1b:6d:11:78:4f:6e:2b: 1f:41:18:2f:5e:7d:5b:63:01:73:aa:4a:fb:bc:db:7d:a7:ca: ec:b7:d8:08:f3:49:06:fd:83:42:7f:99:9c:b5:42:9a:f1:58: 10:c4:27:6a:bb:25:83:33:8a:50:cc:72:96:55:fc:45:6a:b8: d0:5c:93:01:0a:b3:1a:7e:d5:2f:f4:4f:56:55:a3:ff:14:ef: ce:2c:32:26:f5:3e:53:50:a9:c1:16:8a:49:b1:53:0a:b4:12: 95:2b:ba:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUxMTA0MjE1NDE5WhcNMjUxMTExMjE1NDE5WjAYMRYwFAYD VQQDEw02OTBhNzYwYi02YjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRQcFRGe1rDQBqK/Qg+5kuCuGRGvU1DD+8CC7LlEGd/FQYt13J0FGt/NXVZy 3JrEzx5r5mULKWJwK8QZuoGbzlRiOmC0EPIfG/dYlG2y1yX3zXyL9rSzx8k79etU hLE29NjiT4AIB/++HZYbaK1MYuHLlG5uFwHKjrT6ygH2cBaqdvxuSSnQj7QCXab7 rYsTRJ3TxkdCP77q5q0asX52HFY69nwExotm0BixjnsfWq4ihvO6Mg29yfE2Frzi nYBHKbfd6GqSYZ+Otm4+bEPd07GKRsYkBRKd8CRqVnikmGiWeRM6mYDT36BE1m1f TvrZ6bO7qG7PlMuAg+9HOkOjUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxo2ENJ CTDwooZ2PGaoBhl8j9cTMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvsaz33S2769MEjXvJwG5bUrhkvsS6QWRPlNEHDrVBByQ1n9wTAi6V PFlRpLHezw7hX6rZxccyZmDbauaEOwP46u3ljSli2ZYQPqGIK31FC88w7RlGKF5R 0xiwQIzLnqJE0UcZ74bUUyg5mG/1H526GodCtxF0PeLM9z3UVGeWuwF47lq60gZ1 2nfI21ZUNNXbmjidpKl9aFE0gRttEXhPbisfQRgvXn1bYwFzqkr7vNt9p8rst9gI 80kG/YNCf5mctUKa8VgQxCdquyWDM4pQzHKWVfxFarjQXJMBCrMaftUv9E9WVaP/ FO/OLDIm9T5TUKnBFopJsVMKtBKVK7rC -----END CERTIFICATE-----Generated at Wed Nov 5 16:09:34 2025 by rpki-client