$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: yZLDC06Ht1VK7J5wGH8FNOeOhcc654vPMl+cTdbCLNw= Subject key identifier: 4F:04:5A:3F:89:7F:EE:03:7C:46:FC:90:CE:E1:2B:A9:2C:24:5B:86 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 34EA Signing time: Tue 04 Nov 2025 14:47:56 +0000 Manifest this update: Tue 04 Nov 2025 14:47:56 +0000 Manifest next update: Tue 11 Nov 2025 14:47:56 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: +Mr00mGmixbe50iyazwv9rtIqsnPfOzxP5ksMlFd6gM=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: gFJk3bH7mXlCaj14z9kV9xuGKxMKaTna9ngpZWUJXOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Nov 4 14:47:56 2025 GMT Not After : Nov 11 14:47:56 2025 GMT Subject: CN=690a121c-472c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:48:54:7d:85:14:ac:69:a6:da:e5:bc:c5: dc:54:6a:80:8c:1c:ba:15:18:bd:b9:a8:b1:80:7c: 33:fc:71:3a:db:ad:29:88:79:33:19:57:37:20:39: 07:cb:fe:b5:89:3a:de:44:83:53:8b:9b:88:f2:dc: bf:cc:5f:83:77:71:87:10:3d:fc:c6:cb:38:c7:b6: 6e:41:98:f3:74:82:15:e1:e8:2e:28:2f:c7:43:2c: 25:df:f5:21:2a:5c:9b:05:da:a5:15:ac:d5:d8:d5: 84:38:08:48:54:f4:ef:da:f8:5e:3c:25:07:dd:7e: 82:0c:d9:fe:87:cd:10:74:f8:ce:d7:47:dd:7a:1e: 93:50:f8:a1:25:e1:6b:e2:a0:8c:5d:1d:d7:da:70: ed:a4:a8:56:64:2d:4c:60:43:3d:da:e4:aa:78:0c: 5d:46:63:50:6a:87:ac:eb:16:9d:9c:55:1a:0c:f3: 92:40:a1:eb:07:21:63:83:08:75:f7:0c:dc:c4:96: fb:6e:32:09:5a:99:04:8d:d1:30:a1:52:27:b7:f7: 0a:34:63:a4:86:47:79:ef:1c:02:b7:73:d7:bb:07: d2:03:14:68:64:af:c7:ce:a5:ab:d6:e2:6b:f3:36: 95:42:48:4e:8b:ce:47:41:55:19:45:54:6e:76:a9: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:5A:3F:89:7F:EE:03:7C:46:FC:90:CE:E1:2B:A9:2C:24:5B:86 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:55:26:a1:2a:ba:12:a5:a4:08:3a:54:72:c8:37:40:66:5a: 9e:6e:f9:d7:d9:ec:4d:fe:20:e4:29:28:c6:a6:16:5a:9c:90: 5e:b4:c0:07:5e:2b:54:66:4a:e2:75:06:1a:0f:fc:c4:ee:91: 3f:36:b2:9d:ee:4a:43:85:ae:d3:f9:32:30:bf:d9:f6:05:27: f1:2c:e8:a2:80:96:9a:16:43:37:41:ac:49:7e:20:c0:4d:1a: 36:00:4e:22:05:ee:33:c7:9b:c7:98:bd:9b:4f:86:ad:63:5c: fc:ac:dd:39:4a:4b:d9:24:6d:11:2e:64:38:40:62:3d:58:20: 04:5f:1e:49:42:36:e6:37:46:af:a3:06:31:91:f4:03:e4:ed: ef:b5:ec:29:e1:e4:e9:34:f9:05:b5:ac:11:55:ec:7c:22:39: 83:de:fa:64:40:2c:83:a3:10:dd:e9:f9:87:9f:9c:20:14:34: 87:e6:9b:7d:97:86:3a:4e:57:30:00:52:3d:3b:79:e5:78:c4: 97:c9:0e:f3:d0:3a:6b:05:15:64:18:63:0e:cf:d3:9a:6b:aa: d4:9a:ac:3e:2a:65:c5:75:ff:7e:ce:07:ed:cf:4e:7f:26:c3: e3:59:d4:af:83:61:f0:f3:eb:4c:67:bb:a0:aa:f2:56:0d:42: 02:95:59:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUxMTA0MTQ0NzU2WhcNMjUxMTExMTQ0NzU2WjAYMRYwFAYD VQQDEw02OTBhMTIxYy00NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzhIVH2FFKxpptrlvMXcVGqAjBy6FRi9uaixgHwz/HE6260piHkzGVc3IDkH y/61iTreRINTi5uI8ty/zF+Dd3GHED38xss4x7ZuQZjzdIIV4eguKC/HQywl3/Uh KlybBdqlFazV2NWEOAhIVPTv2vhePCUH3X6CDNn+h80QdPjO10fdeh6TUPihJeFr 4qCMXR3X2nDtpKhWZC1MYEM92uSqeAxdRmNQaoes6xadnFUaDPOSQKHrByFjgwh1 9wzcxJb7bjIJWpkEjdEwoVInt/cKNGOkhkd57xwCt3PXuwfSAxRoZK/HzqWr1uJr 8zaVQkhOi85HQVUZRVRudqkDcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8EWj+J f+4DfEb8kM7hK6ksJFuGMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMVSahKroSpaQIOlRyyDdAZlqebvnX2exN/iDkKSjGphZanJBetMAH XitUZkridQYaD/zE7pE/NrKd7kpDha7T+TIwv9n2BSfxLOiigJaaFkM3QaxJfiDA TRo2AE4iBe4zx5vHmL2bT4atY1z8rN05SkvZJG0RLmQ4QGI9WCAEXx5JQjbmN0av owYxkfQD5O3vtewp4eTpNPkFtawRVex8IjmD3vpkQCyDoxDd6fmHn5wgFDSH5pt9 l4Y6TlcwAFI9O3nleMSXyQ7z0DprBRVkGGMOz9Oaa6rUmqw+KmXFdf9+zgftz05/ JsPjWdSvg2Hw8+tMZ7ugqvJWDUIClVlS -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:17 2025 by rpki-client