$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: SM5RRnAIixXfX9PLBBtPVEwaYIKNO7mEmP3/YSgrRyo= Subject key identifier: 18:97:6D:11:9D:BD:BF:A5:9F:F2:74:CD:3A:4D:C7:D0:78:CE:23:88 Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 0A43 Signing time: Tue 04 Nov 2025 19:49:06 +0000 Manifest this update: Tue 04 Nov 2025 19:49:05 +0000 Manifest next update: Tue 11 Nov 2025 19:49:05 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: AMUpJ4IjckGnBQT+x9YYu999axk2BbHEVsXmEENIauU=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: ACLukHzl4iP7lAUKq3zWaW1x17F+UkqOsay4tSs+0D0=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: WPHw7kNP0n6c5UltUwmrIvy70bAxnVBFcfWA6in4LsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Nov 4 19:49:05 2025 GMT Not After : Nov 11 19:49:05 2025 GMT Subject: CN=690a58b1-f26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:02:62:e6:2b:67:8b:2e:14:d0:e6:bd:2c: b7:74:6c:53:ae:64:6e:a5:ef:59:df:97:f3:0f:e1: 84:94:2f:89:3f:53:38:d7:e0:4e:1f:09:5b:a3:00: 54:b8:a9:d4:12:bc:a6:38:a4:01:d4:b9:a2:dc:ff: 98:77:a3:cd:a6:64:f2:5f:1a:20:6e:f2:d6:ee:80: c8:cf:fc:c1:5a:f1:e1:f0:5d:8d:db:f3:b8:1d:ee: 53:73:ea:b8:02:b6:78:d4:c3:57:76:1b:a7:28:9b: 50:38:74:07:9b:15:45:24:03:6c:fc:e0:17:3b:00: 66:b5:3f:11:7a:68:c5:31:cf:46:b0:40:1d:8e:3b: 80:bf:53:3a:1c:87:7e:2d:b7:d1:b7:ab:5f:17:fe: 7f:f7:b3:31:5b:ca:b0:15:d0:20:81:bb:a1:d1:b0: b4:69:a9:03:56:d4:77:e7:70:c1:64:c2:80:60:d2: 05:c5:8a:23:9a:b6:f9:b1:68:23:1b:4a:87:b3:b9: 40:24:17:e5:c8:40:b7:d5:0b:b7:6f:aa:73:ef:71: 31:c6:06:3d:99:dc:4b:96:60:16:87:40:69:bb:c4: a2:58:65:74:99:a1:3b:83:e9:1d:54:ee:27:8c:72: d6:cf:89:b1:03:26:ef:87:17:bb:c2:d2:df:fb:32: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:97:6D:11:9D:BD:BF:A5:9F:F2:74:CD:3A:4D:C7:D0:78:CE:23:88 X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:94:b5:0b:2e:16:f4:17:4d:12:71:4b:16:28:a6:40:a2:99: a2:66:cf:09:1a:77:77:9e:74:d7:76:a6:52:ae:d5:f7:14:1f: 16:3d:95:2e:92:77:9c:99:7d:4e:f9:3c:96:ba:0c:88:39:6f: 3d:62:ff:b4:f1:f9:67:07:40:f8:a4:31:5b:46:a9:01:39:80: e7:af:57:97:4b:49:c7:a0:4c:5a:12:3a:90:6f:01:4c:19:fb: 3e:15:1a:95:ea:aa:24:17:97:5e:49:7c:f0:80:e8:9b:39:1d: cd:1d:36:b1:25:c2:fe:66:3f:c1:bb:db:cd:9c:31:4e:3b:b1: c9:b8:ac:c5:04:63:f8:75:c1:22:03:7a:15:9e:1f:d1:be:b0: a0:ff:30:5b:6a:19:16:f2:5b:0e:40:36:1c:3e:56:af:79:fc: e4:f8:74:10:ea:42:a8:fb:6b:e6:36:55:9c:c1:c3:8d:96:a2: 03:e3:09:1d:61:e9:b6:ef:39:9b:2a:48:96:c0:87:ba:a9:64: 79:03:65:6f:19:2a:4f:8b:4d:fd:e3:a9:86:73:64:e8:45:09: fb:8b:20:85:37:06:5f:2a:61:95:54:81:a5:c6:1f:a7:55:78: ea:08:b6:8c:3f:30:8f:06:39:0e:2d:af:9a:cc:f1:46:dd:59: 86:81:13:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUxMTA0MTk0OTA1WhcNMjUxMTExMTk0OTA1WjAYMRYwFAYD VQQDEw02OTBhNThiMS1mMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAYCYuYrZ4suFNDmvSy3dGxTrmRupe9Z35fzD+GElC+JP1M41+BOHwlbowBU uKnUErymOKQB1Lmi3P+Yd6PNpmTyXxogbvLW7oDIz/zBWvHh8F2N2/O4He5Tc+q4 ArZ41MNXdhunKJtQOHQHmxVFJANs/OAXOwBmtT8RemjFMc9GsEAdjjuAv1M6HId+ LbfRt6tfF/5/97MxW8qwFdAggbuh0bC0aakDVtR353DBZMKAYNIFxYojmrb5sWgj G0qHs7lAJBflyEC31Qu3b6pz73ExxgY9mdxLlmAWh0Bpu8SiWGV0maE7g+kdVO4n jHLWz4mxAybvhxe7wtLf+zI9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiXbRGd vb+ln/J0zTpNx9B4ziOIMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHlLULLhb0F00ScUsWKKZAopmiZs8JGnd3nnTXdqZSrtX3FB8WPZUu knecmX1O+TyWugyIOW89Yv+08flnB0D4pDFbRqkBOYDnr1eXS0nHoExaEjqQbwFM Gfs+FRqV6qokF5deSXzwgOibOR3NHTaxJcL+Zj/Bu9vNnDFOO7HJuKzFBGP4dcEi A3oVnh/RvrCg/zBbahkW8lsOQDYcPlavefzk+HQQ6kKo+2vmNlWcwcONlqID4wkd Yem27zmbKkiWwIe6qWR5A2VvGSpPi03946mGc2ToRQn7iyCFNwZfKmGVVIGlxh+n VXjqCLaMPzCPBjkOLa+azPFG3VmGgRN5 -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:02 2025 by rpki-client