$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: OiOvY6OOywVILqA+lc3eMKEol8Eo28m0WXan3fbvNnQ= Subject key identifier: 81:CA:23:4D:CD:8C:08:D9:D2:11:09:13:CE:87:B3:D7:99:2B:5A:5D Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 0136 Signing time: Wed 05 Nov 2025 05:03:27 +0000 Manifest this update: Wed 05 Nov 2025 05:03:26 +0000 Manifest next update: Wed 12 Nov 2025 05:03:26 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: ptxkbZfhMYfZzFUkIJnrH8N0f0IqQhWQjJG6BjDjJYU=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Nov 5 05:03:26 2025 GMT Not After : Nov 12 05:03:26 2025 GMT Subject: CN=690ada9e-0580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:4d:c1:9c:60:24:89:b2:41:6a:f2:19:94: 4c:2c:91:32:7e:91:09:c3:cb:4a:64:5a:61:dc:99: b4:1e:40:e0:3a:6f:03:e4:7d:8e:ff:64:c0:21:41: 6d:52:79:30:aa:99:c3:e1:20:82:ac:eb:be:71:9f: 9c:b3:c8:51:da:a1:15:d7:45:fb:04:01:7a:89:dd: 5c:c3:fe:2a:82:72:bc:bb:32:a6:e9:a9:1c:d3:45: 3a:8c:ca:fa:86:2d:7f:7d:38:e7:84:c5:57:2f:88: bd:8d:1d:cf:05:d5:77:c1:2b:76:61:26:44:ef:54: 83:f5:a0:3d:c6:8e:23:66:57:ce:98:11:24:34:32: 92:11:bf:b0:7d:c8:2f:44:33:a7:05:7d:f3:9e:78: f3:2a:6e:16:60:1c:28:ec:a7:32:67:c1:6f:2d:78: 65:79:7a:69:6a:75:d3:17:a8:b7:6b:84:c8:31:15: 81:a0:22:c7:c5:09:a3:7a:33:d3:74:8b:7c:a9:01: a7:1f:c1:14:af:63:c4:23:7f:99:31:d8:77:21:82: e4:93:23:8c:05:24:4b:ef:a4:fe:57:48:05:30:2f: 2b:7c:48:db:f1:b5:89:c0:6f:30:db:c5:96:8d:87: ac:c4:84:74:84:ce:17:f5:f1:cf:83:12:39:12:f8: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CA:23:4D:CD:8C:08:D9:D2:11:09:13:CE:87:B3:D7:99:2B:5A:5D X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:96:97:57:3c:c4:67:34:81:25:f0:ea:f5:80:e3:5a:9c:47: 75:7a:01:1a:98:c4:90:49:d6:ce:7b:a0:e7:aa:3e:4b:42:56: 58:ac:be:4c:4d:38:cb:a2:40:79:7b:59:ce:3f:56:32:e3:2e: 1e:8b:71:c2:d6:db:21:06:5a:c1:1a:2e:83:1e:74:e4:cd:3e: 14:ea:ac:de:b1:65:09:26:d8:4b:df:bc:ee:91:81:c7:e5:ff: a2:62:76:fd:17:22:29:03:30:6c:79:f6:b7:4c:92:ba:49:dd: 52:10:0c:5f:ff:b8:21:db:35:f1:38:1e:dd:07:cf:e1:a4:cd: dc:81:a8:45:3e:b8:86:8a:24:c0:f5:59:41:af:aa:99:85:fd: 28:e8:1e:49:5f:9b:4b:c6:c5:a9:b0:e5:13:0e:77:ae:d9:5f: fd:7e:0f:b2:c4:08:0d:34:9f:a9:18:17:51:17:1a:46:e7:b5: ae:94:bf:9d:f0:b6:86:6b:27:ae:b2:44:07:02:fa:46:8b:7a: 2f:9d:c2:4f:0a:2a:c1:cd:97:ea:21:c0:4d:c1:c0:d1:0f:67: e8:a2:ea:11:56:c6:aa:23:19:eb:51:8f:dd:2c:2f:c6:16:eb: 04:4e:c5:09:1f:c9:b6:91:33:fd:7e:f4:88:59:c7:8f:51:e3: be:18:fa:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjUxMTA1MDUwMzI2WhcNMjUxMTEyMDUwMzI2WjAYMRYwFAYD VQQDEw02OTBhZGE5ZS0wNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XNNwZxgJImyQWryGZRMLJEyfpEJw8tKZFph3Jm0HkDgOm8D5H2O/2TAIUFt UnkwqpnD4SCCrOu+cZ+cs8hR2qEV10X7BAF6id1cw/4qgnK8uzKm6akc00U6jMr6 hi1/fTjnhMVXL4i9jR3PBdV3wSt2YSZE71SD9aA9xo4jZlfOmBEkNDKSEb+wfcgv RDOnBX3znnjzKm4WYBwo7KcyZ8FvLXhleXppanXTF6i3a4TIMRWBoCLHxQmjejPT dIt8qQGnH8EUr2PEI3+ZMdh3IYLkkyOMBSRL76T+V0gFMC8rfEjb8bWJwG8w28WW jYesxIR0hM4X9fHPgxI5EvjwvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHKI03N jAjZ0hEJE86Hs9eZK1pdMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBClpdXPMRnNIEl8Or1gONanEd1egEamMSQSdbOe6Dnqj5LQlZYrL5M TTjLokB5e1nOP1Yy4y4ei3HC1tshBlrBGi6DHnTkzT4U6qzesWUJJthL37zukYHH 5f+iYnb9FyIpAzBsefa3TJK6Sd1SEAxf/7gh2zXxOB7dB8/hpM3cgahFPriGiiTA 9VlBr6qZhf0o6B5JX5tLxsWpsOUTDneu2V/9fg+yxAgNNJ+pGBdRFxpG57WulL+d 8LaGayeuskQHAvpGi3ovncJPCirBzZfqIcBNwcDRD2foouoRVsaqIxnrUY/dLC/G FusETsUJH8m2kTP9fvSIWcePUeO+GPpz -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:28 2025 by rpki-client