$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: 4ZiJWqr1QjhWTPGrnZlWRmjcPPy52+ioHFZMFvyCmO8= Subject key identifier: B3:C3:E6:3C:40:BD:5A:19:E9:F0:1F:19:40:5C:5F:3B:9F:26:C3:FC Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0C5E Signing time: Tue 04 Nov 2025 18:40:42 +0000 Manifest this update: Tue 04 Nov 2025 18:40:42 +0000 Manifest next update: Tue 11 Nov 2025 18:40:42 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: yaA1HPUw/ZfDLqSJRKQECWx/aPoB0xiFcFFIxq/cavM=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: TQZLfyrNNm4rH/joKuV/c0LtGb3rqWKsaid6lV6en3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Nov 4 18:40:42 2025 GMT Not After : Nov 11 18:40:42 2025 GMT Subject: CN=690a48aa-8e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:67:eb:f9:9f:7a:3f:d8:35:80:b6:39:26: 11:92:af:5c:52:81:33:3f:36:b5:17:f0:52:67:37: b8:5f:22:03:a7:c1:47:a4:ae:20:ad:5b:6c:cf:98: 9b:c3:8b:98:fe:cf:d6:b2:f7:8d:bc:82:9d:61:0b: 58:9c:23:e9:05:0c:8d:0b:26:22:4e:d9:94:f0:72: 0e:41:28:22:c6:ba:fb:c0:85:9f:38:46:5b:7e:15: e2:6d:c6:60:d0:3a:ad:37:33:23:a3:47:7c:29:7c: 42:4b:8b:65:ee:63:ac:20:80:be:bf:45:8b:59:bf: 0f:5c:40:6a:55:e2:52:ba:f5:b4:f0:de:b5:b4:bd: 50:a9:0a:00:d6:08:01:48:8b:f0:22:c9:07:46:07: da:a9:d9:e3:07:ef:a1:3f:70:5c:da:32:79:93:56: 3f:5a:92:79:ec:1f:5e:01:74:8d:e4:11:e1:2f:49: 33:bd:92:ec:f7:f7:68:57:86:17:ef:d1:27:1a:d1: 8f:a2:9c:82:30:0b:72:9c:c9:18:c5:c8:56:c8:a0: 94:11:ea:43:25:43:30:e9:39:76:83:79:04:ff:21: 92:29:23:81:dc:d9:44:f0:33:7b:35:cf:65:f4:c1: b5:9e:04:29:e7:86:2e:a5:ec:c3:5a:56:11:95:15: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C3:E6:3C:40:BD:5A:19:E9:F0:1F:19:40:5C:5F:3B:9F:26:C3:FC X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:a5:f8:7c:76:e6:07:70:87:ac:7f:6b:b6:69:79:b2:84:54: 36:cf:1e:5b:cd:42:14:fa:4f:7f:d1:ef:b5:c1:7c:06:05:91: 49:2e:38:ff:18:57:66:fd:43:79:75:d9:00:f8:24:d5:34:1a: 47:48:10:b1:a3:1e:43:38:54:75:e8:c8:73:82:40:5b:04:31: 02:fd:d2:25:7a:73:ea:bb:2a:37:e2:57:07:91:f1:ff:8e:df: 8c:ae:7c:f9:da:b6:0d:11:99:2a:57:dc:a7:df:31:d9:2b:13: 4d:77:2c:91:40:f3:aa:32:67:40:22:c5:51:c8:a2:b5:a1:8f: d8:15:75:51:b5:60:79:7d:ad:a4:ed:8c:0f:09:bd:1a:d6:c4: 6d:66:e0:92:55:48:d9:56:e1:5a:65:b1:45:5f:5e:46:41:ed: 03:dd:2e:93:ee:4a:eb:4a:e5:18:51:52:97:38:18:42:0f:ec: bd:e7:69:d5:e9:7c:06:62:7e:7e:af:0d:db:91:91:65:a8:17: a7:da:e4:23:28:56:de:00:41:88:26:28:bd:8f:3a:bc:35:51: d8:2c:2b:db:aa:38:90:66:00:dd:1b:17:b6:4b:f7:c0:a0:19: e3:89:c2:8d:f2:85:e3:b3:a7:32:0a:a8:bf:2e:03:bf:2a:f4: a4:4f:1c:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjUxMTA0MTg0MDQyWhcNMjUxMTExMTg0MDQyWjAYMRYwFAYD VQQDEw02OTBhNDhhYS04ZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8dn6/mfej/YNYC2OSYRkq9cUoEzPza1F/BSZze4XyIDp8FHpK4grVtsz5ib w4uY/s/WsveNvIKdYQtYnCPpBQyNCyYiTtmU8HIOQSgixrr7wIWfOEZbfhXibcZg 0DqtNzMjo0d8KXxCS4tl7mOsIIC+v0WLWb8PXEBqVeJSuvW08N61tL1QqQoA1ggB SIvwIskHRgfaqdnjB++hP3Bc2jJ5k1Y/WpJ57B9eAXSN5BHhL0kzvZLs9/doV4YX 79EnGtGPopyCMAtynMkYxchWyKCUEepDJUMw6Tl2g3kE/yGSKSOB3NlE8DN7Nc9l 9MG1ngQp54YupezDWlYRlRUfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPD5jxA vVoZ6fAfGUBcXzufJsP8MB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQpfh8duYHcIesf2u2aXmyhFQ2zx5bzUIU+k9/0e+1wXwGBZFJLjj/ GFdm/UN5ddkA+CTVNBpHSBCxox5DOFR16MhzgkBbBDEC/dIlenPquyo34lcHkfH/ jt+Mrnz52rYNEZkqV9yn3zHZKxNNdyyRQPOqMmdAIsVRyKK1oY/YFXVRtWB5fa2k 7YwPCb0a1sRtZuCSVUjZVuFaZbFFX15GQe0D3S6T7krrSuUYUVKXOBhCD+y952nV 6XwGYn5+rw3bkZFlqBen2uQjKFbeAEGIJii9jzq8NVHYLCvbqjiQZgDdGxe2S/fA oBnjicKN8oXjs6cyCqi/LgO/KvSkTxyD -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:12 2025 by rpki-client