$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: XYduDj9pTBTSAzWDyPg7fwsPGZzD4cdOP8cmA7YXfao= Subject key identifier: D5:FF:73:28:0C:5D:DD:C9:7A:12:7B:A0:D7:09:DD:87:7E:3B:D7:37 Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 040D Signing time: Wed 05 Nov 2025 00:29:54 +0000 Manifest this update: Wed 05 Nov 2025 00:29:53 +0000 Manifest next update: Wed 12 Nov 2025 00:29:53 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: mbtL8/x98PhHwfADGhXMl9A91J88H2uIqZqQ82cfL24=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Nov 5 00:29:53 2025 GMT Not After : Nov 12 00:29:53 2025 GMT Subject: CN=690a9a82-f551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:1a:16:ab:2d:56:f2:de:fb:42:27:15:c1: 22:e9:69:7e:49:d3:58:e4:60:68:1e:a5:06:04:e0: ff:49:40:6d:cb:fd:2d:14:7b:b4:6d:33:af:25:2a: 79:79:21:37:dd:69:8d:83:12:f3:d3:cb:c7:11:6e: c8:20:8c:94:35:5b:44:e1:66:47:ca:35:79:12:25: c3:42:46:4a:ac:fe:26:aa:44:c0:55:48:dc:5c:3f: b5:82:58:b0:cf:0f:7c:2a:b9:20:0a:4f:ba:df:70: 33:e5:01:c9:bf:f5:14:ef:9c:91:61:9c:6d:ec:10: 54:22:f4:ef:1f:c3:88:74:65:9d:32:03:94:19:e5: 2c:0e:af:73:a2:d5:c2:d2:78:36:d1:cb:87:e6:34: a9:40:e4:e8:73:8e:75:61:c0:2d:dd:ef:65:bd:2a: 65:5f:bf:85:ba:63:f3:eb:22:0a:f1:2e:a8:86:f6: c8:93:80:d3:fe:b0:d7:d8:5c:60:43:de:bc:34:f2: f0:93:b5:85:9f:67:67:f5:cc:ae:d5:dd:93:d1:37: f8:92:20:ff:13:63:06:bc:13:d7:3f:67:f2:92:7a: 7d:92:bb:be:88:1d:4a:29:92:c4:87:71:78:05:e0: 9d:ff:57:0c:c8:dd:ed:4f:9c:4f:25:98:4d:9b:81: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FF:73:28:0C:5D:DD:C9:7A:12:7B:A0:D7:09:DD:87:7E:3B:D7:37 X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:c6:80:3c:eb:39:26:9c:d6:33:ad:1c:06:e7:8c:ed:2c:a2: fb:5a:1a:93:69:c8:75:98:7e:9b:f0:f5:df:9e:52:15:ab:9a: 35:d7:fa:c1:c8:15:17:a8:0f:7f:1d:00:9f:50:1e:64:8a:54: 23:be:0f:09:a8:5a:bd:24:2c:45:af:68:d1:f6:62:11:ca:dd: 8b:8f:1d:d8:94:61:df:37:41:26:8b:37:58:b0:cc:c3:4d:1c: 45:c9:42:67:ad:55:7f:b1:54:e7:90:aa:0d:11:d6:fa:b1:46: f3:a2:f2:f8:78:42:d8:d2:04:f7:01:a2:d0:db:47:2e:b0:ba: 3b:6f:73:b8:4a:62:1a:30:9e:50:29:47:3c:9c:dd:55:66:71: 23:57:b8:a6:d6:98:81:aa:93:62:68:4f:26:ea:e2:a3:a7:77: 5a:4c:1f:44:d5:47:1c:e3:1e:7e:af:90:8f:d3:32:ee:06:f2: d7:90:45:69:ac:f7:74:75:89:d3:bd:74:55:16:e4:25:b3:08: f8:db:fd:d5:eb:c3:0a:56:c0:55:db:7c:7a:f1:6f:6f:d2:99: 16:06:a6:c1:0e:c3:c3:d8:35:0d:11:8a:d7:e2:17:bc:8a:cb: 83:d3:a7:a5:97:91:5b:60:a9:a3:b6:6a:fe:b6:f4:a4:ed:3f: 61:12:7a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUxMTA1MDAyOTUzWhcNMjUxMTEyMDAyOTUzWjAYMRYwFAYD VQQDEw02OTBhOWE4Mi1mNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5y4aFqstVvLe+0InFcEi6Wl+SdNY5GBoHqUGBOD/SUBty/0tFHu0bTOvJSp5 eSE33WmNgxLz08vHEW7IIIyUNVtE4WZHyjV5EiXDQkZKrP4mqkTAVUjcXD+1gliw zw98KrkgCk+633Az5QHJv/UU75yRYZxt7BBUIvTvH8OIdGWdMgOUGeUsDq9zotXC 0ng20cuH5jSpQOToc451YcAt3e9lvSplX7+FumPz6yIK8S6ohvbIk4DT/rDX2Fxg Q968NPLwk7WFn2dn9cyu1d2T0Tf4kiD/E2MGvBPXP2fyknp9kru+iB1KKZLEh3F4 BeCd/1cMyN3tT5xPJZhNm4Gr3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX/cygM Xd3JehJ7oNcJ3Yd+O9c3MB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDxoA86zkmnNYzrRwG54ztLKL7WhqTach1mH6b8PXfnlIVq5o11/rB yBUXqA9/HQCfUB5kilQjvg8JqFq9JCxFr2jR9mIRyt2Ljx3YlGHfN0EmizdYsMzD TRxFyUJnrVV/sVTnkKoNEdb6sUbzovL4eELY0gT3AaLQ20cusLo7b3O4SmIaMJ5Q KUc8nN1VZnEjV7im1piBqpNiaE8m6uKjp3daTB9E1Ucc4x5+r5CP0zLuBvLXkEVp rPd0dYnTvXRVFuQlswj42/3V68MKVsBV23x68W9v0pkWBqbBDsPD2DUNEYrX4he8 isuD06ell5FbYKmjtmr+tvSk7T9hEnoj -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:48 2025 by rpki-client