$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: Te6Og18C06QIVw2+m9hE5cw7RMAloMNMoEtvNhWM/YU= Subject key identifier: 00:36:D9:4E:C0:A7:D6:98:E2:D3:54:12:E1:30:90:5D:62:76:AE:6F Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: B0 Signing time: Mon 03 Nov 2025 06:10:15 +0000 Manifest this update: Mon 03 Nov 2025 06:10:15 +0000 Manifest next update: Mon 10 Nov 2025 06:10:15 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: 62NWmxdH8gDUbPbk1L6L+JMDeAueROAznCMEaDsdiK0=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Nov 3 06:10:15 2025 GMT Not After : Nov 10 06:10:15 2025 GMT Subject: CN=69084747-26a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:0a:4f:b0:ab:8a:37:86:77:5e:5d:ee:39: 93:7a:94:0c:e1:b0:d5:5e:da:1f:e8:15:0c:ae:0f: 37:5d:07:93:b0:7a:6c:45:42:68:5f:3f:3d:c3:ad: 00:21:2d:81:5b:87:53:09:36:8d:33:8d:3d:c6:f5: 52:98:f0:df:31:d4:15:2e:7f:fb:3b:22:1e:31:d8: 03:e2:74:16:b5:8e:9f:02:56:20:ee:98:48:df:5d: 3e:d8:33:c9:90:7e:a7:d7:b3:ec:77:22:1c:6c:e2: a5:79:c4:57:4c:3f:8f:76:a3:68:cb:2a:ea:8d:5e: 9d:bf:a0:c9:32:67:8f:ac:0c:89:86:9d:cb:42:d1: c4:7f:68:f7:ad:ce:05:32:09:87:36:76:8c:ac:18: 4a:14:14:89:59:16:03:b6:19:46:66:6a:ad:c1:3f: 17:c8:ab:3d:a2:fd:9f:cf:87:3f:b8:9a:d2:6b:e8: 00:a7:ad:9d:9d:3b:be:a2:e6:68:a2:42:a2:a8:d0: 02:ce:5e:f5:58:ec:ea:46:35:f1:cd:57:40:b0:ad: b9:f7:90:e4:79:ed:1e:b5:1e:69:37:c0:a6:4b:8e: 40:bf:e6:6a:f7:b5:78:1c:aa:9f:a5:e6:a8:aa:f0: 45:96:bf:70:a3:75:14:a6:60:9f:19:ef:e6:14:8b: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:D9:4E:C0:A7:D6:98:E2:D3:54:12:E1:30:90:5D:62:76:AE:6F X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:17:2d:4e:3c:00:32:53:16:f2:15:4f:01:b2:bb:3b:60:61: 95:f7:07:c9:ea:97:d3:f3:2d:ef:a3:29:9b:df:d3:70:f3:37: 92:fe:b0:7e:f0:d2:cf:fb:7c:56:96:84:e9:aa:e5:21:4c:3f: f3:bd:86:0d:10:ab:6f:d4:5e:61:1c:85:b9:bc:c6:c7:2b:10: 83:0b:05:e7:e7:ea:4c:15:c3:72:61:99:96:29:19:e1:de:a3: a5:18:7b:65:d8:76:64:55:82:3e:e1:e5:45:5b:86:58:76:f3: fd:5f:34:aa:1b:8f:42:06:a7:fa:0e:37:81:12:a6:f1:1e:f3: 97:56:c4:5e:39:74:2b:26:3c:4d:78:fb:92:c9:ca:5c:b8:61: 56:b3:a8:59:c9:4b:8e:64:9f:24:a0:65:d6:49:83:cc:79:0d: 01:72:61:ec:b1:98:7b:9b:f8:60:5b:64:82:32:0f:42:b9:43: 7c:7f:a7:30:91:15:18:1b:1c:d6:2b:43:7a:22:ea:ec:c7:5a: 72:2b:fc:8b:9a:d0:78:ca:78:ab:b6:3c:79:eb:19:22:17:57: fc:63:a9:1c:11:47:47:52:1d:60:34:bb:ad:65:f6:fc:bb:86: 93:af:78:3d:a5:9d:2d:e2:86:58:12:47:3c:34:db:79:9f:18: ba:e4:71:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEUyRTYzMDY2NzVENUY1NEQyMDdCNjc4MkE5NkM3QUE5 NjdCMUZDOTEwHhcNMjUxMTAzMDYxMDE1WhcNMjUxMTEwMDYxMDE1WjAYMRYwFAYD VQQDEw02OTA4NDc0Ny0yNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bMKT7CrijeGd15d7jmTepQM4bDVXtof6BUMrg83XQeTsHpsRUJoXz89w60A IS2BW4dTCTaNM409xvVSmPDfMdQVLn/7OyIeMdgD4nQWtY6fAlYg7phI310+2DPJ kH6n17PsdyIcbOKlecRXTD+PdqNoyyrqjV6dv6DJMmePrAyJhp3LQtHEf2j3rc4F MgmHNnaMrBhKFBSJWRYDthlGZmqtwT8XyKs9ov2fz4c/uJrSa+gAp62dnTu+ouZo okKiqNACzl71WOzqRjXxzVdAsK2595Dkee0etR5pN8CmS45Av+Zq97V4HKqfpeao qvBFlr9wo3UUpmCfGe/mFIsaTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA22U7A p9aY4tNUEuEwkF1idq5vMB8GA1UdIwQYMBaAFOLmMGZ11fVNIHtngqlseqlnsfyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FOUJFMDVEQ0Ix M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlVMGdlMmVDcVd4NnFXZXhf SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9KRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FOUJFMDVEQ0IxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlV MGdlMmVDcVd4NnFXZXhfSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrFy1OPAAyUxbyFU8Bsrs7YGGV9wfJ6pfT8y3voymb39Nw8zeS/rB+ 8NLP+3xWloTpquUhTD/zvYYNEKtv1F5hHIW5vMbHKxCDCwXn5+pMFcNyYZmWKRnh 3qOlGHtl2HZkVYI+4eVFW4ZYdvP9XzSqG49CBqf6DjeBEqbxHvOXVsReOXQrJjxN ePuSycpcuGFWs6hZyUuOZJ8koGXWSYPMeQ0BcmHssZh7m/hgW2SCMg9CuUN8f6cw kRUYGxzWK0N6Iursx1pyK/yLmtB4ynirtjx56xkiF1f8Y6kcEUdHUh1gNLutZfb8 u4aTr3g9pZ0t4oZYEkc8NNt5nxi65HHJ -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:25 2025 by rpki-client