$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft File: Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json) Hash identifier: MrGzD6dnvXswpjGC+z1HTf+3mlpUwIRmsZCqLzPfoYs= Subject key identifier: BD:3D:93:56:F8:0D:68:66:C2:60:61:17:4C:0E:BB:98:C3:A1:F2:A7 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft Manifest number: 0B7D Signing time: Tue 04 Nov 2025 19:13:11 +0000 Manifest this update: Tue 04 Nov 2025 19:13:10 +0000 Manifest next update: Tue 11 Nov 2025 19:13:10 +0000 Files and hashes: 1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: sF72cCbqGth1uWiHuPooDbG8Jc7qsxsbfYhC9oNSUy8=) 2: 09534036847011F0A17FCE63C4F9AE02.roa (hash: PdJl8I+ys5mY6W97HjsxfAl70ScWMMUlyRe/qkuqiA0=) 3: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: v527tHPDU0uVPbXjXzW0KocA0xKJVkiNxeh4nwu9KSk=) 4: F6722FA6822411F088762570C4F9AE02.roa (hash: /8oBd85iag7D5Z9xxRzsLHAKy8s7sxUZj9Wiitj8q2w=) 5: 7147D9D69D9811F09B4CDC3EC4F9AE02.roa (hash: 6Ic+sOOlihEzvzyvrHCjJtxNC+c9AoDdHtp21QAX8Po=) 6: F5E1478E822411F088762570C4F9AE02.roa (hash: FtG2AONefrzS1aqmU6M+Rb0qH4cFpoVfgLPk4YTu7w0=) 7: BB46A670849811F08EA6E444C4F9AE02.roa (hash: Zt/7xi+nXrTj/iilNfK0wU0w18V9L0wFMcOFcwVdW/k=) 8: 541716E2B95411F0B8E2D868C4F9AE02.roa (hash: v7NQpaANhYEByomYA471JNVOXJykPjF0XFv8a7KORBc=) 9: A5FE56B2596B11F0AF4BB31EC4F9AE02.roa (hash: plyiht/V1LmRJUTFVmqkO0mlXSVbC2l7eMnY30pWhS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Nov 4 19:13:10 2025 GMT Not After : Nov 11 19:13:10 2025 GMT Subject: CN=690a5046-8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:47:3f:dc:27:a5:9d:0d:f5:ef:02:3a:3d: a2:6d:b1:e1:dc:79:ca:5b:08:fa:8b:46:90:29:42: a3:9d:08:48:dd:06:19:b0:c6:ee:17:ec:53:7e:9b: 3c:4c:43:a7:73:91:0a:99:6c:ac:f9:2b:5b:83:2e: e8:5f:60:80:e1:88:fd:84:8d:f0:56:7d:bf:1c:ef: 9f:be:7c:aa:25:70:2c:d8:af:7c:5c:2f:53:fc:76: aa:1c:31:7a:0a:6f:ae:77:a8:bf:b3:ef:e5:6a:51: d4:c2:84:c4:27:08:fc:69:e5:c0:83:e9:5b:b8:08: 74:a5:d3:5a:73:65:e8:bb:65:aa:43:7d:e1:3b:a5: 7d:14:00:1c:52:71:b1:a6:44:df:aa:aa:1f:81:f5: 9f:de:65:cf:96:19:ba:33:36:50:a0:e4:79:04:d9: 5c:9f:82:4d:df:0c:83:90:15:8b:43:94:2b:ad:c3: d8:69:a1:4b:35:2d:51:27:48:78:d8:6e:b4:af:4a: 5e:c7:4a:e8:86:e9:55:48:a7:2f:74:dc:df:16:c1: 64:a6:02:90:43:f3:b2:d1:c1:54:4c:3b:f1:8a:7a: b1:49:0d:dc:b8:d7:d5:32:85:da:25:6d:92:ba:b5: cb:94:32:57:44:36:be:17:f1:53:bb:50:14:c5:e6: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3D:93:56:F8:0D:68:66:C2:60:61:17:4C:0E:BB:98:C3:A1:F2:A7 X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ac:96:b7:72:45:28:fb:1c:2a:42:61:56:8b:33:ce:88:1f: 34:72:01:90:ff:36:a7:f0:fc:c9:b3:94:b9:02:12:dc:73:d7: 74:c1:26:0a:4e:87:ec:b3:e8:5f:8c:98:19:cb:e5:ab:2a:a8: f8:bc:1a:ed:1a:b0:ba:38:bc:88:6b:14:86:58:44:f2:8d:19: f2:8e:81:00:49:06:31:e5:f1:70:3a:b6:d0:6a:a7:c3:cc:ee: bd:0e:8e:c1:5a:6b:86:62:c8:05:5f:b8:89:28:f8:3b:b8:44: 50:db:db:47:cd:c8:32:fe:76:4a:66:4f:1d:5b:27:2c:9a:dc: 62:76:e4:1a:ab:26:80:32:d5:d1:7b:cf:2d:67:b3:40:f2:0a: b9:5d:4a:c8:22:e8:e5:e0:07:94:c7:d4:05:ec:08:d8:fc:52: 95:3d:ef:d1:ef:e2:c2:89:5f:98:ad:e4:a8:48:d7:e2:4f:00: ef:c3:53:e8:83:27:18:42:3a:73:75:cd:83:b5:80:07:4b:ac: 42:bb:7a:71:8e:67:5a:08:10:ec:12:59:59:2e:22:3d:c6:3e: af:08:fc:8e:49:58:76:ab:27:38:67:87:2c:fa:0f:0c:33:0d: c1:0c:49:a8:9a:f8:f3:2f:29:ac:c8:83:19:72:84:65:69:2b: 09:a9:f2:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUxMTA0MTkxMzEwWhcNMjUxMTExMTkxMzEwWjAYMRYwFAYD VQQDEw02OTBhNTA0Ni04YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJFHP9wnpZ0N9e8COj2ibbHh3HnKWwj6i0aQKUKjnQhI3QYZsMbuF+xTfps8 TEOnc5EKmWys+Stbgy7oX2CA4Yj9hI3wVn2/HO+fvnyqJXAs2K98XC9T/HaqHDF6 Cm+ud6i/s+/lalHUwoTEJwj8aeXAg+lbuAh0pdNac2Xou2WqQ33hO6V9FAAcUnGx pkTfqqofgfWf3mXPlhm6MzZQoOR5BNlcn4JN3wyDkBWLQ5QrrcPYaaFLNS1RJ0h4 2G60r0pex0rohulVSKcvdNzfFsFkpgKQQ/Oy0cFUTDvxinqxSQ3cuNfVMoXaJW2S urXLlDJXRDa+F/FTu1AUxeYYfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL09k1b4 DWhmwmBhF0wOu5jDofKnMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5 eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBArJa3ckUo+xwqQmFWizPOiB80cgGQ/zan8PzJs5S5AhLcc9d0wSYK Tofss+hfjJgZy+WrKqj4vBrtGrC6OLyIaxSGWETyjRnyjoEASQYx5fFwOrbQaqfD zO69Do7BWmuGYsgFX7iJKPg7uERQ29tHzcgy/nZKZk8dWycsmtxiduQaqyaAMtXR e88tZ7NA8gq5XUrIIujl4AeUx9QF7AjY/FKVPe/R7+LCiV+YreSoSNfiTwDvw1Po gycYQjpzdc2DtYAHS6xCu3pxjmdaCBDsEllZLiI9xj6vCPyOSVh2qyc4Z4cs+g8M Mw3BDEmomvjzLymsyIMZcoRlaSsJqfKp -----END CERTIFICATE-----Generated at Wed Nov 5 22:07:16 2025 by rpki-client