$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: xrjznuM/0KBzc7+ZaJ+5TtA2XPG0Pqh8+jxOY8EMQDE= Subject key identifier: 6A:A0:BA:65:84:CC:14:91:D8:7D:CD:12:F2:2F:CA:A8:C1:3B:46:F9 Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1DF4 Signing time: Tue 04 Nov 2025 16:12:52 +0000 Manifest this update: Tue 04 Nov 2025 16:12:52 +0000 Manifest next update: Tue 11 Nov 2025 16:12:52 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: N8wUY284jpvZSAyRMNSXE4iRR8jgqEFjNR0li6EQT+8=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: FW9NYXvHGiXVfFykPHyKhdOjK9fS+NAvHhqmtmC3mxY=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7802 (0x1e7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Nov 4 16:12:52 2025 GMT Not After : Nov 11 16:12:52 2025 GMT Subject: CN=690a2604-bd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:28:05:dd:73:ef:a1:97:fa:79:ec:e3:ae: 47:40:7d:75:5c:84:38:91:1f:51:a3:0d:3c:00:f6: 81:e3:d4:69:06:1d:f1:ad:c4:53:78:dd:de:97:67: 3c:b3:05:04:21:11:5e:48:ca:4c:16:62:60:d0:3c: d1:fd:93:4c:c2:bb:33:c2:19:c9:c4:5a:d1:28:7b: 2b:b2:cf:4d:27:bc:9d:a8:b8:da:8f:9b:e3:8b:ca: e7:37:84:e3:68:7c:08:6c:e1:e6:67:e6:f9:ae:60: e1:ca:2b:ed:44:d5:93:ca:b4:40:07:5c:7c:36:62: c2:fb:26:98:b1:61:51:63:be:61:b8:dc:5e:2b:8d: 1d:a0:bb:8c:63:b8:0c:9c:1b:7a:46:36:d1:09:bb: 30:60:92:69:22:e5:c9:64:56:d3:d2:60:65:46:cb: 4e:f1:82:d1:d0:5e:61:33:c5:7e:fa:a8:03:87:cb: 35:be:38:01:55:5e:1e:fd:33:e5:e0:dc:39:d3:3c: cd:80:50:57:81:51:37:6b:da:43:30:39:0b:30:0f: 6c:d7:cb:cb:57:61:fc:05:31:59:df:48:af:50:8c: 9f:4c:22:f8:e5:ab:45:01:f9:d3:48:a4:66:99:52: 61:13:5f:0b:ff:e8:f8:fe:b6:e4:41:a4:7d:01:bc: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A0:BA:65:84:CC:14:91:D8:7D:CD:12:F2:2F:CA:A8:C1:3B:46:F9 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e1:68:8e:e7:b0:47:6b:38:48:a7:74:21:20:ba:06:b3:52: 3e:62:f1:f4:16:89:d1:20:64:26:26:e3:b9:3f:7e:58:5c:5d: 25:31:9e:8c:5c:4e:96:3f:7a:1b:39:34:35:b6:11:4c:b9:5e: 6e:f8:4c:34:88:c5:8c:0e:8b:96:85:7a:72:a8:07:73:ce:f1: 6a:a0:94:f7:be:eb:41:6c:23:c4:c8:6b:c4:c8:77:88:0c:eb: 83:81:59:5c:b7:a2:9d:c7:59:a3:07:5c:45:2a:1b:e8:5c:95: e4:1b:e3:ae:c8:99:9b:ac:c8:8d:74:a2:ea:dd:db:4c:e8:c2: 71:29:aa:81:0e:5a:df:ff:5d:8e:a9:2e:72:2b:06:1f:37:d4: ed:8b:7b:7e:8c:89:35:23:bf:37:fd:e5:f6:0e:11:89:a9:83: 57:f4:11:7e:f2:0f:cb:53:c7:e8:64:5b:78:8d:1d:a2:47:66: bd:c6:14:1a:48:98:a3:b5:10:19:83:7c:cd:46:d8:05:f9:af: a3:33:96:5d:7c:29:1c:07:22:95:8f:7d:9c:02:e6:36:8b:49: a5:97:e2:65:4c:11:61:e2:b6:03:67:86:76:1a:61:a2:37:81: 8a:75:84:fd:7b:47:07:49:dd:54:38:af:de:15:83:f6:44:62: b1:60:aa:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUxMTA0MTYxMjUyWhcNMjUxMTExMTYxMjUyWjAYMRYwFAYD VQQDEw02OTBhMjYwNC1iZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA104oBd1z76GX+nns465HQH11XIQ4kR9Row08APaB49RpBh3xrcRTeN3el2c8 swUEIRFeSMpMFmJg0DzR/ZNMwrszwhnJxFrRKHsrss9NJ7ydqLjaj5vji8rnN4Tj aHwIbOHmZ+b5rmDhyivtRNWTyrRAB1x8NmLC+yaYsWFRY75huNxeK40doLuMY7gM nBt6RjbRCbswYJJpIuXJZFbT0mBlRstO8YLR0F5hM8V++qgDh8s1vjgBVV4e/TPl 4Nw50zzNgFBXgVE3a9pDMDkLMA9s18vLV2H8BTFZ30ivUIyfTCL45atFAfnTSKRm mVJhE18L/+j4/rbkQaR9AbwBgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqgumWE zBSR2H3NEvIvyqjBO0b5MB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR4WiO57BHazhIp3QhILoGs1I+YvH0FonRIGQmJuO5P35YXF0lMZ6M XE6WP3obOTQ1thFMuV5u+Ew0iMWMDouWhXpyqAdzzvFqoJT3vutBbCPEyGvEyHeI DOuDgVlct6Kdx1mjB1xFKhvoXJXkG+OuyJmbrMiNdKLq3dtM6MJxKaqBDlrf/12O qS5yKwYfN9Tti3t+jIk1I783/eX2DhGJqYNX9BF+8g/LU8foZFt4jR2iR2a9xhQa SJijtRAZg3zNRtgF+a+jM5ZdfCkcByKVj32cAuY2i0mll+JlTBFh4rYDZ4Z2GmGi N4GKdYT9e0cHSd1UOK/eFYP2RGKxYKr0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:49 2025 by rpki-client