$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: Zst0aQ7sLi4BtlQCskkbARD/gVypXbKvPu88n8p/yuQ= Subject key identifier: 34:8D:6E:C1:F7:88:A8:3B:4E:F8:30:9B:0D:F5:18:91:EC:BE:A5:06 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 01E2 Signing time: Mon 03 Nov 2025 03:48:12 +0000 Manifest this update: Mon 03 Nov 2025 03:48:12 +0000 Manifest next update: Mon 10 Nov 2025 03:48:12 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: PPqItIzQ3pr5+KOCXZ/l0O9Ac7alKjYI2z6JaX3rF7Y=) 2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: tUG8yJiHn55iF+p5xuktjgNqO57AMcBScipLCgmp+AU=) 3: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: HvV48I109s9+Qsv4Wno42zSr43P6rFtI4uz1VW60NvA=) 4: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: t1t5ERQK21Czu6UgrAaBph2clA23SD9Ihs9VsoqVI8k=) 5: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: edUlYrUcw9nemw/UT7S46VmgpUXLu0gAESR1RTk4AOI=) 6: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: G2el60zyW5DLxxUiqRoxyHbxi0YhTWGIRCSb/KhXW78=) 7: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: eTquNld5nLEFKYyMHLG1VzJGsnFO7+pijIq3z1S1zVg=) 8: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: 7OyWzhEYc1OoBkrdP9NnWA0PjS6KslbL/GgGS4z8wV0=) 9: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: KXiWnH7RLdD8k1bKnrw/NL0MoMgP+K3mZfrXszKRO+k=) 10: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: yAhldKSbT9eXvW5YXq5JzADs625rpn5nRswKYZ3uyDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Nov 3 03:48:12 2025 GMT Not After : Nov 10 03:48:12 2025 GMT Subject: CN=690825fc-8fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:02:11:25:3d:00:67:54:29:38:1a:17:64:68: 61:9b:bf:cf:f5:bf:a9:04:aa:98:cc:73:67:69:ec: 60:44:9e:6b:64:04:04:6b:90:b3:8e:d7:7c:34:8b: 7f:95:31:68:e0:87:4a:e4:56:05:1b:39:3d:37:64: fa:d5:9e:34:8f:3e:bb:ca:b2:b5:b0:6f:09:b2:ec: 92:0e:fe:4a:39:2f:89:7b:41:b6:30:b1:f5:d2:84: 5f:73:5d:f4:64:dd:3b:a5:81:2d:96:7c:0a:54:9d: d2:0e:bf:99:75:27:1e:25:79:0b:49:0d:de:a8:1f: a6:42:44:a2:7a:f7:8a:33:88:66:74:fa:cb:e3:ca: 2a:f0:d7:43:9f:0f:e7:4c:b5:f1:ab:54:58:ab:c8: 85:99:d8:52:67:cb:80:0a:f0:13:27:2c:1e:ac:79: f8:7b:3f:f3:90:6b:0b:81:77:31:95:42:91:be:26: b9:22:4d:d8:63:d1:cb:71:de:ed:02:aa:7e:79:8a: b7:75:ae:57:7b:fd:17:c1:79:ab:86:ee:a8:89:bb: 16:d9:57:1f:e1:32:1d:ea:c6:f0:0d:c0:66:6e:ed: d8:6a:32:62:d4:13:70:a3:ce:d2:e9:80:d6:db:69: 09:4a:d2:e3:57:ed:2b:51:c1:11:9b:af:41:81:43: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8D:6E:C1:F7:88:A8:3B:4E:F8:30:9B:0D:F5:18:91:EC:BE:A5:06 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5d:fa:1d:8f:0c:fc:ae:21:be:14:33:60:c7:f8:f0:0d:c8: 11:73:63:df:96:8e:d3:a2:79:fd:26:49:e1:e8:aa:e0:00:db: 0d:40:ce:6c:d2:62:04:73:ba:10:30:02:6a:29:61:18:d3:b1: ea:17:01:80:3d:ac:3e:00:12:78:b9:9d:d1:4f:9d:24:9c:ca: 75:ae:68:ea:db:73:dc:a2:c7:a1:b3:78:34:7e:8d:79:4f:ea: 7c:fb:79:1e:85:d8:68:1d:e6:f7:db:c8:28:e7:d2:28:2f:64: 8a:b8:f7:41:90:48:8b:6a:f4:ec:1f:d5:b2:ae:45:88:a8:b5: 27:e9:cd:df:f1:2c:d0:9a:3b:fd:5f:29:3a:bd:6f:a6:7f:80: 6e:68:a7:01:4b:f8:a5:79:ad:9b:40:ee:35:39:25:1d:4a:71: c6:8e:fb:68:a0:28:46:7c:62:cc:c9:0a:32:00:e8:33:ec:83: 3d:81:d4:f5:d3:cf:15:7e:88:44:90:ac:0e:05:ac:1f:1b:58: 52:9f:92:2f:98:79:37:c3:2b:3c:b9:26:c3:0d:c9:71:27:df: e7:5a:b7:34:48:9c:fd:44:50:66:40:0d:e2:c1:e9:fd:cc:b7: 74:1d:9f:79:62:e0:7b:be:ed:91:9c:7a:d5:16:94:56:4b:51: 5f:5c:ce:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUxMTAzMDM0ODEyWhcNMjUxMTEwMDM0ODEyWjAYMRYwFAYD VQQDEw02OTA4MjVmYy04ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gIRJT0AZ1QpOBoXZGhhm7/P9b+pBKqYzHNnaexgRJ5rZAQEa5Czjtd8NIt/ lTFo4IdK5FYFGzk9N2T61Z40jz67yrK1sG8JsuySDv5KOS+Je0G2MLH10oRfc130 ZN07pYEtlnwKVJ3SDr+ZdSceJXkLSQ3eqB+mQkSieveKM4hmdPrL48oq8NdDnw/n TLXxq1RYq8iFmdhSZ8uACvATJywerHn4ez/zkGsLgXcxlUKRvia5Ik3YY9HLcd7t Aqp+eYq3da5Xe/0XwXmrhu6oibsW2Vcf4TId6sbwDcBmbu3YajJi1BNwo87S6YDW 22kJStLjV+0rUcERm69BgUMyswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSNbsH3 iKg7Tvgwmw31GJHsvqUGMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Xfodjwz8riG+FDNgx/jwDcgRc2Pflo7Tonn9Jknh6KrgANsNQM5s 0mIEc7oQMAJqKWEY07HqFwGAPaw+ABJ4uZ3RT50knMp1rmjq23Pcosehs3g0fo15 T+p8+3kehdhoHeb328go59IoL2SKuPdBkEiLavTsH9WyrkWIqLUn6c3f8SzQmjv9 Xyk6vW+mf4BuaKcBS/ilea2bQO41OSUdSnHGjvtooChGfGLMyQoyAOgz7IM9gdT1 088VfohEkKwOBawfG1hSn5IvmHk3wys8uSbDDclxJ9/nWrc0SJz9RFBmQA3iwen9 zLd0HZ95YuB7vu2RnHrVFpRWS1FfXM5E -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:46 2025 by rpki-client