$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: zDjR2/oj0R9BKTDai/anaR8NC9wZsWqzdUPNzyI6qbk= Subject key identifier: FE:57:36:F7:19:F6:7D:B3:B3:C3:10:93:F3:08:E7:9B:86:A8:DB:62 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 0684 Signing time: Tue 04 Nov 2025 22:33:12 +0000 Manifest this update: Tue 04 Nov 2025 22:33:11 +0000 Manifest next update: Tue 11 Nov 2025 22:33:11 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: I2jZwBQzcAbMCsy+gCy3CLR67rLxhGeJqh+s4Xyd1XI=) 2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: EQNnt+47JakLAicAJpey8kMF4fyXy0EyBy2A09Z/nmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Nov 4 22:33:11 2025 GMT Not After : Nov 11 22:33:11 2025 GMT Subject: CN=690a7f27-4faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:a1:08:59:eb:d5:42:c2:a3:11:cf:e9:25: 5b:9a:08:16:09:7c:76:76:ed:df:ef:e3:c5:0d:81: 2d:5b:2b:0e:40:41:41:9d:5c:2a:a9:6e:e7:05:fe: 1b:12:58:0b:da:e7:7a:d5:7e:79:9c:d9:7e:a9:c9: 21:91:9f:e2:d5:bd:6d:b7:c3:aa:c7:11:b7:cb:73: 4b:3b:51:ec:65:ca:a5:2a:37:e6:80:ba:ee:55:38: 16:2b:6d:87:0d:02:e0:c6:c0:a7:f9:88:60:6b:7e: 35:e4:a2:61:ad:02:6b:be:09:8d:0c:9a:3b:31:03: 53:8e:41:3b:d9:b1:de:8d:15:ea:f9:de:15:b9:ce: 7f:48:84:53:65:4b:2d:52:e7:3e:6e:df:37:3f:35: e7:b1:9f:db:d7:87:f7:4c:4e:e7:62:c7:d0:fd:00: 99:5a:28:40:9c:f4:3d:49:9e:ac:d7:df:6c:35:6a: 88:04:61:ae:85:d4:39:bf:5f:f5:c4:bf:e5:68:19: 31:bc:da:fd:8a:34:a4:e2:31:e3:90:6f:7b:b7:fd: e2:08:d6:8f:01:54:95:99:74:90:5c:b0:6d:86:71: d6:6f:31:1e:4b:f0:28:25:b5:5c:52:5e:4d:f9:9b: 87:75:5a:c1:73:af:fe:ba:07:01:bc:76:6c:e5:a1: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:57:36:F7:19:F6:7D:B3:B3:C3:10:93:F3:08:E7:9B:86:A8:DB:62 X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:25:d0:58:f7:44:0c:be:6f:7b:11:c2:15:ec:c0:66:40:d7: 0c:f3:1f:99:ae:2d:d6:36:26:60:0e:a7:12:13:c7:5d:c9:5c: 00:ac:d1:74:b5:3f:16:fe:f7:6a:01:67:09:0a:14:8f:ab:34: 67:34:8f:13:47:c8:1d:76:bb:bb:31:52:7f:e5:fe:e1:92:e2: fd:ec:6d:61:f6:4d:a0:09:40:37:dd:f2:25:71:8a:7b:b5:d3: cb:cd:5b:58:34:5b:43:f9:b1:00:97:ed:39:f5:03:1a:dd:27: 1c:9a:7e:44:4f:d0:bc:16:ca:55:0a:ff:c7:77:50:9c:b2:9c: 05:39:ba:d4:63:5f:f6:6a:f2:03:d0:c5:2a:60:70:ec:75:cb: f5:c8:0d:37:8d:ab:c7:ac:46:b3:0b:7e:3e:b2:25:9d:6b:6a: 08:04:da:2d:d3:75:5b:15:83:8f:8e:dc:0d:5d:79:bb:a1:11: 1a:8c:cc:75:d0:d6:27:26:92:fa:83:d2:ee:10:39:42:e4:12: 5b:63:ee:a2:71:78:83:b0:64:b0:4c:8c:d5:ce:61:77:98:33: a6:07:05:41:fc:ac:54:7a:bb:7c:8a:29:57:83:58:56:1e:e9: 74:d4:31:95:7c:7f:87:26:0b:4c:db:d0:73:54:a0:2d:ad:23: 67:30:2f:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUxMTA0MjIzMzExWhcNMjUxMTExMjIzMzExWjAYMRYwFAYD VQQDEw02OTBhN2YyNy00ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAahCFnr1ULCoxHP6SVbmggWCXx2du3f7+PFDYEtWysOQEFBnVwqqW7nBf4b ElgL2ud61X55nNl+qckhkZ/i1b1tt8OqxxG3y3NLO1HsZcqlKjfmgLruVTgWK22H DQLgxsCn+Yhga3415KJhrQJrvgmNDJo7MQNTjkE72bHejRXq+d4Vuc5/SIRTZUst Uuc+bt83PzXnsZ/b14f3TE7nYsfQ/QCZWihAnPQ9SZ6s199sNWqIBGGuhdQ5v1/1 xL/laBkxvNr9ijSk4jHjkG97t/3iCNaPAVSVmXSQXLBthnHWbzEeS/AoJbVcUl5N +ZuHdVrBc6/+ugcBvHZs5aE4VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5XNvcZ 9n2zs8MQk/MI55uGqNtiMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOJdBY90QMvm97EcIV7MBmQNcM8x+Zri3WNiZgDqcSE8ddyVwArNF0 tT8W/vdqAWcJChSPqzRnNI8TR8gddru7MVJ/5f7hkuL97G1h9k2gCUA33fIlcYp7 tdPLzVtYNFtD+bEAl+059QMa3Sccmn5ET9C8FspVCv/Hd1CcspwFObrUY1/2avID 0MUqYHDsdcv1yA03javHrEazC34+siWda2oIBNot03VbFYOPjtwNXXm7oREajMx1 0NYnJpL6g9LuEDlC5BJbY+6icXiDsGSwTIzVzmF3mDOmBwVB/KxUert8iilXg1hW Hul01DGVfH+HJgtM29BzVKAtrSNnMC8d -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:18 2025 by rpki-client