$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: o9PufNa9HZBgxS+buOetvyY8HM7X8RPHaWVFiIjeJRY= Subject key identifier: 38:04:45:36:2E:42:96:49:5C:F4:3A:3B:93:C9:DC:39:DD:ED:CF:BA Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 04D4 Signing time: Tue 04 Nov 2025 23:55:48 +0000 Manifest this update: Tue 04 Nov 2025 23:55:47 +0000 Manifest next update: Tue 11 Nov 2025 23:55:47 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: 5cndBoaeXJ8UPLgh3hacZedT79bentyci6Fg/iMtAkw=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Nov 4 23:55:47 2025 GMT Not After : Nov 11 23:55:47 2025 GMT Subject: CN=690a9284-95ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:38:15:08:32:10:2b:fc:fa:05:2a:dc:c3: d4:b2:16:c1:d2:b7:32:0f:8d:30:0e:08:5a:b0:1c: 8c:67:9b:92:a8:dd:db:cf:4a:11:13:00:ac:25:d4: b8:dd:e4:60:5d:5a:cf:a8:f3:ad:63:3e:ff:ae:08: 4d:10:9b:08:90:28:2f:76:22:47:97:81:6f:a0:23: 4f:12:6d:40:be:68:8b:c6:a9:0f:eb:ee:22:5c:5b: 1f:4a:5b:49:31:47:2a:97:29:ea:79:69:bd:d4:bb: bb:fc:20:2e:35:aa:32:72:31:c5:b2:6c:b8:2f:32: 45:b3:96:07:24:bb:1c:b8:4b:6c:14:0c:f3:9c:51: ee:89:41:c4:4d:d5:01:a9:9c:6c:ad:0b:a3:7b:9d: 01:8c:a0:bd:22:e3:e3:65:7e:41:95:44:35:b8:69: 47:be:b4:f4:5e:16:cb:6f:4a:4f:8b:90:a5:77:58: 3b:42:1a:9e:08:30:10:b6:b0:db:93:32:d2:da:8c: 14:47:6d:35:ba:8b:2b:9a:d1:3a:d7:bf:a7:9d:1e: a1:41:b9:db:ad:11:2f:ed:3c:07:77:b5:67:e7:26: ad:d9:ec:bb:73:86:24:c1:4c:a2:2f:0b:81:66:65: ce:64:ad:52:ab:7f:4d:35:0b:29:01:0f:1b:e7:53: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:45:36:2E:42:96:49:5C:F4:3A:3B:93:C9:DC:39:DD:ED:CF:BA X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:44:05:36:6f:78:b9:18:3d:33:59:34:ff:b7:38:f1:12:aa: e0:93:31:c8:85:81:0a:6f:7c:8c:1a:6f:dc:cc:a0:80:bd:b4: 34:ea:a2:61:33:8a:c1:f8:96:6c:cc:50:0b:de:ed:95:c4:72: 2d:59:34:08:ac:b1:39:e3:27:f9:e8:3b:c0:d5:bf:7c:df:51: 0c:95:64:0f:7d:c1:b0:3c:71:94:be:7a:f4:c7:1d:02:17:37: 1e:bf:fc:c5:14:af:34:0b:7c:38:cb:df:e2:4f:85:eb:fb:d2: 23:17:ec:e8:f9:04:3c:66:f6:35:cf:fb:b3:20:24:5d:95:68: f9:0b:ab:ec:90:cb:63:05:56:9b:26:9f:99:ff:f0:b7:63:2d: d0:12:94:2b:2d:a5:ba:cb:d8:f2:21:8c:ff:38:51:a8:c1:e4: de:03:48:a4:88:5d:ea:a0:49:2a:d9:ae:59:72:09:95:23:6c: 32:13:82:0a:86:5d:9a:51:f1:4e:af:94:39:fe:d0:96:50:87: f7:f5:35:4f:54:16:c2:79:78:41:dd:b9:82:a1:86:f6:04:d0: b5:c5:7e:7e:53:13:d5:34:1a:eb:eb:ee:5c:aa:af:26:b5:11: 57:b0:00:c9:cc:a5:0e:f7:07:ab:a6:ed:04:56:f4:42:d6:3f: 0a:41:45:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUxMTA0MjM1NTQ3WhcNMjUxMTExMjM1NTQ3WjAYMRYwFAYD VQQDEw02OTBhOTI4NC05NWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTs4FQgyECv8+gUq3MPUshbB0rcyD40wDghasByMZ5uSqN3bz0oREwCsJdS4 3eRgXVrPqPOtYz7/rghNEJsIkCgvdiJHl4FvoCNPEm1AvmiLxqkP6+4iXFsfSltJ MUcqlynqeWm91Lu7/CAuNaoycjHFsmy4LzJFs5YHJLscuEtsFAzznFHuiUHETdUB qZxsrQuje50BjKC9IuPjZX5BlUQ1uGlHvrT0XhbLb0pPi5Cld1g7QhqeCDAQtrDb kzLS2owUR201uosrmtE617+nnR6hQbnbrREv7TwHd7Vn5yat2ey7c4YkwUyiLwuB ZmXOZK1Sq39NNQspAQ8b51M3sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgERTYu QpZJXPQ6O5PJ3Dnd7c+6MB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTRAU2b3i5GD0zWTT/tzjxEqrgkzHIhYEKb3yMGm/czKCAvbQ06qJh M4rB+JZszFAL3u2VxHItWTQIrLE54yf56DvA1b9831EMlWQPfcGwPHGUvnr0xx0C Fzcev/zFFK80C3w4y9/iT4Xr+9IjF+zo+QQ8ZvY1z/uzICRdlWj5C6vskMtjBVab Jp+Z//C3Yy3QEpQrLaW6y9jyIYz/OFGoweTeA0ikiF3qoEkq2a5ZcgmVI2wyE4IK hl2aUfFOr5Q5/tCWUIf39TVPVBbCeXhB3bmCoYb2BNC1xX5+UxPVNBrr6+5cqq8m tRFXsADJzKUO9werpu0EVvRC1j8KQUUm -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:21 2025 by rpki-client