$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: 2PXQ7vbzfu0efdgoDYgeej+7++Ri3yTYSyZuBN6vL9s= Subject key identifier: DD:73:7D:4E:7E:DE:D1:6D:EA:DA:48:A1:F3:3A:B8:B1:62:52:32:72 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13E9 Signing time: Tue 04 Nov 2025 17:02:13 +0000 Manifest this update: Tue 04 Nov 2025 17:02:13 +0000 Manifest next update: Tue 11 Nov 2025 17:02:13 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: lsDk/SJHrgW40p1whsytbglZwMVRzEVZlZgE8ndBhDc=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: nHJYnVN764I+a01wg+TzZ5hfwKIk6KrVw4NGUGzTSaE=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: HUiyLswpuxKdbNSVPaGfLSYEn6DWoC29PelmwIAjJ5Y=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: OqEEQNcYyBCDgQL1llF0AYlCqLNvN3uXPMeNJtc0cyI=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: faPX+RT4u0aFWk0BQoLYurHE34SqXeH6Z33EAVEOUo0=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: PEQx20rXW3wWd56B/SVjtbMpJcwzQ8D6MiDi0J0Jbek=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: lBRDtES/HZOfboWNM5sziaPImTLADmv7HDwM0/uuCvk=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: Flu+OB6NSXTr2/DICAFpHEHutk0iqrBQ5kD9GJPbb90=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: V1iSNQB8ve6x07QbL++7FcG93VsgUWiOli7wIFWtTZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5190 (0x1446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Nov 4 17:02:13 2025 GMT Not After : Nov 11 17:02:13 2025 GMT Subject: CN=690a3195-8d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:7b:0a:14:6e:21:40:0a:e7:8b:05:83:38: ee:f7:ad:4d:d5:45:c3:18:26:47:bc:73:12:1d:21: 6f:25:a4:79:bd:01:5f:0f:9c:98:3e:72:25:55:5f: c5:56:5b:13:82:fa:1e:c3:0c:0e:c4:97:e0:27:fc: db:18:32:33:f5:ec:f2:6b:3e:6c:ba:df:05:3c:e9: 4c:bb:59:e9:74:77:30:65:31:5d:7a:2c:39:84:68: ed:2d:6e:d0:1d:4d:81:a9:12:c5:c0:a9:d4:42:0b: 96:0e:ab:a1:dd:4e:21:41:3b:57:5c:1c:97:01:c5: 9d:7c:65:73:80:67:d2:16:de:81:84:47:d0:4f:4d: fd:39:11:c5:48:d1:79:32:06:65:4d:cc:47:80:6d: 08:7b:37:ca:a4:03:28:2d:60:a2:8e:2c:cf:d1:f2: 14:19:9b:a2:25:3c:ac:9f:c0:38:93:41:33:98:7a: 10:a8:45:a1:56:61:2e:e1:ed:fc:f7:4e:7b:d1:bb: 62:fd:e8:06:c3:f8:a9:98:d3:03:4e:e3:66:66:b0: d5:db:7c:b0:56:64:08:1c:7d:f5:76:15:3c:27:23: 5c:69:f7:47:b4:52:69:4e:11:86:32:88:01:bc:bb: 2a:b0:32:9b:ee:a8:47:ed:b9:5a:fe:31:75:3f:10: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:73:7D:4E:7E:DE:D1:6D:EA:DA:48:A1:F3:3A:B8:B1:62:52:32:72 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fb:e4:f9:ed:71:41:2b:64:e7:ec:2f:2d:ce:f9:82:c4:7b: 43:7f:d7:fd:a7:f4:8f:1d:73:1e:7c:9a:8f:2c:00:5a:96:76: 7c:46:1a:86:3b:43:48:b3:56:38:25:6a:44:75:14:70:5f:2e: 39:bd:33:ed:98:27:36:ac:ce:96:13:39:f2:da:3c:69:f0:78: da:b1:77:ef:dc:17:9b:67:b7:79:3c:49:e8:a2:a6:47:93:8e: 72:dd:ec:ba:8b:c7:a1:a9:2d:0a:60:8a:09:00:0e:9b:43:65: 07:3b:dd:71:fe:15:7a:63:f1:73:c5:be:bc:68:52:fe:31:83: f2:41:88:41:9b:b9:d0:f4:9f:b2:8b:0a:b9:43:c5:e5:13:e5: c2:38:56:c0:15:1f:b9:c1:6d:0b:62:85:e9:00:da:5e:1a:fa: ef:92:64:82:5a:85:54:18:91:c2:0c:d0:a9:20:47:51:d3:2f: 0b:19:fc:99:4d:79:b8:fb:8f:3f:ec:3e:44:c8:3e:f3:f3:71: 7a:3d:c6:e0:7e:ec:79:86:96:b9:bd:8f:52:44:fb:1c:83:35: 69:b6:89:2f:21:96:95:4e:18:66:ba:1a:8a:8f:db:02:84:bf: b3:33:fe:55:d5:22:fa:23:33:19:1e:da:8b:14:b5:23:ff:94: bb:6f:6b:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUxMTA0MTcwMjEzWhcNMjUxMTExMTcwMjEzWjAYMRYwFAYD VQQDEw02OTBhMzE5NS04ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHp7ChRuIUAK54sFgzju961N1UXDGCZHvHMSHSFvJaR5vQFfD5yYPnIlVV/F VlsTgvoewwwOxJfgJ/zbGDIz9ezyaz5sut8FPOlMu1npdHcwZTFdeiw5hGjtLW7Q HU2BqRLFwKnUQguWDquh3U4hQTtXXByXAcWdfGVzgGfSFt6BhEfQT039ORHFSNF5 MgZlTcxHgG0IezfKpAMoLWCijizP0fIUGZuiJTysn8A4k0EzmHoQqEWhVmEu4e38 90570bti/egGw/ipmNMDTuNmZrDV23ywVmQIHH31dhU8JyNcafdHtFJpThGGMogB vLsqsDKb7qhH7bla/jF1PxAc1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1zfU5+ 3tFt6tpIofM6uLFiUjJyMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt++T57XFBK2Tn7C8tzvmCxHtDf9f9p/SPHXMefJqPLABalnZ8RhqG O0NIs1Y4JWpEdRRwXy45vTPtmCc2rM6WEzny2jxp8HjasXfv3BebZ7d5PEnooqZH k45y3ey6i8ehqS0KYIoJAA6bQ2UHO91x/hV6Y/Fzxb68aFL+MYPyQYhBm7nQ9J+y iwq5Q8XlE+XCOFbAFR+5wW0LYoXpANpeGvrvkmSCWoVUGJHCDNCpIEdR0y8LGfyZ TXm4+48/7D5EyD7z83F6Pcbgfux5hpa5vY9SRPscgzVptokvIZaVThhmuhqKj9sC hL+zM/5V1SL6IzMZHtqLFLUj/5S7b2tA -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:30 2025 by rpki-client