$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: 4YQV89YMIvNC/BJ/Vre2zRzwlQXkWZOaLKeEmLodClw= Subject key identifier: 74:40:10:CB:4B:FC:1C:85:6A:34:A0:6A:E8:85:83:2F:4F:79:EF:24 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34F2 Signing time: Tue 04 Nov 2025 14:58:15 +0000 Manifest this update: Tue 04 Nov 2025 14:58:15 +0000 Manifest next update: Tue 11 Nov 2025 14:58:15 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: guYTocvIVqx3MTYZIA10WRgCc0EY401Fb5pNoqlGdRk=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13584 (0x3510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Nov 4 14:58:15 2025 GMT Not After : Nov 11 14:58:15 2025 GMT Subject: CN=690a1487-feb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:46:ed:07:ea:ed:30:e0:50:40:b0:be:ba: 0a:1a:f4:a3:9a:62:01:97:b5:96:ac:81:ed:af:83: 38:a6:9a:66:d8:52:55:3e:61:5a:b3:49:5f:ce:fa: 53:af:27:1f:1a:4f:88:ab:36:7a:a4:e4:38:17:4f: ff:13:dd:95:38:58:d0:e5:f4:24:82:57:b9:6f:a0: 3f:d2:b3:5a:79:3b:0c:84:e5:02:f3:3b:4f:73:43: e0:ad:0a:a5:12:20:8b:50:9d:db:da:fa:e6:40:85: f3:b8:e5:dd:2d:83:7f:53:58:93:bd:68:46:bb:00: 7a:a7:be:d8:35:a8:22:69:4d:06:c5:7c:67:25:f4: 7d:92:b5:38:1d:86:38:39:bc:77:62:d7:04:8e:42: 3e:e1:2a:54:ee:4d:b4:a6:6f:1b:fd:9d:4d:7e:aa: a6:22:17:b4:60:38:46:f2:60:df:a1:e9:8f:aa:1b: 5b:44:2d:aa:ff:7c:eb:10:7e:f1:a6:bd:d1:56:26: fd:2c:5a:97:1c:2a:0e:4a:8a:16:11:a8:3c:08:0b: 9a:8a:f0:57:06:fd:a0:3e:2e:4d:9d:3a:53:9f:f8: 66:4a:54:62:36:51:4b:92:e1:5b:2d:72:45:d6:db: b8:7c:ef:ab:9b:c0:94:5d:e6:be:d4:06:63:f2:a5: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:40:10:CB:4B:FC:1C:85:6A:34:A0:6A:E8:85:83:2F:4F:79:EF:24 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:17:69:6f:a2:67:49:ee:62:46:f5:ed:9a:f2:7c:b1:f3:a8: 44:4d:48:5b:60:c4:d2:4c:c6:42:6c:6d:c2:93:b4:89:be:1d: 4e:4d:19:d5:8f:92:d6:f0:25:e2:57:64:6d:d8:51:54:2e:60: 87:f6:26:4e:54:e0:80:8d:e7:9e:83:46:5b:90:92:12:e5:db: c0:33:c3:c2:2a:d9:f4:f6:8a:8d:ac:b4:42:95:77:8c:67:39: 17:57:8e:e6:b7:88:c2:6e:6c:18:98:f0:1a:d9:84:3d:86:ae: 0a:3b:37:31:5e:40:0c:ac:5a:05:61:3b:df:03:75:96:24:34: c5:90:64:94:08:b5:5c:97:a6:d0:c1:c6:4b:ce:2d:be:e5:07: ed:fd:23:48:c2:c0:c2:5b:3c:c4:fa:fe:0f:85:2a:11:8e:c5: 49:31:00:f5:f9:cf:a1:9e:67:30:a5:1f:f4:dc:c3:7a:fc:b5: 69:dd:ef:27:00:d4:e4:b0:7f:7e:30:4b:e8:fe:97:e3:0a:5d: dc:d9:fb:6a:72:f8:24:df:be:9e:68:dc:64:61:6b:00:4a:0b: 92:b1:cf:1a:58:1a:c6:ee:b8:20:ef:fd:43:bd:97:68:dd:e0: 3c:8d:31:6b:96:4e:9b:b9:41:2e:bc:5c:2c:02:50:fe:7a:03: ff:47:63:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUxMTA0MTQ1ODE1WhcNMjUxMTExMTQ1ODE1WjAYMRYwFAYD VQQDEw02OTBhMTQ4Ny1mZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcxG7Qfq7TDgUECwvroKGvSjmmIBl7WWrIHtr4M4pppm2FJVPmFas0lfzvpT rycfGk+IqzZ6pOQ4F0//E92VOFjQ5fQkgle5b6A/0rNaeTsMhOUC8ztPc0PgrQql EiCLUJ3b2vrmQIXzuOXdLYN/U1iTvWhGuwB6p77YNagiaU0GxXxnJfR9krU4HYY4 Obx3YtcEjkI+4SpU7k20pm8b/Z1NfqqmIhe0YDhG8mDfoemPqhtbRC2q/3zrEH7x pr3RVib9LFqXHCoOSooWEag8CAuaivBXBv2gPi5NnTpTn/hmSlRiNlFLkuFbLXJF 1tu4fO+rm8CUXea+1AZj8qV8EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRAEMtL /ByFajSgauiFgy9Pee8kMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFF2lvomdJ7mJG9e2a8nyx86hETUhbYMTSTMZCbG3Ck7SJvh1OTRnV j5LW8CXiV2Rt2FFULmCH9iZOVOCAjeeeg0ZbkJIS5dvAM8PCKtn09oqNrLRClXeM ZzkXV47mt4jCbmwYmPAa2YQ9hq4KOzcxXkAMrFoFYTvfA3WWJDTFkGSUCLVcl6bQ wcZLzi2+5Qft/SNIwsDCWzzE+v4PhSoRjsVJMQD1+c+hnmcwpR/03MN6/LVp3e8n ANTksH9+MEvo/pfjCl3c2ftqcvgk376eaNxkYWsASguSsc8aWBrG7rgg7/1DvZdo 3eA8jTFrlk6buUEuvFwsAlD+egP/R2M7 -----END CERTIFICATE-----Generated at Wed Nov 5 12:15:43 2025 by rpki-client