$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: pzzjo0/EHxGF4el37ICDOS0mXvVj2r10COW3MeUWsxk= Subject key identifier: 2D:00:81:4C:98:29:CB:AF:85:1E:C2:D6:93:65:12:64:B5:54:A0:27 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34F8 Signing time: Sun 16 Nov 2025 14:46:08 +0000 Manifest this update: Sun 16 Nov 2025 14:46:08 +0000 Manifest next update: Sun 23 Nov 2025 14:46:08 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: b3HJrz+yNDPP4K0qQiah5YImuzGbPy+eJX5393Vh7Is=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Nov 2025 14:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13590 (0x3516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Nov 16 14:46:08 2025 GMT Not After : Nov 23 14:46:08 2025 GMT Subject: CN=6919e3b0-9ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:fa:19:0d:09:b9:7b:10:07:13:d0:0c:a9: 7c:b8:3d:c4:ff:5f:d4:97:9d:7c:30:7c:84:cb:8c: cc:ec:a1:0b:20:e0:8b:af:df:3e:bf:64:99:01:e2: cb:52:93:39:17:ab:7e:ec:31:9c:65:0b:88:b9:53: 26:ab:3f:04:e1:7d:38:7e:05:b2:d9:27:2c:74:b6: bd:eb:4c:da:75:fb:66:a7:1e:35:b5:52:11:6b:e9: 6b:81:d6:66:10:ba:16:76:51:1f:1b:0f:44:9a:ce: d3:64:d7:24:86:64:c4:e1:d9:72:e9:e2:73:56:06: 66:5a:ff:ea:a3:54:54:d6:15:56:01:5b:70:bd:e0: f3:8e:0f:6f:ed:e8:20:94:cf:20:69:a8:e2:cc:74: 77:3c:69:54:b1:0b:bf:b9:1d:ad:bc:1a:0d:66:5f: 19:0d:82:95:53:42:ea:52:e0:b5:7a:34:4f:ea:d5: f5:67:48:41:90:29:a1:68:49:df:78:3d:71:70:a4: 5d:46:e7:be:8d:83:31:91:59:fb:69:23:bb:a8:b4: be:a2:69:9e:bd:78:28:4e:e4:53:0b:fb:3a:ba:57: eb:d1:f5:41:f0:d5:ea:3b:a4:dc:7c:2e:fa:a6:88: b7:81:30:be:61:c0:d1:fc:3e:fa:ba:4f:dd:9e:ab: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:00:81:4C:98:29:CB:AF:85:1E:C2:D6:93:65:12:64:B5:54:A0:27 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:aa:3c:d0:99:08:2f:c3:46:b9:24:32:ae:9e:59:7f:ba:35: 5a:8b:4d:b9:be:5d:c4:13:6f:ae:51:a9:82:cb:b9:b2:70:e1: a2:8c:d4:44:ba:c1:51:24:6a:69:97:16:d2:5d:40:3b:45:a5: 4e:d6:9f:ba:f5:8e:1b:92:94:d8:9d:fe:b7:a2:39:9f:ed:a6: c8:a4:02:4e:67:26:32:9f:43:0b:5b:28:e9:3a:7f:d2:1a:92: e2:81:c3:96:2d:01:ab:96:ce:ce:c5:00:80:a6:0b:b3:87:fb: 20:ce:6f:0f:2f:41:e3:8f:01:93:6b:4e:9e:fd:32:0e:50:80: 75:ad:99:cf:f3:4a:65:37:5d:d9:cd:86:f7:4e:00:04:b5:47: 78:17:8c:cb:b4:76:8b:47:99:05:d7:f4:30:f8:a8:d2:ef:f0: 90:39:09:9e:45:89:aa:91:f2:a6:c6:8c:b8:5d:e0:b7:2a:38: 87:16:b3:62:c5:43:29:0b:3e:38:3f:e0:a1:4d:ef:21:f6:4b: 31:f0:d5:80:27:3c:00:68:62:20:64:14:33:79:be:62:50:10: d7:a9:db:2f:b0:d2:af:27:48:3b:70:08:1d:06:c0:23:25:b4: 06:f1:0d:4e:92:80:4a:d3:1c:f5:a0:83:eb:05:74:1b:de:81: ad:1d:2d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUxMTE2MTQ0NjA4WhcNMjUxMTIzMTQ0NjA4WjAYMRYwFAYD VQQDEw02OTE5ZTNiMC05YmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn/6GQ0JuXsQBxPQDKl8uD3E/1/Ul518MHyEy4zM7KELIOCLr98+v2SZAeLL UpM5F6t+7DGcZQuIuVMmqz8E4X04fgWy2ScsdLa960zadftmpx41tVIRa+lrgdZm ELoWdlEfGw9Ems7TZNckhmTE4dly6eJzVgZmWv/qo1RU1hVWAVtwveDzjg9v7egg lM8gaajizHR3PGlUsQu/uR2tvBoNZl8ZDYKVU0LqUuC1ejRP6tX1Z0hBkCmhaEnf eD1xcKRdRue+jYMxkVn7aSO7qLS+ommevXgoTuRTC/s6ulfr0fVB8NXqO6TcfC76 poi3gTC+YcDR/D76uk/dnqvr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0AgUyY KcuvhR7C1pNlEmS1VKAnMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOqjzQmQgvw0a5JDKunll/ujVai025vl3EE2+uUamCy7mycOGijNRE usFRJGpplxbSXUA7RaVO1p+69Y4bkpTYnf63ojmf7abIpAJOZyYyn0MLWyjpOn/S GpLigcOWLQGrls7OxQCApguzh/sgzm8PL0HjjwGTa06e/TIOUIB1rZnP80plN13Z zYb3TgAEtUd4F4zLtHaLR5kF1/Qw+KjS7/CQOQmeRYmqkfKmxoy4XeC3KjiHFrNi xUMpCz44P+ChTe8h9ksx8NWAJzwAaGIgZBQzeb5iUBDXqdsvsNKvJ0g7cAgdBsAj JbQG8Q1OkoBK0xz1oIPrBXQb3oGtHS15 -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:16 2025 by rpki-client