$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: 8LNfYW1GF+5F96IQnfAUI0t6F0sdpB2jSloLdRcmjL4= Subject key identifier: 65:5C:F9:BE:B9:2C:7A:9A:F2:05:96:5C:F9:26:03:13:03:B8:91:7E Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 117B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0D27 Signing time: Mon 03 Nov 2025 09:02:57 +0000 Manifest this update: Mon 03 Nov 2025 09:02:56 +0000 Manifest next update: Mon 10 Nov 2025 09:02:56 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: 7E5TDIvhXfk6pVSabywsrM67wGgcyVQjrcxZfVEa5U4=) 2: 3A371ADC6EBE11F085F17D3AC4F9AE02.roa (hash: veOiHdvdwgpQr7AKk3QyFdwGK1WVTTNGUXPyB5VlwxM=) 3: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: NAdbZTtzlwtewbjTfuMORoVz4S6lpr350iCxdpAhbLc=) 4: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: LcfL6WlPDAVnfVe8FVQ0PTDxHLr1cQFF1C/EotpyU7g=) 5: A173B894112711F0845DF16FC4F9AE02.roa (hash: 3CENOgG8lzvvc7h19xhkGA0RtKWssC6nuSD3IRmHv+U=) 6: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4nldf+8SF0UXyvc5ZFdPynmdfFfU94WXlTR6JoprTg=) 7: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: F+kwWb5yikRsOK2zoJFU1MWIPMWRYvJswNdoIKQaUNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 09:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4475 (0x117b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Nov 3 09:02:56 2025 GMT Not After : Nov 10 09:02:56 2025 GMT Subject: CN=69086fc0-a382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:63:43:fc:7d:04:cc:26:c4:b4:e0:b3:a8: f7:70:99:be:70:d6:4b:ab:43:6c:25:da:8b:53:c4: 89:c6:be:c3:62:bf:0a:13:a5:d2:a9:1d:6b:ff:e3: 7c:e7:b4:71:ce:96:26:e5:f4:e0:0a:c7:df:cd:1f: 74:75:8d:0e:28:8e:fd:0c:d6:ed:aa:57:dd:47:ec: 85:71:38:34:a2:8f:66:31:4c:68:7e:b0:c3:48:e0: 50:64:08:e8:65:79:eb:fb:b8:f5:9b:20:51:3a:bf: 19:9b:16:90:8b:a6:1b:50:11:33:51:76:a1:1a:b0: a8:05:58:3b:08:7b:4c:76:3f:99:12:b2:38:57:62: 38:3a:c0:ec:df:82:6c:4c:e1:ae:56:0c:ba:ce:1d: ec:47:fc:25:e5:c2:11:4a:52:32:7f:c0:26:a3:64: f9:1a:98:ab:c3:61:60:6c:0a:c2:06:41:0d:c1:75: 7f:4d:e5:7f:30:43:65:f5:91:cb:e0:32:d2:a7:3a: 28:41:5e:f7:0a:c2:a9:91:89:5e:b8:97:3c:d4:4c: e9:94:ab:ea:76:ac:e4:a1:7b:b8:12:b3:a5:ec:72: c4:f6:09:46:51:c0:80:a0:d4:5c:46:0e:bf:f7:0a: f8:de:6d:0d:f5:f9:f7:11:a8:26:ba:b6:30:bd:97: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5C:F9:BE:B9:2C:7A:9A:F2:05:96:5C:F9:26:03:13:03:B8:91:7E X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:32:b6:70:1a:04:e5:7e:2b:ab:83:27:56:92:2e:24:56:da: 89:12:e4:40:55:2e:8f:32:df:96:0b:2f:1d:3a:9f:95:8e:3f: ee:9f:d4:fc:61:4c:60:ef:89:48:97:65:97:4e:4c:9c:f2:e5: 46:14:a6:38:62:34:62:fa:07:e0:35:10:fb:ac:6f:21:d6:c4: 76:b3:4a:7a:45:8e:36:dd:c4:48:41:18:50:fa:c4:e8:f2:3b: c7:64:47:f2:4f:58:f8:82:8e:4a:61:18:66:1a:28:cc:88:bf: f4:c7:32:cc:4b:67:8d:46:5d:23:29:60:9e:e9:60:48:ea:6a: cf:a6:8d:b3:93:84:9a:b8:e5:fe:ba:4c:33:92:7b:d0:43:a5: 60:3b:a0:90:55:06:1f:5f:75:da:2b:07:d1:95:ee:e8:b2:63: 32:62:0c:47:d4:49:8a:f4:86:1a:6a:f3:8a:91:d1:ac:d4:be: 8e:17:c2:a6:37:11:c2:69:d5:9d:93:83:86:07:30:45:99:65: 18:0e:57:0b:91:d0:e1:1a:f4:48:32:4b:b6:19:3a:f9:24:35: 9e:28:8c:15:d7:b8:fd:03:ea:0f:a3:e0:c3:b1:75:c8:12:8d: 2c:7a:a1:d5:e6:94:57:1f:8a:a1:9d:7e:c3:53:e3:ac:a0:01: 37:40:9c:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUxMTAzMDkwMjU2WhcNMjUxMTEwMDkwMjU2WjAYMRYwFAYD VQQDEw02OTA4NmZjMC1hMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorNjQ/x9BMwmxLTgs6j3cJm+cNZLq0NsJdqLU8SJxr7DYr8KE6XSqR1r/+N8 57RxzpYm5fTgCsffzR90dY0OKI79DNbtqlfdR+yFcTg0oo9mMUxofrDDSOBQZAjo ZXnr+7j1myBROr8ZmxaQi6YbUBEzUXahGrCoBVg7CHtMdj+ZErI4V2I4OsDs34Js TOGuVgy6zh3sR/wl5cIRSlIyf8Amo2T5Gpirw2FgbArCBkENwXV/TeV/MENl9ZHL 4DLSpzooQV73CsKpkYleuJc81EzplKvqdqzkoXu4ErOl7HLE9glGUcCAoNRcRg6/ 9wr43m0N9fn3EagmurYwvZeU/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVc+b65 LHqa8gWWXPkmAxMDuJF+MB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiMrZwGgTlfiurgydWki4kVtqJEuRAVS6PMt+WCy8dOp+Vjj/un9T8 YUxg74lIl2WXTkyc8uVGFKY4YjRi+gfgNRD7rG8h1sR2s0p6RY423cRIQRhQ+sTo 8jvHZEfyT1j4go5KYRhmGijMiL/0xzLMS2eNRl0jKWCe6WBI6mrPpo2zk4SauOX+ ukwzknvQQ6VgO6CQVQYfX3XaKwfRle7osmMyYgxH1EmK9IYaavOKkdGs1L6OF8Km NxHCadWdk4OGBzBFmWUYDlcLkdDhGvRIMku2GTr5JDWeKIwV17j9A+oPo+DDsXXI Eo0seqHV5pRXH4qhnX7DU+OsoAE3QJw7 -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:59 2025 by rpki-client