$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: diUvEMbI727Ryxdni9YCPvMgx7SoZE1uU1x+g4eXRfY= Subject key identifier: 8E:ED:D2:69:70:2B:01:BD:B2:7C:B8:F0:F9:E5:DE:0F:75:19:DF:CA Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 0B Signing time: Sat 11 Oct 2025 01:51:25 +0000 Manifest this update: Sat 11 Oct 2025 01:51:25 +0000 Manifest next update: Sat 18 Oct 2025 01:51:25 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: MnUnJKK8KnhQFJFW8cRhTVZO8oUUTdD4f4RDGlnOC20=) 2: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: iNZxFEtD+6QgSBLSeVmK2n+qo/Nt14F+67ViKVlRAEM=) 3: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: 5/hHV8J+lxETAhi9OjQgXXrOD+uCMVkbm4MOQS088qU=) 4: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ybEJ6ypns4vD/7VDe+vdDoeXho9P9fe6phtZ1wIUdQE=) 5: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OgKrAW2/hv9VaZwZaVK6Fa0FucKowEYv+xHmxWRfKg0=) 6: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: KjekvWkyVk2ufW3sUCxTn0USOTGpHbibGBSsaXBYXww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Oct 2025 01:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 11 01:51:25 2025 GMT Not After : Oct 18 01:51:25 2025 GMT Subject: CN=68e9b81d-f620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:84:ff:30:0a:70:00:d2:a6:23:d8:86:df: 65:95:42:82:26:83:6c:01:c9:4d:6c:71:fe:83:ff: 2e:35:a6:a2:23:d9:1a:59:f7:21:58:31:7f:6a:7e: 48:33:23:f5:6f:56:98:35:4c:cf:c9:bf:1e:5e:5b: 66:41:6e:c1:8a:aa:b2:ab:26:ec:e4:5a:dc:c4:8f: 87:81:98:19:c5:f3:8f:56:42:b3:03:1c:8d:66:99: 80:83:97:0d:7c:8a:94:5f:e6:9a:c0:14:3d:bd:24: 8d:c9:70:b2:5b:cb:92:f2:13:dd:ea:aa:74:31:8d: a2:55:bc:c2:54:42:85:d0:9b:03:4e:e6:eb:aa:0b: c2:91:aa:d0:69:1a:a3:da:37:56:e6:a8:2e:52:77: 74:db:43:54:fc:7e:d9:04:72:03:d4:0d:6b:c0:f6: a2:77:14:f3:84:b0:e0:27:3c:56:41:17:0b:d3:fa: 23:66:30:59:99:d9:98:ef:0b:dd:97:d5:11:46:e3: 3b:eb:81:05:40:bf:91:96:d3:5f:4c:97:35:04:f4: d5:7b:9d:a8:9d:55:6c:5b:30:17:9a:1c:44:16:10: df:10:5d:eb:24:fc:be:14:e6:47:e2:53:8f:62:5b: 1b:70:4f:14:87:56:2e:2e:b1:96:87:cd:5c:b0:b2: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:ED:D2:69:70:2B:01:BD:B2:7C:B8:F0:F9:E5:DE:0F:75:19:DF:CA X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:1e:dc:90:5e:e8:36:96:06:3f:14:3d:c5:1a:80:2d:0e:27: 8e:0e:83:2d:54:79:ad:be:3b:d6:76:52:25:22:f0:14:1b:3b: 47:a4:58:39:10:35:c2:0c:01:7a:21:03:47:58:8f:25:87:c1: 5c:88:66:ed:7c:5a:af:67:1a:70:1a:f4:90:c5:b4:e4:e6:72: d4:79:a5:37:16:10:80:cf:62:7e:37:2c:e6:c0:c4:da:c5:27: 17:c8:f3:2a:b3:a4:36:2b:1b:a5:e6:90:83:53:f8:fb:c8:ad: 18:d1:2e:75:26:86:29:a9:f3:7a:51:47:17:28:ba:63:7f:dc: e9:ef:0f:4a:84:c4:38:c5:a2:b2:1d:62:16:53:fe:25:f5:96: 33:19:f3:87:f9:ae:ac:3f:e3:22:1a:fe:6c:c4:37:14:8e:ab: 90:12:94:a2:bd:ba:10:44:ee:97:36:c2:7c:e4:f7:65:8f:80: 8b:d2:45:48:0f:d8:7f:8d:c4:42:19:e7:83:fe:ac:d3:4c:1d: 0e:cd:19:e9:ba:a2:30:9d:c5:5f:b1:51:ef:9d:a2:02:b0:f1: 8f:84:23:fc:92:51:c0:bc:55:43:a3:00:3e:ab:51:a0:48:d2: dd:ec:b8:f3:1a:bd:e6:b7:fd:5f:36:7b:ce:60:47:a7:ae:48: 61:12:a0:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTEwMTEwMTUxMjVaFw0yNTEwMTgwMTUxMjVaMBgxFjAUBgNV BAMTDTY4ZTliODFkLWY2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9t4T/MApwANKmI9iG32WVQoImg2wByU1scf6D/y41pqIj2RpZ9yFYMX9qfkgz I/VvVpg1TM/Jvx5eW2ZBbsGKqrKrJuzkWtzEj4eBmBnF849WQrMDHI1mmYCDlw18 ipRf5prAFD29JI3JcLJby5LyE93qqnQxjaJVvMJUQoXQmwNO5uuqC8KRqtBpGqPa N1bmqC5Sd3TbQ1T8ftkEcgPUDWvA9qJ3FPOEsOAnPFZBFwvT+iNmMFmZ2ZjvC92X 1RFG4zvrgQVAv5GW019MlzUE9NV7naidVWxbMBeaHEQWEN8QXesk/L4U5kfiU49i WxtwTxSHVi4usZaHzVywso5zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUju3SaXAr Ab2yfLjw+eXeD3UZ38owHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzli UTVyYXprV2UyWENFSklSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAe3JBe6DaWBj8UPcUagC0OJ44Ogy1Uea2+O9Z2UiUi8BQbO0ekWDkQ NcIMAXohA0dYjyWHwVyIZu18Wq9nGnAa9JDFtOTmctR5pTcWEIDPYn43LObAxNrF JxfI8yqzpDYrG6XmkINT+PvIrRjRLnUmhimp83pRRxcoumN/3OnvD0qExDjForId YhZT/iX1ljMZ84f5rqw/4yIa/mzENxSOq5ASlKK9uhBE7pc2wnzk92WPgIvSRUgP 2H+NxEIZ54P+rNNMHQ7NGem6ojCdxV+xUe+dogKw8Y+EI/ySUcC8VUOjAD6rUaBI 0t3suPMavea3/V82e85gR6euSGESoAc= -----END CERTIFICATE-----Generated at Sat Oct 11 10:38:46 2025 by rpki-client