$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json) Hash identifier: 3h7qz/7ubyZZjULI7qCAv8buJgARkSCKWumcDyKhl6I= Subject key identifier: 30:DF:36:A2:BC:9A:FC:F2:07:01:F0:75:B6:83:35:1F:00:66:02:A3 Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft Manifest number: 0126 Signing time: Wed 05 Nov 2025 04:56:29 +0000 Manifest this update: Wed 05 Nov 2025 04:56:29 +0000 Manifest next update: Wed 12 Nov 2025 04:56:29 +0000 Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: uze4sd73kH0sszaE2pubFlVt8pePTliWGrXvMZjwYdM=) 2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4s3NtIvsEComlAClIWN0C/pBpA6ARQs8HzKhlcubCoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Validity Not Before: Nov 5 04:56:29 2025 GMT Not After : Nov 12 04:56:29 2025 GMT Subject: CN=690ad8fd-190e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:28:d2:b2:14:23:c2:04:20:5a:c6:36:0c: 9f:6c:66:fa:1c:80:79:b3:a0:71:b8:b7:23:99:bf: c1:aa:bd:9d:c2:7a:13:d7:b8:93:4b:cd:f1:f1:d1: 36:db:8f:dc:de:da:45:5d:50:fe:db:44:f9:3d:02: 6e:cd:bf:61:24:5e:81:97:75:fa:dc:96:fd:8e:5a: ff:9c:26:a4:99:ff:a0:ef:34:4b:9b:ad:8b:92:ae: ee:c6:dd:f3:72:0e:23:26:3b:55:9f:e0:0c:ea:6b: f2:e2:c5:64:ba:2e:eb:36:6b:8e:7d:a0:68:40:2d: 2b:76:9f:c8:9b:66:2f:e0:6c:2e:69:20:98:85:ee: 9f:53:05:10:fd:3c:0a:1d:bf:6b:b2:e9:9f:06:92: d5:0a:47:6f:fa:54:69:90:3b:40:f7:e9:78:0c:f6: a5:d4:fb:31:02:94:0b:f9:1f:a7:ce:a8:b1:8d:6e: 5c:7d:53:bb:0f:09:f2:31:0e:67:56:3d:37:e5:13: 6e:f0:a1:26:a1:cc:79:f3:8e:58:b8:5c:74:b8:5d: d1:43:91:6d:80:44:3e:cd:91:2e:4e:95:80:11:d2: 86:7a:4e:8a:8c:2d:1d:8f:1b:74:2a:90:83:6a:d7: 86:ae:c6:bd:26:7d:42:ed:f0:08:be:fd:3b:e2:b3: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DF:36:A2:BC:9A:FC:F2:07:01:F0:75:B6:83:35:1F:00:66:02:A3 X509v3 Authority Key Identifier: keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:62:9c:a8:27:86:8e:40:19:66:af:ca:32:1d:16:1b:5c:c1: 0c:ad:b1:c2:0f:63:f6:fa:3e:86:72:b9:46:3e:e1:bf:35:b8: 3f:7b:30:11:71:e0:fc:f9:73:92:26:16:e0:6c:e3:82:fa:a7: f7:e4:5f:0d:12:89:4e:f7:24:dc:5f:d7:be:80:eb:ff:17:5a: a9:2f:bb:de:6a:c2:1c:25:ed:67:b3:3a:54:90:a7:fa:65:18: 2f:d2:03:8a:44:d5:68:ba:2d:85:f3:73:75:16:2b:23:6f:cf: 49:f5:db:df:06:c0:78:0d:96:07:c7:af:b7:e4:62:9c:c3:4b: 42:ad:19:ae:a4:f0:2e:d6:2f:a6:03:a0:cc:26:6e:88:91:0f: 15:b0:a2:7d:4b:78:17:9a:a8:bb:1f:10:62:79:70:bb:d7:09: 1d:b6:0a:0d:f3:39:62:52:37:55:4b:3c:76:6c:8e:04:66:88: fa:39:57:32:3e:89:66:ea:9b:d9:e1:8e:79:1d:2b:3c:c0:a4: a7:77:21:9c:2c:7f:b8:f5:fb:6d:12:b9:28:66:19:30:e1:98: 20:7c:bc:90:87:47:20:01:9b:66:de:9e:06:c6:8b:9d:35:ab: d9:fc:a6:61:73:0a:0e:65:cf:43:88:cb:3a:1f:e9:c4:b5:7b: 33:d2:0d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0NDkxMTAvBgNVBAUTKDZGNjVBMEM5MjI2MEIxQURBMjMxODdCMjlCQUMzQkVB REFDMDU2NjEwHhcNMjUxMTA1MDQ1NjI5WhcNMjUxMTEyMDQ1NjI5WjAYMRYwFAYD VQQDEw02OTBhZDhmZC0xOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFco0rIUI8IEIFrGNgyfbGb6HIB5s6BxuLcjmb/Bqr2dwnoT17iTS83x8dE2 24/c3tpFXVD+20T5PQJuzb9hJF6Bl3X63Jb9jlr/nCakmf+g7zRLm62Lkq7uxt3z cg4jJjtVn+AM6mvy4sVkui7rNmuOfaBoQC0rdp/Im2Yv4GwuaSCYhe6fUwUQ/TwK Hb9rsumfBpLVCkdv+lRpkDtA9+l4DPal1PsxApQL+R+nzqixjW5cfVO7DwnyMQ5n Vj035RNu8KEmocx5845YuFx0uF3RQ5FtgEQ+zZEuTpWAEdKGek6KjC0djxt0KpCD ateGrsa9Jn1C7fAIvv074rOdZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDfNqK8 mvzyBwHwdbaDNR8AZgKjMB8GA1UdIwQYMBaAFG9loMkiYLGtojGHspusO+rawFZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ0OS80MDE3OTBGQzA3 M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3NhMmlNWWV5bTZ3NzZ0ckFW bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyV2d5U0pnc2EyaU1ZZXltNnc3NnRyQVZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ0OS80MDE3OTBGQzA3M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3Nh MmlNWWV5bTZ3NzZ0ckFWbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTYpyoJ4aOQBlmr8oyHRYbXMEMrbHCD2P2+j6GcrlGPuG/Nbg/ezAR ceD8+XOSJhbgbOOC+qf35F8NEolO9yTcX9e+gOv/F1qpL7veasIcJe1nszpUkKf6 ZRgv0gOKRNVoui2F83N1Fisjb89J9dvfBsB4DZYHx6+35GKcw0tCrRmupPAu1i+m A6DMJm6IkQ8VsKJ9S3gXmqi7HxBieXC71wkdtgoN8zliUjdVSzx2bI4EZoj6OVcy Polm6pvZ4Y55HSs8wKSndyGcLH+49fttErkoZhkw4ZggfLyQh0cgAZtm3p4Gxoud NavZ/KZhcwoOZc9DiMs6H+nEtXsz0g0M -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:49 2025 by rpki-client