$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json) Hash identifier: hhER32eJ/xTGXbOBkISUv1C0klB1ea1Hct3x6kZeWss= Subject key identifier: F7:56:92:9D:2C:C8:FE:1E:2E:08:3E:6F:76:08:A9:33:30:11:4A:04 Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Certificate serial: 0A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft Manifest number: 0A2C Signing time: Tue 04 Nov 2025 19:51:38 +0000 Manifest this update: Tue 04 Nov 2025 19:51:38 +0000 Manifest next update: Tue 11 Nov 2025 19:51:38 +0000 Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: mlmlHNxsyPHacE2sHamNVu54Ad1BShFJ0iRnamVr25U=) 2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: h8TCOQAYkMWzOV4xPaOkVqyIiRzREyWEnJXkzl12ups=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Validity Not Before: Nov 4 19:51:38 2025 GMT Not After : Nov 11 19:51:38 2025 GMT Subject: CN=690a594a-69ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:b5:27:50:67:5b:82:62:58:c2:05:19:41: dc:0c:fc:e6:62:cc:9f:67:4f:9a:62:ab:9a:86:9b: 0f:ac:16:08:fa:97:63:c4:32:7a:93:7e:8f:cb:0f: 12:b4:94:4a:dd:45:7a:e9:9e:17:7c:49:a7:dd:f7: b8:0f:d9:fe:31:d5:cf:2c:d5:3d:fc:29:44:0b:77: cd:65:88:a1:bf:69:18:11:0c:ac:a0:71:94:d4:40: 86:e7:4b:bc:d9:0a:e1:25:4f:ad:a5:df:a0:c2:5b: f6:b7:83:6a:43:9c:b8:76:aa:dd:cf:85:10:66:ab: 13:4a:46:f1:43:be:2b:5d:fa:9e:3c:70:01:2f:4d: 17:be:50:64:cb:89:7d:4f:03:64:99:2c:5a:e8:eb: c6:da:1d:2c:7d:d9:04:42:f2:52:ea:0a:b3:f1:8d: 6b:a2:78:35:72:33:cc:00:9a:18:54:aa:52:4e:9b: b4:47:4b:28:05:89:aa:03:9e:1d:2c:12:e0:a1:4f: a9:ce:8c:d1:05:bc:94:ec:e0:4c:fa:8b:3d:51:99: c9:57:3a:07:17:01:88:bc:ed:62:4b:59:9a:46:1f: 41:3f:45:85:40:42:6c:30:f0:96:5f:61:70:bf:cd: eb:d8:f1:bb:e2:8b:00:d2:f6:19:b4:3c:ee:c4:99: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:56:92:9D:2C:C8:FE:1E:2E:08:3E:6F:76:08:A9:33:30:11:4A:04 X509v3 Authority Key Identifier: keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:44:dd:7d:6d:32:25:75:55:d5:0b:e4:cd:b3:6f:8e:b4:40: 0b:48:97:8c:6b:06:c6:8f:fe:67:cb:19:c0:de:da:7b:13:12: 9b:e6:f4:28:41:4a:6f:c3:e0:52:fc:49:bb:23:42:f4:f4:17: 29:6b:96:0a:6f:63:a6:d7:21:93:69:ee:a3:de:5d:f2:21:77: fa:3d:fd:d0:43:6c:86:09:bb:5e:24:40:ca:1e:b2:61:82:65: 03:af:c4:61:11:06:af:47:9c:7d:07:38:14:53:95:62:3c:e5: 64:81:6d:cf:b6:a6:ca:43:37:d4:b1:a4:1a:a7:ae:a3:df:22: a2:70:3d:f5:44:30:43:e4:27:0d:8b:86:ba:24:3e:78:70:82: 23:aa:d7:b2:e6:6a:14:63:95:b7:71:8a:b5:f1:bb:b0:e0:5a: bd:28:4f:25:38:4f:20:81:35:fb:ab:2e:a7:b1:5d:fc:d6:f3: 5b:48:bd:c1:ca:b6:85:e7:79:40:68:82:26:ed:18:24:d0:41: c7:86:37:cc:76:0d:e6:0e:5b:4a:3f:d2:8c:65:53:4a:8d:c6: 84:70:68:9e:4c:0a:f3:51:bc:06:b1:bd:f1:08:30:d0:11:5f: de:f6:49:ba:cc:77:ab:67:a4:37:88:89:af:a5:df:03:df:ea: 8b:49:0a:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDEyNTYwMThGRTZFNTM4QzQwMEY2M0ZDN0UxMjFDM0E3 MDFGMkRFQTkwHhcNMjUxMTA0MTk1MTM4WhcNMjUxMTExMTk1MTM4WjAYMRYwFAYD VQQDEw02OTBhNTk0YS02OWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgm1J1BnW4JiWMIFGUHcDPzmYsyfZ0+aYquahpsPrBYI+pdjxDJ6k36Pyw8S tJRK3UV66Z4XfEmn3fe4D9n+MdXPLNU9/ClEC3fNZYihv2kYEQysoHGU1ECG50u8 2QrhJU+tpd+gwlv2t4NqQ5y4dqrdz4UQZqsTSkbxQ74rXfqePHABL00XvlBky4l9 TwNkmSxa6OvG2h0sfdkEQvJS6gqz8Y1rong1cjPMAJoYVKpSTpu0R0soBYmqA54d LBLgoU+pzozRBbyU7OBM+os9UZnJVzoHFwGIvO1iS1maRh9BP0WFQEJsMPCWX2Fw v83r2PG74osA0vYZtDzuxJlBpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdWkp0s yP4eLgg+b3YIqTMwEUoEMB8GA1UdIwQYMBaAFBJWAY/m5TjEAPY/x+Ehw6cB8t6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81QzhDQjRENjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9NUUE5al9INFNIRHB3SHkz cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VsWUJqLWJsT01RQTlqX0g0U0hEcHdIeTNxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81QzhDQjRENjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9N UUE5al9INFNIRHB3SHkzcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbRN19bTIldVXVC+TNs2+OtEALSJeMawbGj/5nyxnA3tp7ExKb5vQo QUpvw+BS/Em7I0L09Bcpa5YKb2Om1yGTae6j3l3yIXf6Pf3QQ2yGCbteJEDKHrJh gmUDr8RhEQavR5x9BzgUU5ViPOVkgW3PtqbKQzfUsaQap66j3yKicD31RDBD5CcN i4a6JD54cIIjqtey5moUY5W3cYq18buw4Fq9KE8lOE8ggTX7qy6nsV381vNbSL3B yraF53lAaIIm7Rgk0EHHhjfMdg3mDltKP9KMZVNKjcaEcGieTArzUbwGsb3xCDDQ EV/e9km6zHerZ6Q3iImvpd8D3+qLSQpf -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:31 2025 by rpki-client