$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: m1nmaVemeja5ULe1d4tlNUap+nowvVG2z9/5vKIO+Lk= Subject key identifier: 13:42:F2:07:98:B3:DC:1B:03:7D:8B:52:AF:80:12:47:7A:45:76:AD Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 011F Signing time: Mon 03 Nov 2025 04:45:00 +0000 Manifest this update: Mon 03 Nov 2025 04:44:59 +0000 Manifest next update: Mon 10 Nov 2025 04:44:59 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: FvxjSGHc0jxZMQdq6ucoI6ECSJ8AiZjyo5dE00KoIHI=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: F6IB2oLxhpfXXQwj/Kl3IJNncyOBKEOTP7G3C5XwQrk=) 3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: yyKQJp3Cor943Y25Ya+6ME8Xl4xDZuaYL1jQZ9UiIZI=) 4: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: kGlkPBXGhK2HbK8wICTx12rG9bb9NpN/Iy7FI3DGEGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Nov 3 04:44:59 2025 GMT Not After : Nov 10 04:44:59 2025 GMT Subject: CN=6908334b-1a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:25:4c:19:51:c8:a0:58:c0:53:ed:17:d9: f8:fa:0e:b1:a9:b5:9a:af:0e:59:83:b9:f6:fa:ec: ab:ee:3e:3d:58:48:14:ae:6d:1b:7a:63:07:54:50: 83:7a:97:78:04:b7:4f:e9:37:4a:1f:39:0d:80:de: 18:88:ce:e0:4f:03:15:7b:a7:49:95:fd:49:17:11: f0:ad:71:b6:5f:e9:64:23:e7:84:af:70:96:85:e5: 61:e6:9d:f2:94:b4:d9:5d:d5:4e:8f:97:00:68:31: 26:3e:70:d2:38:d2:93:e8:af:f4:ae:9c:45:2a:e9: 07:65:e1:a1:fe:bd:ea:23:c1:ff:f7:86:59:01:36: f9:28:67:71:61:5c:d2:37:6e:f1:32:3c:8a:8c:7b: f0:cd:b3:8b:51:14:3c:38:32:36:58:de:c4:29:3d: 2c:7a:5a:38:03:40:7a:6f:7b:f6:aa:bd:00:28:43: 0d:0c:48:94:79:a0:99:df:1c:5b:a5:a7:30:ba:5a: cf:c8:22:7d:6b:37:a0:4d:95:af:00:62:62:f0:8d: 59:b1:22:f5:0e:35:9e:42:dd:8b:bf:96:bb:94:ec: e9:90:38:f5:4b:cb:e1:5c:5a:31:60:68:b0:38:5b: 9f:dc:f2:97:0d:64:dd:00:fe:1e:39:68:3d:b5:3a: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:42:F2:07:98:B3:DC:1B:03:7D:8B:52:AF:80:12:47:7A:45:76:AD X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b8:bb:7f:12:d8:dc:83:5c:3b:c1:49:e2:ae:d9:c3:a6:6d: 68:a1:22:29:41:c3:fe:ec:fe:f7:75:94:c4:fd:16:08:ed:ac: 94:58:d6:a7:b2:12:b2:f0:11:bf:08:56:a2:47:bd:b8:1b:2d: 85:84:23:2a:5b:45:29:5f:6f:53:f0:ae:a9:7b:9c:17:ef:ed: f0:c5:44:bb:d5:c9:eb:fd:82:94:36:57:7c:74:73:7b:22:eb: c9:ea:98:35:2d:7d:9e:1d:2b:64:37:bf:3a:cf:80:7b:92:36: d6:3e:56:4f:30:b1:11:65:dd:1c:1a:d5:fd:99:05:c1:bb:a5: 73:7a:a6:27:d5:90:b8:6e:fe:a7:04:34:ff:84:a6:50:91:51: 99:63:95:72:4a:8b:db:93:8c:f4:c7:bf:b2:2b:03:de:59:bc: 48:27:e2:16:92:ea:48:0d:18:66:c1:0f:b0:9a:7e:06:64:63: d7:d5:a7:21:29:55:48:01:50:c6:3e:01:22:07:01:b4:2e:da: ba:2f:64:2b:25:55:6f:55:1e:e7:33:5d:c1:ca:8f:f4:c0:6a: 0a:71:82:8b:ed:26:b7:4c:88:00:1b:cd:3d:08:37:7f:c0:50: fc:a1:fe:6f:40:a3:97:ee:3e:ba:db:8b:97:1f:5b:5b:94:dc: 6a:de:5f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjUxMTAzMDQ0NDU5WhcNMjUxMTEwMDQ0NDU5WjAYMRYwFAYD VQQDEw02OTA4MzM0Yi0xYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8UlTBlRyKBYwFPtF9n4+g6xqbWarw5Zg7n2+uyr7j49WEgUrm0bemMHVFCD epd4BLdP6TdKHzkNgN4YiM7gTwMVe6dJlf1JFxHwrXG2X+lkI+eEr3CWheVh5p3y lLTZXdVOj5cAaDEmPnDSONKT6K/0rpxFKukHZeGh/r3qI8H/94ZZATb5KGdxYVzS N27xMjyKjHvwzbOLURQ8ODI2WN7EKT0selo4A0B6b3v2qr0AKEMNDEiUeaCZ3xxb pacwulrPyCJ9azegTZWvAGJi8I1ZsSL1DjWeQt2Lv5a7lOzpkDj1S8vhXFoxYGiw OFuf3PKXDWTdAP4eOWg9tTr5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNC8geY s9wbA32LUq+AEkd6RXatMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAuLt/Etjcg1w7wUnirtnDpm1ooSIpQcP+7P73dZTE/RYI7ayUWNan shKy8BG/CFaiR724Gy2FhCMqW0UpX29T8K6pe5wX7+3wxUS71cnr/YKUNld8dHN7 IuvJ6pg1LX2eHStkN786z4B7kjbWPlZPMLERZd0cGtX9mQXBu6VzeqYn1ZC4bv6n BDT/hKZQkVGZY5VySovbk4z0x7+yKwPeWbxIJ+IWkupIDRhmwQ+wmn4GZGPX1ach KVVIAVDGPgEiBwG0Ltq6L2QrJVVvVR7nM13Byo/0wGoKcYKL7Sa3TIgAG809CDd/ wFD8of5vQKOX7j6624uXH1tblNxq3l99 -----END CERTIFICATE-----Generated at Tue Nov 4 23:08:26 2025 by rpki-client