$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: Be1ztJqPS41Jx2M0BLhLZYuptUDHFfgUEKo+h5ne2F4= Subject key identifier: 3F:01:FF:FA:D2:B2:CC:5A:BE:2D:34:24:EE:6A:8C:DC:FD:33:8C:28 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: DA Signing time: Wed 05 Nov 2025 05:46:20 +0000 Manifest this update: Wed 05 Nov 2025 05:46:20 +0000 Manifest next update: Wed 12 Nov 2025 05:46:19 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: UAVciJqXnatX/92tbQZfMQNiNPiFUFDIQh/rdDP1+CM=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: 7fW7uEIf5Uxrex5CiNo83dZcK5fiFFBbbMhh8zy3jv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Nov 5 05:46:20 2025 GMT Not After : Nov 12 05:46:19 2025 GMT Subject: CN=690ae4ac-4c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:ff:30:90:78:aa:c8:96:1b:51:74:9f:20: 7c:94:c7:27:9e:19:1c:1d:e6:59:45:74:3d:d5:4f: cc:0f:b8:3c:70:ec:8d:3d:c7:18:43:0b:c1:07:86: 82:f0:cd:3b:a7:9d:3a:6a:de:a6:54:91:54:69:cd: 53:cb:0b:89:49:2e:9d:15:eb:d3:62:82:2a:42:0b: a2:33:46:07:9f:40:2f:7c:0c:bf:73:9c:6e:88:fd: 7e:8e:15:63:b2:8a:1e:9d:3b:01:08:47:dc:ba:0b: 9d:9e:7e:b5:78:f0:bf:ec:57:9c:0b:9b:05:b6:ce: 3a:52:5d:62:99:c6:63:5b:60:75:66:0e:ce:81:48: 58:a3:aa:fc:7a:69:77:e1:a4:4f:71:7e:b1:0c:43: 93:0d:9b:92:f8:e2:13:1b:a3:8f:c0:68:e4:46:10: 70:d5:97:58:a0:4e:11:f4:36:03:7f:08:13:10:0d: f9:3f:46:73:62:33:b6:08:97:93:ae:02:c6:9d:83: 6a:61:ad:e5:26:40:61:c0:96:0f:fb:e0:2d:ac:24: 12:16:9f:03:50:6f:fe:e7:41:85:f9:0c:65:12:53: 69:b6:a5:43:89:e0:d7:3d:9b:f8:3c:80:67:ed:91: c2:85:ef:c8:7c:ce:bb:40:a3:8a:09:f5:fd:95:17: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:01:FF:FA:D2:B2:CC:5A:BE:2D:34:24:EE:6A:8C:DC:FD:33:8C:28 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:94:56:9e:7e:c3:a0:8d:23:b7:10:13:b6:76:97:d9:38:75: 9e:31:f9:66:c2:3a:3b:d7:7d:e4:f8:49:12:a7:f0:f9:6b:ce: b6:45:5d:3b:50:58:db:c4:62:0c:74:d5:35:ef:aa:ab:9f:e7: d4:6c:86:bc:a4:44:99:39:f1:44:93:46:a9:f1:12:92:35:5a: 1c:97:26:7f:16:17:5e:9b:a3:f7:62:59:c3:dc:9d:fa:d4:e1: cd:58:f1:2a:4a:ed:e4:e2:6c:91:a5:f3:cf:fb:f0:41:b7:db: 52:fa:cd:c6:b9:ed:48:ed:f4:61:54:de:d3:c0:e7:22:f8:ce: 98:be:88:4e:84:a3:89:50:0c:a7:54:cd:ee:91:d7:9a:04:a1: d3:f5:e2:ea:23:d8:31:8e:8a:f0:e9:da:47:e8:8e:1a:30:33: 06:fa:5e:93:e1:ff:56:14:f9:76:09:bd:49:8d:16:58:43:92: e3:98:cb:3b:72:a1:f4:8c:0e:d6:86:41:86:d5:b5:57:36:31: d5:b2:e9:ab:52:6f:a9:89:20:e4:55:46:13:28:a8:7e:f7:23: 01:d9:c0:6e:e6:77:f2:fc:9b:d2:45:b6:04:40:8e:7b:7c:ed: ca:a3:6e:e2:c9:14:78:45:e9:dc:db:2a:a7:79:3d:49:04:52: 75:e5:8f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUxMTA1MDU0NjIwWhcNMjUxMTEyMDU0NjE5WjAYMRYwFAYD VQQDEw02OTBhZTRhYy00YzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljv/MJB4qsiWG1F0nyB8lMcnnhkcHeZZRXQ91U/MD7g8cOyNPccYQwvBB4aC 8M07p506at6mVJFUac1TywuJSS6dFevTYoIqQguiM0YHn0AvfAy/c5xuiP1+jhVj sooenTsBCEfcugudnn61ePC/7FecC5sFts46Ul1imcZjW2B1Zg7OgUhYo6r8eml3 4aRPcX6xDEOTDZuS+OITG6OPwGjkRhBw1ZdYoE4R9DYDfwgTEA35P0ZzYjO2CJeT rgLGnYNqYa3lJkBhwJYP++AtrCQSFp8DUG/+50GF+QxlElNptqVDieDXPZv4PIBn 7ZHChe/IfM67QKOKCfX9lRfxCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8B//rS ssxavi00JO5qjNz9M4woMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASlFaefsOgjSO3EBO2dpfZOHWeMflmwjo7133k+EkSp/D5a862RV07 UFjbxGIMdNU176qrn+fUbIa8pESZOfFEk0ap8RKSNVoclyZ/Fhdem6P3YlnD3J36 1OHNWPEqSu3k4myRpfPP+/BBt9tS+s3Gue1I7fRhVN7TwOci+M6YvohOhKOJUAyn VM3ukdeaBKHT9eLqI9gxjorw6dpH6I4aMDMG+l6T4f9WFPl2Cb1JjRZYQ5LjmMs7 cqH0jA7WhkGG1bVXNjHVsumrUm+piSDkVUYTKKh+9yMB2cBu5nfy/JvSRbYEQI57 fO3Ko27iyRR4Renc2yqneT1JBFJ15Y++ -----END CERTIFICATE-----Generated at Thu Nov 6 02:36:34 2025 by rpki-client