$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: iFxgeGDrQtbRvSceAd8ofWSqn5LDyppw7exEoauKBbA= Subject key identifier: 10:E3:29:2D:5E:8F:3A:E8:B0:41:79:01:15:0D:55:1E:47:52:21:DB Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: E5 Signing time: Mon 03 Nov 2025 05:29:17 +0000 Manifest this update: Mon 03 Nov 2025 05:29:16 +0000 Manifest next update: Mon 10 Nov 2025 05:29:16 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: 2gYgRAA5LXiV4LRGrxBIjRlCVZXpOwISf6XK4oyR80s=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Nov 3 05:29:16 2025 GMT Not After : Nov 10 05:29:16 2025 GMT Subject: CN=69083dad-d3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:c7:5c:3c:9b:2e:b7:2c:6a:fb:d0:ef:21: 7b:26:b4:e2:e1:6d:64:4d:71:0a:c2:c9:30:b8:9e: 42:d8:34:a8:e2:18:58:ad:b0:4e:eb:33:47:bd:e3: f6:4a:5e:ee:1a:37:c8:9e:87:31:bb:e7:58:ad:de: 7f:89:23:65:c5:61:e0:36:30:a4:46:6f:97:ca:90: 25:94:f6:e9:98:b1:43:e5:c8:77:f5:b4:13:2a:10: 61:97:d1:3b:41:6d:6a:1c:12:1e:f9:9b:d6:98:e3: 98:98:f1:3e:b0:79:dd:ba:27:61:87:54:ee:de:7f: bf:3c:8f:f9:0a:ee:63:41:4f:ca:a8:3c:38:2a:33: 78:bf:fd:26:a7:ba:7a:82:3d:8d:87:03:15:8e:bf: cf:16:14:4e:68:af:21:02:87:dd:50:c1:ab:28:31: f1:f9:a9:66:21:ac:70:88:2d:77:b6:33:a4:92:e2: c5:01:34:45:73:8d:e2:10:88:22:a7:93:48:ce:9e: 0d:73:33:73:08:eb:bc:5f:7a:4c:18:65:8e:1d:aa: ca:a5:74:5a:44:8b:ee:d0:0a:f3:60:a3:c6:61:f5: ed:35:83:3e:3a:e6:fd:b5:b2:5c:06:eb:5a:ce:cb: 23:7e:60:16:05:cb:58:03:03:3a:57:35:a7:3a:42: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E3:29:2D:5E:8F:3A:E8:B0:41:79:01:15:0D:55:1E:47:52:21:DB X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:07:04:1a:b9:6d:18:da:f1:10:ab:d0:cd:5b:51:83:55:d1: 16:48:4e:1c:56:d7:e0:1e:58:eb:c6:bf:e7:3d:79:ab:4b:0b: ab:d9:12:cd:04:93:e7:85:74:02:1e:ed:08:95:af:5d:97:4d: 3d:8b:27:3c:ca:61:04:c3:84:92:ff:63:3c:3c:0f:62:f0:f9: f9:88:41:82:ad:44:4a:71:84:a6:9b:3e:e2:56:49:99:2a:ef: 0b:49:7b:75:ba:8b:17:52:b9:3f:d2:ce:53:40:db:c8:d5:3b: 61:f3:8c:b5:ec:2c:44:9f:d3:89:ca:12:21:51:80:0e:8f:60: d9:16:5d:b0:f8:6c:ee:ed:9e:58:42:23:84:e9:85:02:c0:71: d1:27:1e:20:0b:47:0f:e1:87:59:66:b4:1e:3e:ee:a3:34:93: 9b:d3:2f:af:67:ef:60:dd:e6:2d:e4:50:86:9e:17:95:bf:d1: f2:34:fb:7d:70:4b:1f:49:55:81:b6:e1:4d:98:3d:5a:54:0d: 56:16:9b:ad:c0:96:dd:89:3c:f9:07:7a:48:ae:93:b8:df:5c: 72:41:44:50:e9:28:f1:f7:00:04:4e:a2:e4:ab:71:98:53:04: f2:62:7f:39:f7:8b:56:29:4f:7a:47:31:0e:74:c2:77:07:cf: 02:0b:ab:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUxMTAzMDUyOTE2WhcNMjUxMTEwMDUyOTE2WjAYMRYwFAYD VQQDEw02OTA4M2RhZC1kM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EjHXDybLrcsavvQ7yF7JrTi4W1kTXEKwskwuJ5C2DSo4hhYrbBO6zNHveP2 Sl7uGjfInocxu+dYrd5/iSNlxWHgNjCkRm+XypAllPbpmLFD5ch39bQTKhBhl9E7 QW1qHBIe+ZvWmOOYmPE+sHnduidhh1Tu3n+/PI/5Cu5jQU/KqDw4KjN4v/0mp7p6 gj2NhwMVjr/PFhROaK8hAofdUMGrKDHx+almIaxwiC13tjOkkuLFATRFc43iEIgi p5NIzp4NczNzCOu8X3pMGGWOHarKpXRaRIvu0ArzYKPGYfXtNYM+Oub9tbJcButa zssjfmAWBctYAwM6VzWnOkJp9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDjKS1e jzrosEF5ARUNVR5HUiHbMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACBwQauW0Y2vEQq9DNW1GDVdEWSE4cVtfgHljrxr/nPXmrSwur2RLN BJPnhXQCHu0Ila9dl009iyc8ymEEw4SS/2M8PA9i8Pn5iEGCrURKcYSmmz7iVkmZ Ku8LSXt1uosXUrk/0s5TQNvI1Tth84y17CxEn9OJyhIhUYAOj2DZFl2w+Gzu7Z5Y QiOE6YUCwHHRJx4gC0cP4YdZZrQePu6jNJOb0y+vZ+9g3eYt5FCGnheVv9HyNPt9 cEsfSVWBtuFNmD1aVA1WFputwJbdiTz5B3pIrpO431xyQURQ6Sjx9wAETqLkq3GY UwTyYn8594tWKU96RzEOdMJ3B88CC6t4 -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:23 2025 by rpki-client