$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json) Hash identifier: bgEDE4ZSjaqVahI56tkgpX4wbIvY5qYbnpNm4Vgo56Y= Subject key identifier: A7:F4:C0:76:7C:46:BA:07:4F:3A:61:F0:29:CF:EF:9B:99:C9:C7:BC Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft Manifest number: 3C Signing time: Wed 05 Nov 2025 07:47:33 +0000 Manifest this update: Wed 05 Nov 2025 07:47:32 +0000 Manifest next update: Wed 12 Nov 2025 07:47:32 +0000 Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: AzABfsLqAUNNxlO0qXZwKNixQPe3ViXInjj21rd/9qY=) 2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: bd7Gyj5KNeVEwD0iXG4ANGqD2PVntxmIGI6qgC7T6Rg=) 3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 9jfSP8gh6271KQbI+jNnvgnlMdq0sgOuoX6+h4wU+tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Validity Not Before: Nov 5 07:47:32 2025 GMT Not After : Nov 12 07:47:32 2025 GMT Subject: CN=690b0114-b957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:dc:1f:11:b7:36:4e:bc:e4:02:0b:29:56: fe:10:20:1c:1a:d9:fc:a5:1a:c8:2c:37:3f:d3:4f: 5b:43:50:b7:e2:08:c7:26:32:c5:43:2f:4d:33:04: 8d:10:65:72:3f:91:02:7b:44:a2:ae:fd:54:b6:3a: c3:5b:5a:3e:e7:56:d6:ff:20:10:7a:cf:67:8e:da: 7a:a6:da:00:77:70:70:e3:49:4e:37:44:57:6a:d8: 70:1b:10:c0:a9:12:35:3d:2c:01:4c:a2:77:8b:2d: 00:43:54:ff:e5:ca:7f:97:18:37:61:27:0f:54:ce: 52:a1:9c:d0:2e:c9:03:59:f1:20:05:c4:35:09:62: ff:c9:51:c8:44:c6:d9:2a:c1:7d:84:eb:76:d8:18: da:26:6c:4d:58:f2:58:81:be:ae:2d:cf:44:21:cf: d7:e1:95:2d:9a:e9:49:97:68:32:58:46:46:b2:84: 7f:09:b6:e7:62:f3:0e:ce:43:6a:24:22:50:60:6b: 40:26:fb:0f:45:29:eb:e0:e7:0c:17:9d:59:13:5a: 38:f1:55:41:81:30:d7:20:8c:7a:28:7c:95:73:b9: d9:64:70:0b:30:a2:ed:58:64:7e:e8:92:97:39:60: ee:6f:7e:f0:e4:2d:b3:d3:53:f6:9c:fd:e4:78:2f: 72:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:C0:76:7C:46:BA:07:4F:3A:61:F0:29:CF:EF:9B:99:C9:C7:BC X509v3 Authority Key Identifier: keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:01:e4:40:0b:6f:14:f0:1f:67:99:44:f0:80:61:74:d2:45: eb:fc:86:3e:64:2c:d4:49:53:d8:f6:58:1c:1f:c9:3d:79:d7: 99:31:14:64:94:3a:09:fd:7a:03:11:4b:54:4b:ed:f4:7e:c5: f5:e6:0a:de:bc:54:94:05:df:f2:4e:40:7c:79:8a:bf:f5:0f: 32:0f:1a:c7:40:d4:5b:62:8a:7b:86:13:a9:09:98:92:06:6f: b6:1d:4e:7c:c8:f9:76:cd:65:87:24:ca:56:61:4d:a2:41:c4: c7:5a:ab:a2:b4:5f:f7:ef:4e:f6:93:51:77:36:c9:cb:6c:69: 79:f8:85:ad:21:f0:62:af:f9:3b:82:d8:95:32:97:8c:70:53: 0f:26:d9:b4:e4:fb:43:02:b9:6b:98:b2:5b:27:af:28:a8:61: 26:40:1a:54:f1:d3:34:0d:cf:21:3b:0f:77:90:b1:9d:ff:f4: 16:93:41:d6:9f:95:dc:04:01:e7:7d:08:8f:69:7b:a7:20:77: ee:bf:ab:e8:59:10:ad:98:69:72:96:57:ad:bc:b5:23:e3:b4: 7a:f5:58:fd:02:09:44:36:16:4f:dd:ee:f0:0a:53:b8:f7:2b: 17:47:4c:af:8f:27:af:ce:68:ee:4e:64:96:cc:1c:c5:6e:55: 9c:5f:0f:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMTAwQjI1MzU0NjY0NjgxREFBQjkwNUNFRkY0QTREQTc0 OUM0RUI4QTAeFw0yNTExMDUwNzQ3MzJaFw0yNTExMTIwNzQ3MzJaMBgxFjAUBgNV BAMTDTY5MGIwMTE0LWI5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW19wfEbc2TrzkAgspVv4QIBwa2fylGsgsNz/TT1tDULfiCMcmMsVDL00zBI0Q ZXI/kQJ7RKKu/VS2OsNbWj7nVtb/IBB6z2eO2nqm2gB3cHDjSU43RFdq2HAbEMCp EjU9LAFMoneLLQBDVP/lyn+XGDdhJw9UzlKhnNAuyQNZ8SAFxDUJYv/JUchExtkq wX2E63bYGNombE1Y8liBvq4tz0Qhz9fhlS2a6UmXaDJYRkayhH8Jtudi8w7OQ2ok IlBga0Am+w9FKevg5wwXnVkTWjjxVUGBMNcgjHoofJVzudlkcAswou1YZH7okpc5 YO5vfvDkLbPTU/ac/eR4L3J7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp/TAdnxG ugdPOmHwKc/vm5nJx7wwHwYDVR0jBBgwFoAUEAslNUZkaB2quQXO/0pNp0nE64ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzQ2QjAwNTA0NkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUFzbE5VWmthQjJxdVFYT18wcE5wMG5FNjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzQ2QjAwNTA0NkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIy cXVRWE9fMHBOcDBuRTY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4B5EALbxTwH2eZRPCAYXTSRev8hj5kLNRJU9j2WBwfyT1515kxFGSU Ogn9egMRS1RL7fR+xfXmCt68VJQF3/JOQHx5ir/1DzIPGsdA1FtiinuGE6kJmJIG b7YdTnzI+XbNZYckylZhTaJBxMdaq6K0X/fvTvaTUXc2yctsaXn4ha0h8GKv+TuC 2JUyl4xwUw8m2bTk+0MCuWuYslsnryioYSZAGlTx0zQNzyE7D3eQsZ3/9BaTQdaf ldwEAed9CI9pe6cgd+6/q+hZEK2YaXKWV628tSPjtHr1WP0CCUQ2Fk/d7vAKU7j3 KxdHTK+PJ6/OaO5OZJbMHMVuVZxfD1g= -----END CERTIFICATE-----Generated at Wed Nov 5 22:47:07 2025 by rpki-client