$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json) Hash identifier: r3YUHddEOQiObK9f0bSp8the/Fj2iUGC9bagkH7XAwA= Subject key identifier: CE:CD:E3:17:9A:B7:5C:3B:49:0C:D7:F6:D8:66:34:23:F3:26:10:D3 Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft Manifest number: 01B5 Signing time: Wed 05 Nov 2025 03:20:35 +0000 Manifest this update: Wed 05 Nov 2025 03:20:34 +0000 Manifest next update: Wed 12 Nov 2025 03:20:34 +0000 Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: VpZcDkY0wn3Jx9z9u/dtT0BS+B+WXuTi8BYyZbJaXrQ=) 2: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: uENUjiP+2EB12uAPnRJ5SygdKhfwJZNgp1BeowbLRj4=) 3: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: JgtSSjMUVF5aYkq/I11EUTsQN2v/Rr6UwtvaYKzNVvk=) 4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: XBdp98NfSrH2eLdNGkQsz15bbs9O8Colh/0iTNrP6Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Nov 5 03:20:34 2025 GMT Not After : Nov 12 03:20:34 2025 GMT Subject: CN=690ac283-0f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:c5:34:8e:78:ee:f3:dd:f1:44:f0:d0:5a: 2f:a9:d7:d5:6c:5a:d9:1c:55:c9:16:61:52:d1:d3: 76:9e:f5:7f:77:a6:59:4f:9a:12:ed:f4:07:c9:d2: 9d:91:c4:53:a7:a8:92:14:ea:ca:3a:03:42:23:19: cd:0f:2e:3f:ca:70:e5:9c:4d:81:97:ab:b1:96:0d: b7:38:a0:86:cc:a8:a3:2f:ae:53:b8:8e:fc:14:d9: e1:3a:7c:4c:5d:e8:be:22:24:3d:a4:61:eb:a4:b0: 62:a9:b5:37:54:8c:f3:ff:52:78:8e:57:8b:ba:30: 3b:cc:e6:bf:10:06:b4:92:03:55:59:d7:97:92:51: 4d:98:90:99:ed:21:8a:04:09:b3:45:72:e0:8d:60: 7f:2b:07:9a:bc:53:4a:a8:d6:4b:79:91:f3:72:f9: 75:b8:1b:ef:97:64:0f:24:ee:33:a7:87:ab:db:c4: e1:0c:6d:dc:3b:b4:03:ca:4e:c5:57:fc:13:bc:aa: df:7e:64:22:be:17:14:7b:c5:29:77:e1:e1:56:f1: 71:d6:c1:cb:bd:2a:ea:df:5c:14:9a:ca:ed:03:2b: d1:65:85:0d:4d:62:8f:89:b5:fb:ae:78:ba:c3:8a: a0:48:a4:de:f8:f6:be:fd:bf:8a:69:57:eb:a3:dd: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CD:E3:17:9A:B7:5C:3B:49:0C:D7:F6:D8:66:34:23:F3:26:10:D3 X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d9:b3:f0:ab:87:e2:ad:78:f8:03:04:c8:fb:5c:00:27:a0: 8e:a0:7b:44:c3:5c:5d:4f:01:30:71:78:76:65:97:42:4a:55: ee:1b:09:65:de:05:3a:01:14:77:3f:79:12:9c:55:d8:4d:c6: 99:00:e2:dc:88:c8:1b:a7:68:ff:8b:1a:11:0a:82:94:60:a2: a5:8f:2b:64:fa:b1:90:f3:e2:2a:d8:58:6f:89:7e:61:2a:59: 12:7d:06:1c:55:21:e7:f8:ca:63:73:61:3d:26:1e:bb:d9:8a: 6d:c6:fb:bf:58:df:29:34:48:19:0a:f2:bd:3c:16:62:cb:3e: 8a:d8:e8:08:b6:97:6e:1f:b8:a8:f7:38:fd:6e:be:f7:7f:86: 5f:2a:51:6c:f7:bc:73:51:58:f8:c4:b0:6a:ed:e6:16:29:24: 4a:13:4b:65:68:6f:11:0d:ac:9c:01:5e:49:41:3a:3b:b9:c4: 8d:79:3d:b4:0a:1e:d8:58:92:84:d8:71:67:26:2b:b0:d6:9e: b8:19:cf:63:fe:4c:44:ea:78:60:ad:c8:48:4b:e8:ff:49:d4: ea:99:79:4c:3a:b6:46:4f:48:54:90:55:4e:fe:24:8a:c5:82: 3b:1b:8b:0d:3d:68:bd:4f:a5:d3:09:b9:04:51:9d:71:67:ac: 61:0a:6f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjUxMTA1MDMyMDM0WhcNMjUxMTEyMDMyMDM0WjAYMRYwFAYD VQQDEw02OTBhYzI4My0wZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyHFNI547vPd8UTw0FovqdfVbFrZHFXJFmFS0dN2nvV/d6ZZT5oS7fQHydKd kcRTp6iSFOrKOgNCIxnNDy4/ynDlnE2Bl6uxlg23OKCGzKijL65TuI78FNnhOnxM Xei+IiQ9pGHrpLBiqbU3VIzz/1J4jleLujA7zOa/EAa0kgNVWdeXklFNmJCZ7SGK BAmzRXLgjWB/KweavFNKqNZLeZHzcvl1uBvvl2QPJO4zp4er28ThDG3cO7QDyk7F V/wTvKrffmQivhcUe8Upd+HhVvFx1sHLvSrq31wUmsrtAyvRZYUNTWKPibX7rni6 w4qgSKTe+Pa+/b+KaVfro91sJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7N4xea t1w7SQzX9thmNCPzJhDTMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5OS8wMjIxRDdDRTJGNjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1N ZWd1cGREQVZ0YkVoQk10NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc2bPwq4firXj4AwTI+1wAJ6COoHtEw1xdTwEwcXh2ZZdCSlXuGwll 3gU6ARR3P3kSnFXYTcaZAOLciMgbp2j/ixoRCoKUYKKljytk+rGQ8+Iq2FhviX5h KlkSfQYcVSHn+Mpjc2E9Jh672Yptxvu/WN8pNEgZCvK9PBZiyz6K2OgItpduH7io 9zj9br73f4ZfKlFs97xzUVj4xLBq7eYWKSRKE0tlaG8RDaycAV5JQTo7ucSNeT20 Ch7YWJKE2HFnJiuw1p64Gc9j/kxE6nhgrchIS+j/SdTqmXlMOrZGT0hUkFVO/iSK xYI7G4sNPWi9T6XTCbkEUZ1xZ6xhCm/E -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:55 2025 by rpki-client