$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: q01yeeQybh1OQ7YgQxFsdm5F5QN854WS4jH/ytNqBAY= Subject key identifier: 23:9E:E2:5D:C7:FD:D4:13:11:01:1F:70:B3:A0:C7:CE:A3:8E:4D:02 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C74 Signing time: Tue 04 Nov 2025 18:38:14 +0000 Manifest this update: Tue 04 Nov 2025 18:38:14 +0000 Manifest next update: Tue 11 Nov 2025 18:38:14 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: MCRRDgKIISATeHBGAk1yOKoggLh/STa0asTqb7Br+Bc=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: Nov 4 18:38:14 2025 GMT Not After : Nov 11 18:38:14 2025 GMT Subject: CN=690a4816-3606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:24:2c:13:c2:04:62:08:81:c4:93:06:f1: 4f:70:28:10:30:8a:47:76:9f:10:85:b3:0f:0a:c2: 1e:a9:07:db:4e:23:76:04:0d:ea:de:88:71:fd:e9: b1:14:7f:f8:21:79:15:7f:f7:18:10:69:2b:13:d8: 90:0e:ae:70:75:e7:60:e8:99:0c:40:a8:12:74:cb: 3e:67:c0:5d:27:05:20:5b:87:59:04:c9:ed:8d:ab: dd:c5:b7:01:59:c5:9b:ee:1f:b6:4f:ce:a0:c5:6e: 84:af:6c:e4:81:9f:2f:c9:7f:65:b7:58:e3:45:95: cd:7a:c6:55:e6:0c:60:2e:81:e8:34:70:62:46:a4: 8a:13:98:85:bc:fd:3a:fe:b7:72:b3:ad:59:f4:1f: 28:f3:1e:54:75:6f:9a:aa:8d:1a:f8:77:d2:48:50: b0:3a:fb:6a:42:63:4d:62:ec:fe:dc:08:8a:c2:a4: e3:2b:bc:5b:b6:8d:11:6c:6a:27:bc:4f:f6:ec:05: f9:55:6e:f5:62:44:91:94:62:c1:1b:a5:26:c6:dd: 33:eb:5f:15:3c:0a:73:5f:c1:d8:94:02:e7:f5:3f: b0:3e:06:59:17:55:e5:af:24:47:7e:df:b5:92:88: 2e:85:0e:49:e2:be:1c:fc:6b:22:4b:16:f1:e7:ce: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9E:E2:5D:C7:FD:D4:13:11:01:1F:70:B3:A0:C7:CE:A3:8E:4D:02 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1a:3f:70:4a:43:27:43:d9:7a:24:3f:e1:30:69:fe:0e:56: 15:21:d7:5f:4b:01:d9:cb:f7:6a:7b:c4:97:5d:26:3f:bf:81: b2:1d:80:60:93:2a:49:ee:4e:b9:e7:ad:54:31:b4:e8:40:2b: 1d:3a:ae:e1:db:5d:1d:64:09:4a:e7:0c:7b:b0:71:40:6b:ad: 81:dd:80:48:32:9e:5f:7e:a2:89:fc:63:60:22:c7:e9:5b:b4: 34:65:76:da:2d:2a:c8:00:57:37:27:67:1a:7d:4f:07:fc:4b: 40:09:83:15:ce:d8:6f:c3:e5:28:ea:73:e6:4e:d3:7c:13:88: 1a:9c:b7:9c:58:81:56:e0:1e:14:ec:dc:b0:71:e9:d4:c4:ff: c8:55:b0:99:9c:c5:e1:07:43:35:75:02:69:36:6d:6b:5f:22: d8:3f:71:53:dd:09:d8:1f:32:df:8a:a6:a1:b2:42:0c:1f:a3: 2f:dc:32:b4:dc:78:30:c2:87:42:44:d5:d9:30:42:40:94:42: e1:6c:cf:ac:f2:ee:20:b1:6f:be:dd:3c:09:f6:bf:bc:fe:89: 81:4b:2d:d2:8a:05:da:7c:78:98:bd:84:b2:f1:4a:64:14:66: 8a:5d:1f:3e:9b:1c:70:07:84:fa:cc:2e:52:b3:38:9f:18:aa: 11:f1:7e:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUxMTA0MTgzODE0WhcNMjUxMTExMTgzODE0WjAYMRYwFAYD VQQDEw02OTBhNDgxNi0zNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRAkLBPCBGIIgcSTBvFPcCgQMIpHdp8QhbMPCsIeqQfbTiN2BA3q3ohx/emx FH/4IXkVf/cYEGkrE9iQDq5wdedg6JkMQKgSdMs+Z8BdJwUgW4dZBMntjavdxbcB WcWb7h+2T86gxW6Er2zkgZ8vyX9lt1jjRZXNesZV5gxgLoHoNHBiRqSKE5iFvP06 /rdys61Z9B8o8x5UdW+aqo0a+HfSSFCwOvtqQmNNYuz+3AiKwqTjK7xbto0RbGon vE/27AX5VW71YkSRlGLBG6Umxt0z618VPApzX8HYlALn9T+wPgZZF1XlryRHft+1 koguhQ5J4r4c/GsiSxbx584tFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOe4l3H /dQTEQEfcLOgx86jjk0CMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYGj9wSkMnQ9l6JD/hMGn+DlYVIddfSwHZy/dqe8SXXSY/v4GyHYBg kypJ7k65561UMbToQCsdOq7h210dZAlK5wx7sHFAa62B3YBIMp5ffqKJ/GNgIsfp W7Q0ZXbaLSrIAFc3J2cafU8H/EtACYMVzthvw+Uo6nPmTtN8E4ganLecWIFW4B4U 7NywcenUxP/IVbCZnMXhB0M1dQJpNm1rXyLYP3FT3QnYHzLfiqahskIMH6Mv3DK0 3HgwwodCRNXZMEJAlELhbM+s8u4gsW++3TwJ9r+8/omBSy3SigXafHiYvYSy8Upk FGaKXR8+mxxwB4T6zC5SszifGKoR8X4Q -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:18 2025 by rpki-client