$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: lLJMviNtBXPpqBYUlai79c1ttGBloorKiSpgM3fXgXY= Subject key identifier: 60:33:AE:A0:89:E1:AB:41:40:ED:CA:8A:AC:31:E7:CD:BE:06:F6:94 Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 117D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 1166 Signing time: Tue 04 Nov 2025 17:20:22 +0000 Manifest this update: Tue 04 Nov 2025 17:20:22 +0000 Manifest next update: Tue 11 Nov 2025 17:20:22 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: y+znr33KZO75AxAgdQp4HX1HcYNZbXqbCuhiMl4hCew=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: YvhnTG1A1W5kz0Vch4cPsIzgbILMaDioP1ySIyj5aeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4477 (0x117d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: Nov 4 17:20:22 2025 GMT Not After : Nov 11 17:20:22 2025 GMT Subject: CN=690a35d6-ef5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:e2:3c:99:d9:ac:7c:f4:cf:2d:4d:10:54: 62:95:25:ba:fd:2f:70:1d:d5:7e:fc:44:e2:55:5b: 47:24:58:50:aa:f4:d7:ee:0d:4b:9d:b2:c8:ca:df: 0f:b2:de:e5:73:04:1a:26:43:71:c3:e7:72:91:23: c7:f9:12:b1:d4:72:2f:f2:99:1d:04:ef:ca:4c:8b: 67:a9:bb:f4:4b:6d:34:e6:90:ac:67:ca:c0:6d:17: 9d:9f:0c:5c:c5:53:32:4e:93:fd:61:ae:2d:cf:f0: 2d:48:aa:99:f1:b7:3d:16:a6:a8:2e:1d:48:55:ee: b9:f4:ac:da:9e:18:ae:77:d9:ce:35:83:0f:aa:fb: 90:40:f0:02:64:15:64:72:92:85:12:48:c2:1f:3a: 17:40:e4:80:3b:ed:f5:b9:37:ee:1b:b9:65:46:72: db:57:ed:5f:ca:dd:d7:63:e9:bd:fe:25:10:a7:a2: 94:a1:4a:dd:36:82:40:65:bf:37:12:9e:56:37:ea: 42:2d:2c:19:e3:10:b0:dd:d9:b2:33:23:d9:cf:86: ec:6e:98:0f:b5:65:52:ce:d6:b5:f3:b6:e0:19:2d: 8e:d5:43:f7:57:7e:1a:3a:81:e9:65:bc:84:bb:c3: 76:d7:30:ca:43:53:f0:f1:53:08:79:ba:24:f3:bc: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:AE:A0:89:E1:AB:41:40:ED:CA:8A:AC:31:E7:CD:BE:06:F6:94 X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f7:f8:72:b7:4c:f3:b4:94:70:fb:5c:6a:41:81:71:79:91: 88:54:9a:38:ab:d7:cf:30:c9:7f:0a:3d:c6:48:f7:41:b1:be: 8d:35:e2:08:83:c8:68:23:43:55:2f:d9:33:f5:fc:51:78:54: 61:8f:53:a6:02:2c:81:e4:9a:e7:44:a5:87:db:27:cd:fe:fc: ba:88:52:a0:86:ce:69:23:43:12:f1:b2:63:8e:ea:f6:cc:cd: e4:74:16:20:4b:b1:0e:a0:3f:01:71:bb:05:6b:b8:62:c2:f3: 80:98:7e:e9:8e:56:dc:3f:97:d8:45:10:76:66:d5:88:98:1b: 3b:4d:91:80:95:44:c6:3d:b4:22:62:0a:49:42:82:ba:a4:dd: fc:96:fc:89:95:e1:30:63:0c:d6:24:71:f3:7d:35:58:84:a7: 29:34:64:98:fe:b8:57:9c:64:63:91:cc:9f:7b:85:bb:8e:3a: b0:db:db:c4:96:0c:1b:d8:d1:42:7b:de:9a:b8:e8:ad:fb:fa: e2:96:d4:d1:90:e2:64:f9:e5:c5:b1:b9:ce:89:ba:f2:47:8c: ca:55:49:01:7e:00:51:f4:93:a5:2e:00:c7:9f:56:74:75:68: 93:0b:1f:1d:51:a0:3b:8c:70:c1:0f:b8:d5:7a:de:53:31:b6: af:b3:a5:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjUxMTA0MTcyMDIyWhcNMjUxMTExMTcyMDIyWjAYMRYwFAYD VQQDEw02OTBhMzVkNi1lZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R/iPJnZrHz0zy1NEFRilSW6/S9wHdV+/ETiVVtHJFhQqvTX7g1LnbLIyt8P st7lcwQaJkNxw+dykSPH+RKx1HIv8pkdBO/KTItnqbv0S2005pCsZ8rAbRednwxc xVMyTpP9Ya4tz/AtSKqZ8bc9FqaoLh1IVe659Kzanhiud9nONYMPqvuQQPACZBVk cpKFEkjCHzoXQOSAO+31uTfuG7llRnLbV+1fyt3XY+m9/iUQp6KUoUrdNoJAZb83 Ep5WN+pCLSwZ4xCw3dmyMyPZz4bsbpgPtWVSzta187bgGS2O1UP3V34aOoHpZbyE u8N21zDKQ1Pw8VMIebok87xUwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAzrqCJ 4atBQO3Kiqwx582+BvaUMB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA29/hyt0zztJRw+1xqQYFxeZGIVJo4q9fPMMl/Cj3GSPdBsb6NNeII g8hoI0NVL9kz9fxReFRhj1OmAiyB5JrnRKWH2yfN/vy6iFKghs5pI0MS8bJjjur2 zM3kdBYgS7EOoD8BcbsFa7hiwvOAmH7pjlbcP5fYRRB2ZtWImBs7TZGAlUTGPbQi YgpJQoK6pN38lvyJleEwYwzWJHHzfTVYhKcpNGSY/rhXnGRjkcyfe4W7jjqw29vE lgwb2NFCe96auOit+/riltTRkOJk+eXFsbnOibryR4zKVUkBfgBR9JOlLgDHn1Z0 dWiTCx8dUaA7jHDBD7jVet5TMbavs6Ui -----END CERTIFICATE-----Generated at Wed Nov 5 17:07:56 2025 by rpki-client