$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: BWA0rWdWD8Q2Riv1+blVJSX6yJMUrP76ySuC+iKnV94= Subject key identifier: 95:33:EF:1A:F9:79:5B:D3:AE:98:E6:DE:4D:6B:45:88:B1:A7:8E:F9 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 97 Signing time: Tue 04 Nov 2025 14:39:58 +0000 Manifest this update: Tue 04 Nov 2025 14:39:58 +0000 Manifest next update: Tue 11 Nov 2025 14:39:58 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: HJb38bSadBKzWk7qzG398vSh9Yj7XLRioNac/IuThCo=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Nov 4 14:39:58 2025 GMT Not After : Nov 11 14:39:58 2025 GMT Subject: CN=690a103e-39fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:62:e6:e8:ff:29:40:93:c8:cd:64:f3:75: 74:35:4c:95:f4:27:99:1a:d9:80:4c:42:c5:36:da: 1c:2c:49:54:c3:5a:fb:fc:47:78:d8:fa:21:8f:63: ed:9b:3b:0f:22:2c:9c:11:89:40:16:3c:98:cc:ba: a3:87:fc:b3:c1:10:a4:68:b0:5a:dc:72:49:d4:f4: 3f:b3:fc:21:f8:7b:72:cb:c9:9d:f3:0f:7b:65:85: c3:c1:a0:6a:2b:d6:fe:c0:d2:98:2a:9c:53:86:9b: ee:bb:e0:5a:46:e7:40:f0:2e:51:ac:f7:ab:7a:66: 36:3c:87:62:7c:ba:a1:38:d9:e5:9b:f1:9a:ff:ff: 8a:46:72:3d:13:61:a3:99:57:69:87:04:d3:6e:78: 35:ac:24:87:5f:33:4a:ac:2b:54:6d:df:3d:21:2d: 41:7c:e0:9c:af:64:e9:e9:c4:15:e8:e4:8b:9b:56: c9:f1:61:7d:40:19:da:0a:44:92:f0:22:97:2f:ee: 8c:1b:07:d1:1a:63:20:34:55:9d:7b:89:1a:51:c6: 18:70:a4:a9:3c:18:60:d4:62:90:88:5a:f7:0b:98: 01:74:62:dd:2a:6f:dc:de:b4:7e:ce:bb:fd:51:ff: 16:88:4e:44:7e:42:9f:ec:99:eb:96:06:7a:82:0f: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:33:EF:1A:F9:79:5B:D3:AE:98:E6:DE:4D:6B:45:88:B1:A7:8E:F9 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:56:58:91:d1:bd:8b:03:66:34:ce:79:8c:32:1b:8d:4f:f9: b0:3c:da:27:da:c7:56:d9:38:46:7e:39:d6:ff:81:7a:a3:38: 1a:70:25:98:f4:fd:4f:c2:06:3e:f8:12:86:de:47:2d:7a:9e: be:43:6f:35:0f:50:8d:d3:62:58:0d:aa:15:71:27:25:b0:83: a1:a8:bf:28:d8:3e:5f:d6:35:cb:d7:ec:fd:fc:77:20:7b:bb: dc:b0:77:cb:eb:d0:d2:9a:4e:7b:6f:98:aa:43:fb:88:1b:92: e9:af:b9:1b:12:e6:a9:e5:e3:88:db:23:80:10:78:59:dc:80: 02:f8:8f:f9:06:66:29:5c:88:0a:98:0d:0b:06:99:3e:e2:b9: 23:df:11:1b:9a:1b:90:e7:07:fb:4b:40:d5:3f:9d:93:3a:ea: 17:94:e0:9d:9c:d0:94:8c:43:31:64:9d:ab:a9:3c:d1:65:5f: e7:1b:9e:f3:42:3a:d4:f3:cc:24:90:ac:aa:79:03:d0:5a:d8: 27:6e:0a:39:6d:4b:b5:e1:d3:5b:68:63:0c:cd:67:e3:36:98: e4:cc:85:1d:83:b1:42:dd:02:02:9b:09:40:ea:b9:fe:ca:8a: 7f:9f:56:1e:0d:30:f6:d1:e2:27:b1:88:ee:ae:b3:9c:ef:a3: 3b:54:92:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjUxMTA0MTQzOTU4WhcNMjUxMTExMTQzOTU4WjAYMRYwFAYD VQQDEw02OTBhMTAzZS0zOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykRi5uj/KUCTyM1k83V0NUyV9CeZGtmATELFNtocLElUw1r7/Ed42Pohj2Pt mzsPIiycEYlAFjyYzLqjh/yzwRCkaLBa3HJJ1PQ/s/wh+Htyy8md8w97ZYXDwaBq K9b+wNKYKpxThpvuu+BaRudA8C5RrPeremY2PIdifLqhONnlm/Ga//+KRnI9E2Gj mVdphwTTbng1rCSHXzNKrCtUbd89IS1BfOCcr2Tp6cQV6OSLm1bJ8WF9QBnaCkSS 8CKXL+6MGwfRGmMgNFWde4kaUcYYcKSpPBhg1GKQiFr3C5gBdGLdKm/c3rR+zrv9 Uf8WiE5EfkKf7JnrlgZ6gg+w/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUz7xr5 eVvTrpjm3k1rRYixp475MB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRz cnlzT2E3d3hOZFRyaEFlQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKVliR0b2LA2Y0znmMMhuNT/mwPNon2sdW2ThGfjnW/4F6ozgacCWY 9P1PwgY++BKG3kctep6+Q281D1CN02JYDaoVcSclsIOhqL8o2D5f1jXL1+z9/Hcg e7vcsHfL69DSmk57b5iqQ/uIG5Lpr7kbEuap5eOI2yOAEHhZ3IAC+I/5BmYpXIgK mA0LBpk+4rkj3xEbmhuQ5wf7S0DVP52TOuoXlOCdnNCUjEMxZJ2rqTzRZV/nG57z QjrU88wkkKyqeQPQWtgnbgo5bUu14dNbaGMMzWfjNpjkzIUdg7FC3QICmwlA6rn+ yop/n1YeDTD20eInsYjurrOc76M7VJIk -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:19 2025 by rpki-client