$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: MtlYFnGAwmrXGDWTkehV6yV27XPvvcJr4BEkLptRDrI= Subject key identifier: BE:03:45:A7:97:C6:FF:D9:DB:79:E3:D6:80:17:3F:B1:C3:77:AD:1C Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 148E Signing time: Tue 04 Nov 2025 16:58:49 +0000 Manifest this update: Tue 04 Nov 2025 16:58:49 +0000 Manifest next update: Tue 11 Nov 2025 16:58:49 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: BA6lSKH0iy2jHcpOb/vZrG90tx3EWqMtzkrLH7juUcI=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5273 (0x1499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Nov 4 16:58:49 2025 GMT Not After : Nov 11 16:58:49 2025 GMT Subject: CN=690a30c9-0722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:a7:71:63:da:dc:fe:8b:c9:6b:9c:54:31: 1d:c8:87:9c:84:b2:5c:98:d1:30:1c:be:db:31:c9: f9:2e:09:d6:94:88:03:2b:67:be:52:fe:52:e6:8e: c3:b4:9e:bb:62:2e:09:50:f0:37:94:f0:22:b1:f0: 01:dd:d5:2a:15:04:10:d7:9c:9d:55:a1:9c:d5:77: 37:e4:a3:70:a2:53:11:8e:24:ae:b4:f6:cb:ad:86: 2f:3a:5c:ff:3c:47:88:b8:97:00:28:dd:5d:de:b3: 5a:74:3b:89:59:50:91:72:ac:c6:78:08:28:29:2b: 65:8f:0e:dc:74:a8:6b:14:12:5b:0e:68:83:c9:c0: 6d:e7:aa:6a:6d:0b:23:3c:a5:b3:66:c9:f3:81:90: bd:e2:f6:fd:6e:72:0e:33:54:74:0c:84:ec:4d:a9: 12:07:a6:60:60:0e:10:3a:41:a3:02:9f:54:ad:20: 1e:60:40:36:ea:fd:f8:2d:8f:17:02:37:7a:98:8c: 52:72:28:33:79:fc:e9:8e:9a:ae:e9:bc:7a:70:67: 65:0c:ad:f9:6d:0d:bb:e5:4e:38:ea:a1:3b:9b:ba: f8:d1:ff:09:67:c0:c8:11:5a:8a:1b:ae:5f:d7:6b: 2f:1e:59:6f:c7:39:9b:ce:c8:5f:d1:9c:c3:28:34: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:03:45:A7:97:C6:FF:D9:DB:79:E3:D6:80:17:3F:B1:C3:77:AD:1C X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ac:50:e9:7b:da:a5:69:44:c7:ae:1e:21:87:4d:66:11:ad: 9e:d2:be:1f:4a:68:da:94:2c:76:e8:3b:18:46:77:30:31:7c: d9:55:fa:a9:0e:12:b6:84:96:65:3c:3e:9d:87:8b:fe:5f:08: 72:4d:90:e0:39:85:43:f8:f0:10:e0:b4:83:98:8c:3a:fe:a5: 19:71:db:a3:84:de:b5:05:ad:cd:4e:07:0c:0c:d5:4e:71:8b: c4:38:a6:91:9b:4a:de:b7:11:ea:3a:9d:b6:dc:a9:24:09:3f: 23:9f:2c:13:6a:ff:33:59:2f:2a:ab:b4:96:e3:06:c2:d5:08: e7:1b:6d:2f:61:37:dc:11:b4:ab:bf:20:e7:8a:d7:d9:ea:aa: 44:55:50:71:fc:a6:07:bd:e4:e6:d3:85:89:49:c5:fe:31:85: 52:d6:38:58:bd:97:0c:35:4d:4b:63:b3:6c:a0:6e:24:f9:8a: 74:ab:2b:74:5d:35:7d:aa:fa:e0:1a:aa:53:00:14:08:d8:e8: 87:99:6f:49:ec:9a:dd:2b:8a:16:cd:f7:22:15:90:43:6e:73: 51:2e:28:6d:a7:e9:db:5b:ed:85:92:c6:1a:39:68:76:d5:37: 97:5f:da:1a:15:4d:a4:7b:67:2c:fe:00:c2:41:e5:e2:be:57: 90:30:8e:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUxMTA0MTY1ODQ5WhcNMjUxMTExMTY1ODQ5WjAYMRYwFAYD VQQDEw02OTBhMzBjOS0wNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5KncWPa3P6LyWucVDEdyIechLJcmNEwHL7bMcn5LgnWlIgDK2e+Uv5S5o7D tJ67Yi4JUPA3lPAisfAB3dUqFQQQ15ydVaGc1Xc35KNwolMRjiSutPbLrYYvOlz/ PEeIuJcAKN1d3rNadDuJWVCRcqzGeAgoKStljw7cdKhrFBJbDmiDycBt56pqbQsj PKWzZsnzgZC94vb9bnIOM1R0DITsTakSB6ZgYA4QOkGjAp9UrSAeYEA26v34LY8X Ajd6mIxScigzefzpjpqu6bx6cGdlDK35bQ275U446qE7m7r40f8JZ8DIEVqKG65f 12svHllvxzmbzshf0ZzDKDR8fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4DRaeX xv/Z23nj1oAXP7HDd60cMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUrFDpe9qlaUTHrh4hh01mEa2e0r4fSmjalCx26DsYRncwMXzZVfqp DhK2hJZlPD6dh4v+XwhyTZDgOYVD+PAQ4LSDmIw6/qUZcdujhN61Ba3NTgcMDNVO cYvEOKaRm0retxHqOp223KkkCT8jnywTav8zWS8qq7SW4wbC1QjnG20vYTfcEbSr vyDnitfZ6qpEVVBx/KYHveTm04WJScX+MYVS1jhYvZcMNU1LY7NsoG4k+Yp0qyt0 XTV9qvrgGqpTABQI2OiHmW9J7JrdK4oWzfciFZBDbnNRLihtp+nbW+2FksYaOWh2 1TeXX9oaFU2ke2cs/gDCQeXivleQMI73 -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:07 2025 by rpki-client