$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: BsJhmm5GHio/fNHaUgQt55+sQg4GhjVEx3gGxff6k7s= Subject key identifier: 2F:96:60:9A:B2:C8:04:36:26:8E:C4:E5:D8:03:20:6A:3F:78:FE:13 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: F6 Signing time: Wed 05 Nov 2025 05:23:30 +0000 Manifest this update: Wed 05 Nov 2025 05:23:30 +0000 Manifest next update: Wed 12 Nov 2025 05:23:30 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: 6gEYFn6kX5i/IxOoleMJv5Q9+lYwPyH3mbFRbCUipPM=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Nov 5 05:23:30 2025 GMT Not After : Nov 12 05:23:30 2025 GMT Subject: CN=690adf52-b665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:a7:0f:28:18:1b:b8:9f:45:22:66:b2:f0: a2:c8:1c:ee:52:db:c8:00:0e:e4:e9:3b:dc:cb:d4: 99:0c:bb:72:ad:1a:b6:07:03:00:ce:12:bd:b7:66: 41:0c:db:a4:b5:10:d7:0b:a7:2f:fb:50:2d:b6:8e: 7b:be:d2:1f:44:0e:c1:6d:9a:bb:00:ea:ca:c5:89: 3a:fd:3d:19:ea:d0:cc:f1:38:33:37:48:de:f6:ae: 3c:21:71:ba:47:37:d5:dd:96:21:6a:65:91:f4:a6: 12:f0:fd:4c:42:7d:d1:17:5e:ea:6d:82:d2:6d:d0: f1:52:af:12:7a:5e:22:82:7f:62:6d:36:03:eb:91: 11:9f:a0:ae:2e:01:26:3c:12:75:0f:99:ef:cc:7c: 18:df:cb:7d:18:36:6a:d9:86:13:67:88:48:13:db: d7:cd:71:da:14:88:b5:9a:8e:e5:0c:83:59:c0:de: 48:ce:67:40:dd:fd:09:88:fd:02:b9:7e:fb:56:f4: b6:30:db:48:f9:b7:6c:40:b0:37:09:6e:0c:cb:e2: d7:fd:58:8d:fb:14:bc:77:19:bf:40:17:60:fc:db: 9e:14:68:73:1e:f7:d2:bd:2b:05:f1:09:0d:84:2a: 3f:2e:4f:9b:31:23:5b:a4:d9:36:d8:d4:b3:c5:ef: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:96:60:9A:B2:C8:04:36:26:8E:C4:E5:D8:03:20:6A:3F:78:FE:13 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c4:70:cc:6e:86:da:27:79:4e:65:4b:65:37:59:6a:72:0a: d7:00:19:18:4e:2e:56:5b:23:b8:f6:a5:99:57:e7:4c:54:ad: a6:07:04:9c:51:1a:43:66:4e:f1:f0:94:b6:89:da:5b:1c:78: cc:68:d8:fa:5d:63:51:90:ce:5b:7b:68:ac:f6:29:ec:67:7d: 5c:ad:bf:02:54:5c:a5:4d:51:54:95:c4:c3:2b:fa:c9:b7:f1: dd:62:3a:07:04:4d:47:8e:81:b1:84:90:51:a6:da:d5:f7:6a: 1f:64:53:5d:01:2c:1b:69:61:bd:0e:25:4f:ef:01:bb:d3:5a: f6:df:95:0a:0e:ed:f7:5c:bd:9e:3d:ae:25:49:cf:32:c2:64: 2e:f3:22:1d:51:ef:37:e5:bb:37:10:8a:35:10:26:f4:d3:a7: 9c:86:8d:b7:5a:a0:13:ca:10:27:35:85:fa:b4:cc:4c:82:a3: 87:2a:f4:02:97:b8:18:1d:ad:5e:de:e6:0b:24:c5:10:80:d9: 2a:90:9e:8f:83:9c:1a:54:f6:ac:7a:39:a7:e7:cc:c7:fe:41: 08:64:53:5c:aa:ed:3a:29:87:40:d0:a0:95:e0:e5:91:d7:6c: 05:77:a1:5f:e8:bd:dc:74:57:e5:63:db:13:63:5f:9c:11:ed: 93:1f:84:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUxMTA1MDUyMzMwWhcNMjUxMTEyMDUyMzMwWjAYMRYwFAYD VQQDEw02OTBhZGY1Mi1iNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUynDygYG7ifRSJmsvCiyBzuUtvIAA7k6Tvcy9SZDLtyrRq2BwMAzhK9t2ZB DNuktRDXC6cv+1Atto57vtIfRA7BbZq7AOrKxYk6/T0Z6tDM8TgzN0je9q48IXG6 RzfV3ZYhamWR9KYS8P1MQn3RF17qbYLSbdDxUq8Sel4ign9ibTYD65ERn6CuLgEm PBJ1D5nvzHwY38t9GDZq2YYTZ4hIE9vXzXHaFIi1mo7lDINZwN5IzmdA3f0JiP0C uX77VvS2MNtI+bdsQLA3CW4My+LX/ViN+xS8dxm/QBdg/NueFGhzHvfSvSsF8QkN hCo/Lk+bMSNbpNk22NSzxe87EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+WYJqy yAQ2Jo7E5dgDIGo/eP4TMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAixHDMbobaJ3lOZUtlN1lqcgrXABkYTi5WWyO49qWZV+dMVK2mBwSc URpDZk7x8JS2idpbHHjMaNj6XWNRkM5be2is9insZ31crb8CVFylTVFUlcTDK/rJ t/HdYjoHBE1HjoGxhJBRptrV92ofZFNdASwbaWG9DiVP7wG701r235UKDu33XL2e Pa4lSc8ywmQu8yIdUe835bs3EIo1ECb006echo23WqATyhAnNYX6tMxMgqOHKvQC l7gYHa1e3uYLJMUQgNkqkJ6Pg5waVPasejmn58zH/kEIZFNcqu06KYdA0KCV4OWR 12wFd6Ff6L3cdFflY9sTY1+cEe2TH4Qz -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:43 2025 by rpki-client