$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: COai5+rJ4cL4mddD8N/LbwWV89cPGjRjG/rH9c3vshk= Subject key identifier: 5F:FC:EC:69:7A:B4:D0:16:39:7D:24:14:04:C0:FB:D7:FC:B6:1A:A9 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 03F5 Signing time: Wed 05 Nov 2025 00:43:45 +0000 Manifest this update: Wed 05 Nov 2025 00:43:44 +0000 Manifest next update: Wed 12 Nov 2025 00:43:44 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 9RAr92YL0fUyceYXTIHp1r9jFfh63K2DMl5v/7Q1nKM=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: 2KodBvrJvVzLG2LbWPZiEGrY7NIy7vzTjdiUIRnC0oY=) 6: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=) 7: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) 8: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: NJb7fbLMu5qVuetYwV/WSEDtWyBY5QSeAuqQ8b9b+dY=) 9: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Nov 5 00:43:44 2025 GMT Not After : Nov 12 00:43:44 2025 GMT Subject: CN=690a9dc0-1204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:8f:1b:f8:b1:f6:9d:45:9e:d1:5f:70:76: 36:24:5c:de:12:f0:57:f1:81:2c:7b:a1:58:50:f7: 99:b3:cf:7d:e6:a7:fd:54:37:ca:b6:7b:6e:2f:aa: 3c:4b:75:bd:6e:9f:6f:48:ad:57:da:4c:1e:8d:a0: 49:51:3c:06:ce:30:0e:30:c0:8c:a6:34:d3:c2:19: b2:bb:67:3e:cb:32:9e:88:ac:73:13:8b:48:76:95: 18:21:90:c0:7e:75:06:23:a4:22:51:6b:45:0e:07: af:8c:74:24:3e:38:11:2a:0d:92:ee:95:96:0d:dd: 87:2f:58:d3:7e:bf:b3:dc:f4:62:2b:5e:09:24:f3: 9c:b7:c6:ae:8e:1f:76:69:40:bb:e8:85:f0:1f:54: 07:94:8b:e2:b2:51:b4:e6:ce:75:c4:f4:a3:0c:07: db:58:49:f1:39:2f:ce:5b:bf:01:2a:a0:d2:4f:7e: 7d:92:8d:ae:79:4a:55:df:59:a4:38:d5:40:48:18: 6a:92:e6:64:ce:50:df:ae:af:23:45:59:bb:bc:7c: 41:fc:42:f9:46:40:03:2b:ec:c1:65:05:59:4f:9e: 45:bd:5d:69:a0:07:83:e5:a7:93:46:4e:c2:8a:70: 0b:80:15:9b:04:8e:10:db:03:76:46:18:56:a4:31: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:EC:69:7A:B4:D0:16:39:7D:24:14:04:C0:FB:D7:FC:B6:1A:A9 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a2:54:16:99:c7:9f:df:71:cf:ba:69:93:65:19:e4:dc:20: 7e:5b:42:50:85:e0:87:57:37:49:7a:a4:c2:e9:58:42:85:8e: 8a:f8:45:85:1b:91:47:64:80:06:f6:8d:8c:56:db:cf:ce:6a: ba:ac:62:66:06:0a:dd:c6:46:26:1d:1a:42:78:f7:19:7a:09: 0d:ca:f4:ae:da:73:a0:ab:42:08:d0:e8:d2:aa:a5:8d:b7:04: f6:01:81:fd:3e:7e:38:aa:3e:07:e5:6e:e0:42:f7:dc:66:39: ab:6b:07:1e:ab:27:08:9d:bd:e6:2b:03:53:0d:80:c2:e1:47: 4e:6e:43:ec:89:5a:69:93:1a:29:e8:f2:72:7a:f0:aa:8d:60: 71:b5:79:db:7d:73:9f:de:5b:90:1e:4b:eb:3a:18:56:ec:61: 32:58:d5:dc:34:8a:a2:0f:62:cb:e0:21:3d:85:da:ff:f5:cb: 32:0e:4a:41:ca:26:eb:6f:e4:fa:bc:5c:98:d4:b6:fb:6c:d1: fc:74:6d:31:53:1c:51:3b:f4:42:74:3e:98:0d:86:9f:08:57: 97:64:39:b8:97:51:a5:5c:a7:32:59:3e:b1:0a:ce:e9:2d:6f: 2b:61:90:cd:db:8a:78:d3:1d:3e:78:78:d9:bc:7b:f3:b2:d3: 25:71:61:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUxMTA1MDA0MzQ0WhcNMjUxMTEyMDA0MzQ0WjAYMRYwFAYD VQQDEw02OTBhOWRjMC0xMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QCPG/ix9p1FntFfcHY2JFzeEvBX8YEse6FYUPeZs8995qf9VDfKtntuL6o8 S3W9bp9vSK1X2kwejaBJUTwGzjAOMMCMpjTTwhmyu2c+yzKeiKxzE4tIdpUYIZDA fnUGI6QiUWtFDgevjHQkPjgRKg2S7pWWDd2HL1jTfr+z3PRiK14JJPOct8aujh92 aUC76IXwH1QHlIvislG05s51xPSjDAfbWEnxOS/OW78BKqDST359ko2ueUpV31mk ONVASBhqkuZkzlDfrq8jRVm7vHxB/EL5RkADK+zBZQVZT55FvV1poAeD5aeTRk7C inALgBWbBI4Q2wN2RhhWpDFAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/87Gl6 tNAWOX0kFATA+9f8thqpMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAolQWmcef33HPummTZRnk3CB+W0JQheCHVzdJeqTC6VhChY6K+EWF G5FHZIAG9o2MVtvPzmq6rGJmBgrdxkYmHRpCePcZegkNyvSu2nOgq0II0OjSqqWN twT2AYH9Pn44qj4H5W7gQvfcZjmrawceqycInb3mKwNTDYDC4UdObkPsiVppkxop 6PJyevCqjWBxtXnbfXOf3luQHkvrOhhW7GEyWNXcNIqiD2LL4CE9hdr/9csyDkpB yibrb+T6vFyY1Lb7bNH8dG0xUxxRO/RCdD6YDYafCFeXZDm4l1GlXKcyWT6xCs7p LW8rYZDN24p40x0+eHjZvHvzstMlcWEf -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:43 2025 by rpki-client