$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: +0at4pJq0KaCxZzHO1M2PcXLcMomYaHmziOyPTBRY/4= Subject key identifier: 9A:81:98:B4:89:CD:29:BB:F0:B9:FF:0E:78:50:6F:AF:CB:22:BC:39 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 018B Signing time: Mon 03 Nov 2025 03:36:05 +0000 Manifest this update: Mon 03 Nov 2025 03:36:04 +0000 Manifest next update: Mon 10 Nov 2025 03:36:04 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: y49pdMnrCvPS5/WSoLqyiDF+7/mI0n7Z4g2fGZeFnbw=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: LxLPbHiBrc2q8AKSiQDO6oDP+86BoYqMLvI4jJ40wTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Nov 3 03:36:04 2025 GMT Not After : Nov 10 03:36:04 2025 GMT Subject: CN=69082324-a5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:f9:3d:27:eb:a1:9c:14:45:9c:c6:a6:60: 8b:21:32:d2:a3:4c:cd:28:cb:2e:51:3b:ed:61:24: 3a:c6:1a:df:3f:9b:33:e8:7f:82:5c:08:4f:34:f6: ed:54:b6:9d:74:77:de:1f:25:6a:25:fb:a3:b9:2c: 3e:a3:8c:96:f5:ee:dd:b3:1b:f9:5c:75:d3:88:41: 67:12:fd:4f:43:3a:19:fc:70:81:f1:cf:ae:9c:f1: ae:d4:4a:79:7b:ed:02:82:82:f7:f2:81:94:12:56: f4:86:54:8c:ce:7c:37:a1:47:4e:6c:ec:cf:48:78: 3f:dd:f2:80:96:b9:24:e4:b2:c5:52:13:f6:b7:c7: 26:ac:db:ca:b6:85:c1:c8:9f:3c:cf:5f:7f:be:20: 43:bd:5a:49:bd:47:b7:6d:9e:f1:19:ae:2a:35:8b: ba:fc:b7:57:00:df:1f:c1:21:e4:13:a7:09:2e:e2: c9:35:24:45:ec:59:dd:0c:62:50:9c:dc:6d:90:53: 09:78:d8:79:05:54:70:75:de:b6:6c:fd:a3:28:8e: 4e:69:77:9e:f4:c7:c0:9f:4b:df:34:9d:39:90:69: d7:76:b1:73:35:3e:28:3f:16:d9:88:b2:37:ff:99: 00:7e:8e:b8:ee:be:0b:c4:3a:e1:73:0d:e3:53:e9: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:81:98:B4:89:CD:29:BB:F0:B9:FF:0E:78:50:6F:AF:CB:22:BC:39 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:77:94:28:cc:40:2a:8d:e6:87:ac:b0:00:d7:69:fe:ec:ab: 28:21:51:a9:c0:03:d0:77:57:05:18:4b:4c:f9:4a:02:6a:93: bc:d2:b0:5e:2e:f9:01:41:a5:be:d8:45:46:cd:31:95:f9:94: 09:de:49:d9:b7:a7:76:c9:31:f2:34:d1:c1:76:59:5b:d3:2b: b9:61:bf:a5:0c:25:a7:f3:79:aa:84:26:4a:07:df:a7:1e:ce: d1:ca:67:00:f8:87:8a:a1:40:ca:81:06:22:8b:1b:42:56:7e: aa:0a:77:0a:ee:2e:23:86:60:99:7c:f7:38:1a:b5:60:7f:27: 31:c0:0d:97:b7:08:5b:e9:32:8a:c1:b6:d9:8b:8c:9f:1d:86: 53:24:92:b3:36:84:e6:1e:68:5c:4a:4e:b2:bb:ff:18:cb:7a: 7a:bc:15:67:5b:ff:b8:94:7b:0a:66:2f:e1:4f:6b:36:7a:fb: b1:37:17:7c:3a:be:2e:26:19:36:0b:79:5f:71:1f:b8:23:82: e2:20:f5:cc:d5:52:ab:ee:a4:bb:ed:62:76:c3:d1:6b:ce:1d: dc:18:af:2b:1a:d2:5c:f8:4f:df:22:cb:dd:b2:d9:43:2f:10: e9:92:bb:ba:66:b5:d7:42:de:92:58:1c:08:44:c7:0c:46:c3: f5:db:2c:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUxMTAzMDMzNjA0WhcNMjUxMTEwMDMzNjA0WjAYMRYwFAYD VQQDEw02OTA4MjMyNC1hNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2//5PSfroZwURZzGpmCLITLSo0zNKMsuUTvtYSQ6xhrfP5sz6H+CXAhPNPbt VLaddHfeHyVqJfujuSw+o4yW9e7dsxv5XHXTiEFnEv1PQzoZ/HCB8c+unPGu1Ep5 e+0CgoL38oGUElb0hlSMznw3oUdObOzPSHg/3fKAlrkk5LLFUhP2t8cmrNvKtoXB yJ88z19/viBDvVpJvUe3bZ7xGa4qNYu6/LdXAN8fwSHkE6cJLuLJNSRF7FndDGJQ nNxtkFMJeNh5BVRwdd62bP2jKI5OaXee9MfAn0vfNJ05kGnXdrFzNT4oPxbZiLI3 /5kAfo647r4LxDrhcw3jU+msbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqBmLSJ zSm78Ln/DnhQb6/LIrw5MB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBId5QozEAqjeaHrLAA12n+7KsoIVGpwAPQd1cFGEtM+UoCapO80rBe LvkBQaW+2EVGzTGV+ZQJ3knZt6d2yTHyNNHBdllb0yu5Yb+lDCWn83mqhCZKB9+n Hs7RymcA+IeKoUDKgQYiixtCVn6qCncK7i4jhmCZfPc4GrVgfycxwA2Xtwhb6TKK wbbZi4yfHYZTJJKzNoTmHmhcSk6yu/8Yy3p6vBVnW/+4lHsKZi/hT2s2evuxNxd8 Or4uJhk2C3lfcR+4I4LiIPXM1VKr7qS77WJ2w9Frzh3cGK8rGtJc+E/fIsvdstlD LxDpkru6ZrXXQt6SWBwIRMcMRsP12yzr -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:44 2025 by rpki-client