$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: dh57+/hSZFVFQFLm3fVqmkTI2KyUI6if14xlEJ5P8Rc= Subject key identifier: AF:DA:EE:55:A4:2D:DB:4E:57:3B:72:97:90:BC:52:36:67:81:CB:16 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: E4 Signing time: Mon 03 Nov 2025 05:26:35 +0000 Manifest this update: Mon 03 Nov 2025 05:26:35 +0000 Manifest next update: Mon 10 Nov 2025 05:26:35 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: 8jJbqXZq2mp5f5seMoUKckf3CYHjcn1kX5/u/eNX6IQ=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: TNYuuYwAvBi+/pUa2qwV1wTrBwuN862kPVZbu/phpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Nov 3 05:26:35 2025 GMT Not After : Nov 10 05:26:35 2025 GMT Subject: CN=69083d0b-b131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:7b:8e:84:93:cf:e3:3a:c6:19:2f:dd:b9: 80:e0:f0:64:a6:07:99:14:fd:2d:80:04:dc:b9:c0: e8:5c:45:c1:fe:d5:c6:59:e8:1a:e3:bb:15:93:66: b9:eb:06:13:10:2f:e5:82:2d:f8:84:c5:af:cb:a2: fd:b0:8c:04:69:80:5e:2b:f2:cb:d7:29:36:02:e0: c7:64:d4:51:7d:75:b7:6a:29:96:78:7d:fa:87:a8: 80:14:d0:8a:c7:38:2d:cc:b6:77:ef:c4:a0:4e:47: 13:6f:b3:96:22:c6:68:73:8c:9a:b2:61:70:0e:e1: b1:87:3e:a4:4a:60:27:e7:04:55:03:73:92:06:be: dc:51:57:7e:4d:61:96:f7:5c:49:c9:32:9f:c1:6a: f2:23:8b:98:70:14:6b:7a:c3:14:70:1f:c2:7d:29: e9:dd:d1:7e:f8:2b:05:76:c3:8e:32:7c:27:66:de: 8c:06:62:39:1b:cd:1b:04:7a:3e:99:69:d1:cb:83: eb:7e:47:98:b6:3e:55:3e:24:fc:18:0e:23:a7:01: 53:b2:7a:f1:54:5c:08:4a:21:d7:81:e3:59:0f:15: ab:8a:89:df:70:f3:9b:fc:6b:d5:ac:e8:ab:6b:2b: 21:fc:a6:e3:17:97:51:af:07:8c:71:4d:79:3a:8f: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DA:EE:55:A4:2D:DB:4E:57:3B:72:97:90:BC:52:36:67:81:CB:16 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:67:6c:fb:70:db:2f:93:eb:d8:d2:53:87:d9:d1:7e:0c:a5: 10:b5:d2:bb:04:88:60:a2:57:90:d3:04:18:8b:53:e3:dc:55: 46:f9:03:4a:53:dc:dc:3c:f6:8d:15:2f:d2:55:58:07:5d:f7: 98:46:7d:2d:a9:64:6b:e9:fd:57:af:04:fc:26:f6:c5:f3:11: 1b:70:55:20:71:ad:b9:ea:73:93:cf:b4:e6:b2:6f:26:ec:32: 9c:b9:5e:c1:d5:84:94:a2:4f:19:a8:75:09:70:7c:dd:a8:ee: 98:83:46:ae:ca:91:d0:43:fa:2b:8b:25:32:63:4b:e5:d1:4c: 6c:8d:fa:36:95:e0:44:67:3d:e2:8c:49:74:33:43:56:f2:cc: 98:17:d4:b4:83:99:48:f2:3e:c8:95:da:52:0c:e6:72:ad:52: 81:7f:a9:1b:c1:45:75:97:52:07:c1:3a:8d:e9:cd:68:1d:63: 1f:53:e9:81:2c:d5:71:59:c5:f6:7e:41:c4:73:36:55:77:26: 5b:a3:5c:fb:85:1a:7f:18:4b:d7:82:58:f5:02:35:74:bc:80: 5e:d2:1a:07:7d:33:80:c6:a4:59:15:22:a5:49:45:d0:8b:bf: 6e:5e:12:0e:85:8e:c2:9d:37:e3:9b:cc:09:e9:74:d1:7f:20: f1:f3:e5:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUxMTAzMDUyNjM1WhcNMjUxMTEwMDUyNjM1WjAYMRYwFAYD VQQDEw02OTA4M2QwYi1iMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFR7joSTz+M6xhkv3bmA4PBkpgeZFP0tgATcucDoXEXB/tXGWega47sVk2a5 6wYTEC/lgi34hMWvy6L9sIwEaYBeK/LL1yk2AuDHZNRRfXW3aimWeH36h6iAFNCK xzgtzLZ378SgTkcTb7OWIsZoc4yasmFwDuGxhz6kSmAn5wRVA3OSBr7cUVd+TWGW 91xJyTKfwWryI4uYcBRresMUcB/CfSnp3dF++CsFdsOOMnwnZt6MBmI5G80bBHo+ mWnRy4PrfkeYtj5VPiT8GA4jpwFTsnrxVFwISiHXgeNZDxWrionfcPOb/GvVrOir aysh/KbjF5dRrweMcU15Oo+4rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/a7lWk LdtOVztyl5C8UjZngcsWMB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMZ2z7cNsvk+vY0lOH2dF+DKUQtdK7BIhgoleQ0wQYi1Pj3FVG+QNK U9zcPPaNFS/SVVgHXfeYRn0tqWRr6f1XrwT8JvbF8xEbcFUgca256nOTz7Tmsm8m 7DKcuV7B1YSUok8ZqHUJcHzdqO6Yg0auypHQQ/oriyUyY0vl0Uxsjfo2leBEZz3i jEl0M0NW8syYF9S0g5lI8j7IldpSDOZyrVKBf6kbwUV1l1IHwTqN6c1oHWMfU+mB LNVxWcX2fkHEczZVdyZbo1z7hRp/GEvXglj1AjV0vIBe0hoHfTOAxqRZFSKlSUXQ i79uXhIOhY7CnTfjm8wJ6XTRfyDx8+Um -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:45 2025 by rpki-client