$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: PUAShUnnsqkBSH5ryc0IACxjNOBX+MPGCeCSWdHwDOI= Subject key identifier: 69:34:E3:78:02:45:47:A6:DE:B6:76:79:0D:6A:0C:0E:E0:94:B4:13 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 012A Signing time: Wed 05 Nov 2025 04:48:13 +0000 Manifest this update: Wed 05 Nov 2025 04:48:13 +0000 Manifest next update: Wed 12 Nov 2025 04:48:13 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: 59Z6R8ElBV+xJvCng1NozkDUC5nPc7W/cAhah9L/0AU=) 2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=) 4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Nov 5 04:48:13 2025 GMT Not After : Nov 12 04:48:13 2025 GMT Subject: CN=690ad70d-4791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:06:94:55:84:42:1b:74:84:56:9a:9f:68: 6e:6a:73:7e:51:a5:58:59:d5:38:8b:82:ae:ad:f8: d8:06:41:7a:e8:a3:5d:7e:13:8b:b3:fa:ca:fc:f6: 9c:99:88:81:ba:2b:b4:2d:05:e5:30:92:33:24:6d: f9:19:9f:71:bb:77:d2:f0:8f:27:5f:2c:8b:3a:a3: 25:60:cb:8f:2a:d7:5a:b1:5f:72:92:54:e7:31:83: 7d:0b:93:bb:29:a6:63:07:46:38:84:f1:e3:63:76: a8:47:ed:db:c1:6e:52:c6:45:1d:c8:46:1b:05:ee: af:35:cc:38:6c:8d:52:1f:ad:d4:30:6b:b7:26:9a: 0e:4f:49:21:db:87:8c:02:d9:f4:b0:c6:d1:11:29: 3e:b6:cb:b6:e1:fe:35:67:29:a4:a2:0c:e1:b8:43: c9:71:e8:92:c2:d1:59:df:bf:0f:83:68:5f:e0:8e: 37:8c:9e:32:42:3d:c2:8a:e4:c3:82:49:27:bb:6b: 4b:f1:44:8a:ac:d0:c2:1b:70:8b:61:ce:49:32:bc: 90:a9:3a:cc:62:18:a2:f6:0e:e4:af:ea:84:74:99: ed:10:43:86:a7:9e:c1:80:39:fc:09:96:2c:16:68: a3:cf:9d:9d:60:aa:71:88:ba:e7:d0:cf:91:41:88: f1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:E3:78:02:45:47:A6:DE:B6:76:79:0D:6A:0C:0E:E0:94:B4:13 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:69:9f:4e:01:f0:22:37:a1:7b:0c:5a:7f:d8:6d:37:d8:30: 24:f8:26:e8:e8:9b:0a:10:66:c3:7e:70:2d:80:df:2c:a4:a4: e4:fe:69:cd:1b:67:c0:b9:a3:d1:f4:9b:2c:6f:22:05:d6:18: 4e:bd:82:7c:b9:ca:42:ff:8b:0d:70:6f:fc:e9:66:ac:d2:01: b8:d7:28:46:15:61:7e:a4:96:4a:fc:b3:32:4c:2a:a9:a8:56: 19:8c:57:ac:90:74:3b:2d:ba:ab:4c:86:96:8c:f7:10:f4:5a: a7:3d:b1:37:87:47:c2:2b:15:4d:a4:72:39:2e:58:64:18:e7: 2c:42:7b:18:c1:b3:69:71:9c:1c:6b:99:23:ea:d8:48:33:be: 13:80:fc:be:68:6c:a0:3c:06:52:fa:2e:c6:fd:55:bb:c6:9a: a6:ed:ef:6f:a9:8f:76:1d:f1:91:31:57:7b:52:3b:80:87:56: 29:7e:01:f5:77:78:9e:32:e1:cc:e1:69:12:0a:a5:79:90:0a: 3e:2f:eb:13:7f:2c:25:f6:fb:0e:e9:93:6b:7a:c3:34:23:dc: 8e:87:76:40:44:8a:64:69:11:17:79:26:59:40:fa:19:b5:1f: 3b:db:4c:55:e3:36:87:85:a7:be:50:8d:88:20:2e:32:84:7b: b6:32:99:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjUxMTA1MDQ0ODEzWhcNMjUxMTEyMDQ0ODEzWjAYMRYwFAYD VQQDEw02OTBhZDcwZC00NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+oGlFWEQht0hFaan2huanN+UaVYWdU4i4KurfjYBkF66KNdfhOLs/rK/Pac mYiBuiu0LQXlMJIzJG35GZ9xu3fS8I8nXyyLOqMlYMuPKtdasV9yklTnMYN9C5O7 KaZjB0Y4hPHjY3aoR+3bwW5SxkUdyEYbBe6vNcw4bI1SH63UMGu3JpoOT0kh24eM Atn0sMbRESk+tsu24f41ZymkogzhuEPJceiSwtFZ378Pg2hf4I43jJ4yQj3CiuTD gkknu2tL8USKrNDCG3CLYc5JMryQqTrMYhii9g7kr+qEdJntEEOGp57BgDn8CZYs Fmijz52dYKpxiLrn0M+RQYjxzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk043gC RUem3rZ2eQ1qDA7glLQTMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtaZ9OAfAiN6F7DFp/2G032DAk+Cbo6JsKEGbDfnAtgN8spKTk/mnN G2fAuaPR9JssbyIF1hhOvYJ8ucpC/4sNcG/86Was0gG41yhGFWF+pJZK/LMyTCqp qFYZjFeskHQ7LbqrTIaWjPcQ9FqnPbE3h0fCKxVNpHI5LlhkGOcsQnsYwbNpcZwc a5kj6thIM74TgPy+aGygPAZS+i7G/VW7xpqm7e9vqY92HfGRMVd7UjuAh1YpfgH1 d3ieMuHM4WkSCqV5kAo+L+sTfywl9vsO6ZNresM0I9yOh3ZARIpkaREXeSZZQPoZ tR8720xV4zaHhae+UI2IIC4yhHu2Mplr -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:03 2025 by rpki-client