$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: KkN9KMK5M8acTXOraVb6z49eyMYAKGEuHDXA1XrOMB0= Subject key identifier: 66:24:94:C8:EA:89:E6:D7:10:52:FF:B8:B6:4E:99:0C:1C:F4:90:12 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0555 Signing time: Tue 04 Nov 2025 23:38:00 +0000 Manifest this update: Tue 04 Nov 2025 23:38:00 +0000 Manifest next update: Tue 11 Nov 2025 23:38:00 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: xr60TnDGVBg7bD7MAiY0KVaaP9zOKwnMCvOUsjo6iTg=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Nov 4 23:38:00 2025 GMT Not After : Nov 11 23:38:00 2025 GMT Subject: CN=690a8e58-c562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:8a:49:b8:e6:6c:56:1e:38:53:af:f1:9c: 89:0d:e7:c7:7c:94:ee:ae:44:f7:01:27:2b:17:1f: 58:a7:2f:57:2e:d8:17:b8:44:ff:a8:de:36:9e:a3: 5f:98:2c:07:16:15:96:d9:69:41:e0:02:a6:a5:86: f4:96:51:8e:39:66:dd:6a:69:a8:fa:7c:fe:86:20: 33:28:34:6a:b8:77:6c:8a:eb:71:cd:51:7b:6b:71: 91:10:e1:89:85:5d:d4:3f:5f:1f:e3:55:a1:66:09: 71:5c:bb:d2:69:c7:15:73:8a:7d:bc:90:e8:7a:ea: 11:c7:09:62:05:77:2b:bc:85:ff:c4:87:e8:20:d2: 52:27:a7:8e:84:40:1d:2d:47:ae:f6:30:ce:2a:2d: f8:b4:4a:a1:50:d3:3e:7d:4b:7b:38:3f:89:f9:d1: de:40:88:dd:0c:f8:d5:cf:96:a4:83:32:7c:e6:91: f1:43:f6:35:c6:90:ee:1b:5f:71:0f:9d:c8:ed:46: 30:f6:98:ec:be:e6:e1:b9:ee:67:be:b9:e2:d2:81: 38:4f:fb:c3:62:71:fe:f7:fb:12:ab:32:2f:f8:ac: a4:f0:6f:f4:4d:3b:3d:2e:f7:32:a4:d3:17:1c:d2: 33:e3:be:7f:3c:f7:bd:2a:fa:59:9a:d2:21:24:4d: 35:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:24:94:C8:EA:89:E6:D7:10:52:FF:B8:B6:4E:99:0C:1C:F4:90:12 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5c:d8:3a:32:fa:d8:ad:a5:6f:94:3b:13:c7:f9:39:5f:f9: 45:16:32:01:58:0d:41:b0:ac:fc:4a:53:10:69:41:50:86:f7: 66:bf:b9:9a:51:61:ff:91:3a:77:de:e9:88:bd:60:77:2f:36: 02:9f:a9:a8:a7:d0:7d:a6:38:ce:fc:db:e6:04:6a:70:91:bf: 60:ca:11:41:c0:d4:d7:2d:05:5f:09:a8:8a:04:0c:4f:7f:60: de:bd:0b:42:27:69:eb:ea:8e:21:f9:b6:50:20:67:b1:b0:aa: c2:b0:9d:21:52:6d:c0:4e:58:60:da:6d:8d:4a:36:32:83:dd: 25:b8:c1:49:44:f2:7c:31:ed:28:57:1e:01:3e:c8:ee:11:5a: 2c:14:2e:ad:7f:72:9b:95:8f:4a:b2:07:c4:86:da:3b:db:7b: a9:03:39:1f:fa:af:d4:9f:da:ac:64:bd:86:78:9a:85:f9:25: 7d:41:7f:ca:71:ab:59:97:b8:35:42:08:a2:ff:0f:92:f8:88: 33:83:62:99:cf:34:39:21:1c:82:12:bb:82:91:6a:ca:06:a0: a2:9b:e7:e0:86:8c:df:ec:34:95:68:1d:e8:c7:c2:f1:82:ca: 4f:08:a2:2f:47:77:27:da:2c:f4:80:a8:7f:c2:2b:02:c8:23: 80:94:ca:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUxMTA0MjMzODAwWhcNMjUxMTExMjMzODAwWjAYMRYwFAYD VQQDEw02OTBhOGU1OC1jNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJuKSbjmbFYeOFOv8ZyJDefHfJTurkT3AScrFx9Ypy9XLtgXuET/qN42nqNf mCwHFhWW2WlB4AKmpYb0llGOOWbdammo+nz+hiAzKDRquHdsiutxzVF7a3GREOGJ hV3UP18f41WhZglxXLvSaccVc4p9vJDoeuoRxwliBXcrvIX/xIfoINJSJ6eOhEAd LUeu9jDOKi34tEqhUNM+fUt7OD+J+dHeQIjdDPjVz5akgzJ85pHxQ/Y1xpDuG19x D53I7UYw9pjsvubhue5nvrni0oE4T/vDYnH+9/sSqzIv+Kyk8G/0TTs9LvcypNMX HNIz475/PPe9KvpZmtIhJE016wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYklMjq iebXEFL/uLZOmQwc9JASMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcXNg6MvrYraVvlDsTx/k5X/lFFjIBWA1BsKz8SlMQaUFQhvdmv7ma UWH/kTp33umIvWB3LzYCn6mop9B9pjjO/NvmBGpwkb9gyhFBwNTXLQVfCaiKBAxP f2DevQtCJ2nr6o4h+bZQIGexsKrCsJ0hUm3ATlhg2m2NSjYyg90luMFJRPJ8Me0o Vx4BPsjuEVosFC6tf3KblY9KsgfEhto723upAzkf+q/Un9qsZL2GeJqF+SV9QX/K catZl7g1Qgii/w+S+Igzg2KZzzQ5IRyCEruCkWrKBqCim+fghozf7DSVaB3ox8Lx gspPCKIvR3cn2iz0gKh/wisCyCOAlMqw -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:58 2025 by rpki-client