$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: a6Hf3h3OWR5LDq+K2tOuhOaQxTrmRup0uvPCsflv5OE= Subject key identifier: 1F:E2:EF:C4:E5:EA:A5:3F:76:17:DF:FB:FD:D2:F3:7F:CF:50:5E:7A Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 055E Signing time: Tue 04 Nov 2025 16:26:56 +0000 Manifest this update: Tue 04 Nov 2025 16:26:55 +0000 Manifest next update: Tue 11 Nov 2025 16:26:55 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: 1wXZo8jzcNXpmR0MfTmBDrP2XbzxUxKmw0n8i7kvomI=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: gNw6+2AtUDlZqQnfDSX/fakH8OEL/fzgw5/WC6J/FXA=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: olSuTXg4z8rAQVRr4bLY3JWSgH6wfZWF5NWyI+YF42Y=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: PtfkQkDsmXl3jve8vW5Bkmjd/2ESa8IcHz8xM5qInPk=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: Xh3iMK0Ak0Tx1OewwcV+5j4ibHx4h2hLFwHOLVOVBKI=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: aNH379FQc3LoP81plPwndyeL8gm1j9vMgI0IfOPvVJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Nov 4 16:26:55 2025 GMT Not After : Nov 11 16:26:55 2025 GMT Subject: CN=690a294f-beb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0d:c9:dc:4a:e6:a4:df:79:f8:25:87:60:55: d3:be:d6:87:16:78:5a:a3:f6:e1:a4:32:e6:85:82: 87:54:c8:4e:2a:fe:ff:47:5d:52:3f:44:49:45:06: ee:27:d6:ed:6e:b8:7c:d9:dd:23:aa:be:8d:4b:e1: 0d:ea:8c:c4:9f:87:b6:bf:6f:d0:3b:df:1c:98:ee: e4:f1:6f:60:88:37:63:35:58:66:35:5c:f7:f4:45: c3:89:26:bc:54:df:35:aa:00:39:57:de:53:14:a7: 3e:23:ca:22:34:af:51:32:e9:aa:3b:af:94:e2:6a: fd:5e:14:c5:3b:52:a4:22:47:ba:81:ba:60:2e:16: 71:bc:3b:a4:43:d1:5c:5f:d7:e3:a5:8f:ee:a5:52: 93:b6:9c:92:ed:cf:67:38:95:07:de:c9:02:af:e8: ff:91:6a:63:bc:b5:b5:c4:26:c7:7a:1d:10:b7:cd: bd:d4:13:40:94:4a:6d:02:d4:c8:be:93:a2:b4:10: 6b:ea:f6:0a:26:de:c0:3a:6b:ad:4c:a9:8c:0f:5e: 93:45:ff:39:aa:f8:fd:61:ab:58:fd:2e:72:64:99: 65:bd:80:a8:0b:ae:8b:f3:6d:08:80:bc:27:b7:bf: 38:c6:08:4b:14:2b:b5:70:51:53:cb:17:69:5f:bd: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E2:EF:C4:E5:EA:A5:3F:76:17:DF:FB:FD:D2:F3:7F:CF:50:5E:7A X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ee:bd:e4:1b:5e:89:b6:62:5b:d3:56:7d:39:77:5d:af:a0: f5:b1:44:72:f5:dd:30:dd:99:1a:12:be:66:d0:b1:a7:fa:ab: ca:93:52:3b:cf:61:da:51:b5:a4:92:85:8b:9d:98:b6:5f:de: 7a:c7:ce:c0:0e:bf:c1:2c:6e:eb:6c:c9:6a:f0:ef:22:13:e3: b5:5b:f1:d0:05:4d:d8:0d:2a:f4:97:6e:eb:b1:78:e3:bc:61: 32:fe:8d:f6:66:0e:c6:7a:eb:09:ea:5d:f1:e6:63:e8:e6:84: 34:28:b7:31:7d:2d:7c:07:01:9f:37:ec:7c:2b:63:ef:38:d7: c5:21:f0:88:72:9e:bc:d3:9d:0d:ae:d9:4c:c7:03:f6:1f:9a: ae:f4:93:6d:b4:ff:ae:6c:a2:aa:09:fe:a0:f6:23:49:7b:d0: 9d:c0:ed:39:ff:13:1e:24:d3:39:e8:8b:5b:19:df:ea:36:32: 68:73:71:7c:01:5d:fc:d9:62:50:f4:5a:f3:a9:e5:ea:f0:12: f6:93:cd:1c:cb:f7:44:2e:00:d9:3c:25:c2:cd:64:f9:2d:61: b3:f9:44:b9:5b:f8:49:87:f1:91:90:4d:93:0c:7b:cc:cd:6e: 29:d8:26:4a:22:21:be:43:34:cb:ed:a2:78:c6:1f:48:3b:e1: 04:3f:b5:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUxMTA0MTYyNjU1WhcNMjUxMTExMTYyNjU1WjAYMRYwFAYD VQQDEw02OTBhMjk0Zi1iZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7g3J3ErmpN95+CWHYFXTvtaHFnhao/bhpDLmhYKHVMhOKv7/R11SP0RJRQbu J9btbrh82d0jqr6NS+EN6ozEn4e2v2/QO98cmO7k8W9giDdjNVhmNVz39EXDiSa8 VN81qgA5V95TFKc+I8oiNK9RMumqO6+U4mr9XhTFO1KkIke6gbpgLhZxvDukQ9Fc X9fjpY/upVKTtpyS7c9nOJUH3skCr+j/kWpjvLW1xCbHeh0Qt8291BNAlEptAtTI vpOitBBr6vYKJt7AOmutTKmMD16TRf85qvj9YatY/S5yZJllvYCoC66L820IgLwn t784xghLFCu1cFFTyxdpX702ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/i78Tl 6qU/dhff+/3S83/PUF56MB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr7r3kG16JtmJb01Z9OXddr6D1sURy9d0w3ZkaEr5m0LGn+qvKk1I7 z2HaUbWkkoWLnZi2X956x87ADr/BLG7rbMlq8O8iE+O1W/HQBU3YDSr0l27rsXjj vGEy/o32Zg7GeusJ6l3x5mPo5oQ0KLcxfS18BwGfN+x8K2PvONfFIfCIcp68050N rtlMxwP2H5qu9JNttP+ubKKqCf6g9iNJe9CdwO05/xMeJNM56ItbGd/qNjJoc3F8 AV382WJQ9FrzqeXq8BL2k80cy/dELgDZPCXCzWT5LWGz+US5W/hJh/GRkE2TDHvM zW4p2CZKIiG+QzTL7aJ4xh9IO+EEP7UA -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:51 2025 by rpki-client