$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: JdzZlYhJStAl6EDMX9ej+narZXO2b60sSsMVfi/ql58= Subject key identifier: FD:8D:31:30:87:C3:31:EB:71:6F:7E:DF:26:5C:28:4E:E6:B5:24:27 Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: E2 Signing time: Mon 03 Nov 2025 05:29:14 +0000 Manifest this update: Mon 03 Nov 2025 05:29:14 +0000 Manifest next update: Mon 10 Nov 2025 05:29:14 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: kn+fpKmku2GVvecD0F+rFpEmrLwQJtjop56OpmDd/4s=) 2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Nov 3 05:29:14 2025 GMT Not After : Nov 10 05:29:14 2025 GMT Subject: CN=69083daa-ad45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:65:1f:96:49:76:01:80:eb:f2:7a:dc:2c:a1: 00:e6:b7:82:b8:fe:03:cc:72:95:4c:49:ac:7b:f8: 6c:15:29:a1:7a:c2:38:01:81:70:1b:fd:14:f8:e4: 55:9c:c6:9b:76:25:f9:54:54:d4:63:8b:fd:bd:82: 34:32:42:49:d4:b5:27:9e:2e:15:77:2d:dc:9e:54: 83:dd:5b:e5:57:1a:3c:29:62:03:c3:1a:d5:81:43: 68:cf:40:e5:7e:0f:d2:dc:9a:2c:35:aa:7c:f8:a3: 1b:b4:eb:1c:a3:3b:d9:22:56:74:e2:c0:89:c3:42: 3c:bf:04:d0:3c:4a:51:44:18:67:41:b6:d4:dc:ab: 84:cb:b7:1b:99:05:48:f0:3d:df:cc:ce:e1:ab:3a: 9b:0f:69:3c:27:4e:b9:fc:ae:3c:e9:34:b8:df:61: 21:fd:fa:ed:69:3c:6a:da:d2:06:c4:60:dd:c1:88: 1e:c7:b5:52:68:c2:31:df:d5:ed:4c:03:91:bc:29: ef:37:b2:cc:80:2b:0b:ae:85:93:ea:a2:54:e9:55: 7a:96:df:39:29:7c:5c:12:81:f3:15:06:e8:a9:d7: f3:b9:7f:e4:11:a9:92:54:86:45:b0:b6:04:9a:b6: 2a:b4:5d:30:c9:55:d5:83:cf:f8:49:75:e5:ea:11: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8D:31:30:87:C3:31:EB:71:6F:7E:DF:26:5C:28:4E:E6:B5:24:27 X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7c:37:41:e3:0f:0a:3f:e2:3c:91:ea:c4:b9:29:c5:20:69: 62:73:31:29:b0:c0:24:e7:4e:6a:80:5a:d0:63:41:1f:55:a3: 53:b2:af:87:98:58:d5:a2:c9:03:b7:0a:dd:35:1c:db:fb:91: 14:c2:18:4d:98:f4:f7:28:69:6b:5f:dd:50:f8:cd:45:95:c5: 99:64:7c:bf:60:48:27:84:32:35:3e:08:9d:45:ba:c7:01:10: 81:d6:47:39:a2:c1:09:87:ed:50:d1:e9:f1:e0:bf:f1:e7:a9: 45:ce:d1:94:c2:e7:bc:4c:0a:4d:7d:24:f8:24:43:6d:74:f1: f4:a2:00:28:39:4d:73:b1:ca:62:f1:3c:5f:26:78:1b:a2:49: ab:db:f4:18:11:df:15:46:7d:77:32:23:79:b2:f2:05:28:ac: 72:d1:58:85:07:a6:f7:2e:6e:92:bc:ed:6c:04:a0:d5:dd:08: 82:08:fc:f0:0c:fb:f9:63:aa:34:88:01:00:2e:e3:e7:3c:de: a2:1a:b8:38:a6:ce:99:89:1f:51:e3:95:10:e2:eb:79:79:3b: 23:f5:88:fe:10:07:a2:a8:89:52:12:7b:36:e9:74:94:ff:f1: 93:18:98:61:39:e5:de:ad:98:2d:6b:61:15:98:34:96:5d:e8: 3a:c5:8f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUxMTAzMDUyOTE0WhcNMjUxMTEwMDUyOTE0WjAYMRYwFAYD VQQDEw02OTA4M2RhYS1hZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82Uflkl2AYDr8nrcLKEA5reCuP4DzHKVTEmse/hsFSmhesI4AYFwG/0U+ORV nMabdiX5VFTUY4v9vYI0MkJJ1LUnni4Vdy3cnlSD3VvlVxo8KWIDwxrVgUNoz0Dl fg/S3JosNap8+KMbtOscozvZIlZ04sCJw0I8vwTQPEpRRBhnQbbU3KuEy7cbmQVI 8D3fzM7hqzqbD2k8J065/K486TS432Eh/frtaTxq2tIGxGDdwYgex7VSaMIx39Xt TAORvCnvN7LMgCsLroWT6qJU6VV6lt85KXxcEoHzFQboqdfzuX/kEamSVIZFsLYE mrYqtF0wyVXVg8/4SXXl6hGrXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2NMTCH wzHrcW9+3yZcKE7mtSQnMB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAafDdB4w8KP+I8kerEuSnFIGliczEpsMAk505qgFrQY0EfVaNTsq+H mFjVoskDtwrdNRzb+5EUwhhNmPT3KGlrX91Q+M1FlcWZZHy/YEgnhDI1PgidRbrH ARCB1kc5osEJh+1Q0enx4L/x56lFztGUwue8TApNfST4JENtdPH0ogAoOU1zscpi 8TxfJngbokmr2/QYEd8VRn13MiN5svIFKKxy0ViFB6b3Lm6SvO1sBKDV3QiCCPzw DPv5Y6o0iAEALuPnPN6iGrg4ps6ZiR9R45UQ4ut5eTsj9Yj+EAeiqIlSEns26XSU //GTGJhhOeXerZgta2EVmDSWXeg6xY9y -----END CERTIFICATE-----Generated at Tue Nov 4 15:56:36 2025 by rpki-client