$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: 8O88cao/uD3mZh8HTOIy5wQ76Lz8+WfYmpaownPql/M= Subject key identifier: 99:3A:0A:21:DF:E7:FF:4B:A4:E8:BB:74:4D:FE:13:F8:DD:82:46:86 Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0B4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B43 Signing time: Tue 04 Nov 2025 19:20:17 +0000 Manifest this update: Tue 04 Nov 2025 19:20:16 +0000 Manifest next update: Tue 11 Nov 2025 19:20:16 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: FBu2CiD8qLEqko+kYBaon5J916UumdlvWT0CgdGzjR8=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: H58uLnLgtQRXxjwDdpgj46LQrUNsRnsgJgSttmaA0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2892 (0xb4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Nov 4 19:20:16 2025 GMT Not After : Nov 11 19:20:16 2025 GMT Subject: CN=690a51f0-0352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:7a:01:8e:7e:d2:54:54:e6:25:40:16:0c: 69:73:b7:d0:47:07:b9:a7:64:66:1d:c7:90:88:78: 03:f9:a2:3f:91:81:d8:99:c7:cf:2a:13:69:b1:9e: 49:5c:4c:9a:4b:36:17:66:6e:11:d0:7e:63:6e:bd: c8:65:9c:c0:aa:d9:f8:38:4f:83:00:92:46:3e:68: eb:e9:f5:92:af:0e:a7:03:c1:4a:1b:86:b1:1c:32: 93:c7:08:21:f3:00:93:ac:58:89:84:bb:83:fc:fe: c9:36:9b:e0:be:51:c7:9d:0a:d1:8e:68:7f:71:0f: b7:10:7c:f1:46:ad:34:5d:98:f7:0b:4c:fb:f7:63: de:70:ba:d0:66:3c:9f:32:ca:0c:1d:3b:18:97:4b: 35:0d:d1:e6:56:dc:64:53:1c:7a:8b:7a:46:a4:70: e8:c1:5d:41:72:e0:29:84:44:1f:7a:97:e8:f7:55: 81:e8:be:d7:ec:7a:30:b3:89:c8:be:94:41:7f:c0: f8:03:e9:e4:c0:53:58:7d:15:2d:a8:81:c7:ad:d3: 65:b0:d8:59:5d:ea:27:44:97:09:d8:ad:b8:31:8f: 4c:2f:91:9e:ff:15:61:c3:3b:09:4f:5a:23:2e:8e: 4d:4b:e3:94:81:6b:ff:b3:00:ad:cc:88:e2:aa:c2: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3A:0A:21:DF:E7:FF:4B:A4:E8:BB:74:4D:FE:13:F8:DD:82:46:86 X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d6:4f:07:26:c1:4d:e4:6d:fb:99:db:94:aa:2d:6e:32:55: cc:83:b8:7e:a7:59:2f:2a:dd:fc:71:f5:4d:2f:ae:ca:45:39: 92:12:04:a0:b8:11:7d:59:5c:ca:01:99:a1:3f:20:91:85:69: cf:f2:39:9b:0a:fa:da:03:71:eb:aa:49:93:75:55:cd:f7:0e: da:f4:c7:4d:1f:2c:1d:cd:2c:4e:b8:17:c2:11:3f:07:5a:ac: a8:aa:03:83:80:72:b3:e0:df:4f:f7:59:a4:45:90:55:9c:55: e3:4d:9d:ce:83:7b:5e:10:fa:4c:31:8c:ba:1b:e6:e3:51:d2: 19:1f:b8:cb:f3:aa:58:e7:f4:fd:97:9d:b3:ee:2c:17:09:bc: ff:16:9b:1e:3a:98:db:30:ea:ed:96:67:5b:ac:44:ed:a0:bb: c1:c5:c1:55:7b:f5:9e:31:36:4b:3c:48:65:b9:de:d5:c9:d8: 8a:a9:e2:fb:fc:72:64:52:b9:1b:3c:a3:a7:c8:e4:2b:8d:6e: 63:92:e8:07:5d:13:a9:e4:ab:40:a9:44:35:dc:65:1b:b3:04: 3a:f9:72:a5:a4:2c:47:c4:89:1b:b7:b3:af:6f:a7:e6:5e:68: e5:12:95:63:32:f3:88:29:ed:65:07:85:4d:8e:45:5e:22:71: 6f:2c:ae:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUxMTA0MTkyMDE2WhcNMjUxMTExMTkyMDE2WjAYMRYwFAYD VQQDEw02OTBhNTFmMC0wMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dN6AY5+0lRU5iVAFgxpc7fQRwe5p2RmHceQiHgD+aI/kYHYmcfPKhNpsZ5J XEyaSzYXZm4R0H5jbr3IZZzAqtn4OE+DAJJGPmjr6fWSrw6nA8FKG4axHDKTxwgh 8wCTrFiJhLuD/P7JNpvgvlHHnQrRjmh/cQ+3EHzxRq00XZj3C0z792PecLrQZjyf MsoMHTsYl0s1DdHmVtxkUxx6i3pGpHDowV1BcuAphEQfepfo91WB6L7X7Hows4nI vpRBf8D4A+nkwFNYfRUtqIHHrdNlsNhZXeonRJcJ2K24MY9ML5Ge/xVhwzsJT1oj Lo5NS+OUgWv/swCtzIjiqsLNcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJk6CiHf 5/9LpOi7dE3+E/jdgkaGMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+1k8HJsFN5G37mduUqi1uMlXMg7h+p1kvKt38cfVNL67KRTmSEgSg uBF9WVzKAZmhPyCRhWnP8jmbCvraA3HrqkmTdVXN9w7a9MdNHywdzSxOuBfCET8H WqyoqgODgHKz4N9P91mkRZBVnFXjTZ3Og3teEPpMMYy6G+bjUdIZH7jL86pY5/T9 l52z7iwXCbz/FpseOpjbMOrtlmdbrETtoLvBxcFVe/WeMTZLPEhlud7VydiKqeL7 /HJkUrkbPKOnyOQrjW5jkugHXROp5KtAqUQ13GUbswQ6+XKlpCxHxIkbt7Ovb6fm XmjlEpVjMvOIKe1lB4VNjkVeInFvLK6Z -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:15 2025 by rpki-client