$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json) Hash identifier: GpXHZZ+nWeMaGrFrZc/xmrn57LwztPZ7B9Gkk/zBces= Subject key identifier: E6:34:9B:EE:20:32:26:9A:57:48:95:CF:B1:C2:03:96:81:69:15:8B Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 09C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft Manifest number: 09BF Signing time: Tue 04 Nov 2025 20:04:48 +0000 Manifest this update: Tue 04 Nov 2025 20:04:48 +0000 Manifest next update: Tue 11 Nov 2025 20:04:48 +0000 Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: Fmt/r+Dgau6eHhp9shdzMI1LQ7DnR4ls15oJPzJLkpk=) 2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: xa2e2Chwv4yeL7fHM+A196uDscfEXGZLiMt2MCiQxb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Validity Not Before: Nov 4 20:04:48 2025 GMT Not After : Nov 11 20:04:48 2025 GMT Subject: CN=690a5c60-ce1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:2c:70:be:0b:96:82:97:58:87:2c:c5:04: 04:36:be:72:2d:e8:dc:7f:0b:9b:56:ad:0a:bd:52: ca:3c:9d:c8:2c:bb:71:66:ed:29:62:ae:09:cc:48: 31:57:3a:77:59:0f:02:87:82:ae:21:c9:74:c7:6c: 00:23:3b:f3:82:ec:c5:41:f4:6b:da:e3:d6:ba:18: 8f:bd:23:c0:12:c0:53:5e:9a:46:df:df:a8:4d:e0: b7:66:c6:ed:06:1a:0c:26:f2:82:54:04:2a:c9:32: 3a:4d:c4:c9:fa:3c:87:a2:d4:19:88:59:76:47:72: 81:94:6b:9a:d4:1a:cb:c9:db:e9:68:9d:7b:b3:f3: 54:d3:83:5a:55:7a:07:6a:17:10:80:77:dd:e5:fd: 75:00:b4:97:79:af:81:3b:3f:d1:db:3f:44:e0:68: e6:d2:73:66:db:6b:38:6f:20:38:d1:d4:3e:05:33: 4d:02:e1:53:78:15:d0:67:d0:53:a8:1b:f0:6d:a9: a3:aa:e7:63:53:85:5f:64:8a:7f:4e:a5:9f:5c:2c: 68:a5:82:65:ae:a7:ae:3d:74:f1:c5:9d:7c:a6:20: 82:51:40:39:a2:68:ef:6f:a3:0b:1c:a2:c1:48:e5: e1:37:56:e7:b2:b9:fe:d3:8c:73:c7:c5:e9:53:ae: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:9B:EE:20:32:26:9A:57:48:95:CF:B1:C2:03:96:81:69:15:8B X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:74:83:bf:07:04:ad:13:12:08:0e:53:c5:98:f9:51:f6:16: fa:c3:57:f2:a6:46:27:c6:b1:ea:b2:e4:4c:08:b6:ee:9b:4b: 9a:02:06:89:ca:6e:8d:59:68:0d:90:96:65:8b:ff:9b:80:21: 72:66:78:3f:1f:d7:e9:9f:a1:bd:62:83:c7:43:e2:50:63:96: 0e:af:da:3e:5b:46:38:14:75:64:82:4b:1f:a4:8a:99:2b:e7: 2f:6d:5a:cb:f9:84:4e:5a:4b:99:72:4c:f0:91:19:c9:31:c4: f1:b4:b8:26:b4:40:79:58:72:6a:37:46:38:f8:c3:f8:1a:8e: 22:27:11:1f:08:62:85:94:b1:73:db:6e:98:0b:33:34:2c:3b: 65:b7:04:f1:c1:87:54:06:a6:65:a8:e3:35:da:7f:0c:b3:dd: 55:eb:51:82:91:f1:01:e3:53:c6:60:3c:7b:db:50:e7:ce:9f: c5:d0:0f:a1:97:0c:a6:11:ab:e5:2e:d4:22:61:cd:85:1f:c3: 6d:5c:49:35:6f:bf:57:48:f9:21:7c:1d:26:aa:60:1d:03:0e: 38:db:ea:c9:ce:83:12:46:14:fa:7b:33:83:e4:4b:bf:d9:bc: fc:11:69:58:a8:8a:77:1b:6d:e3:25:04:18:7b:16:10:30:d9: 5e:66:ca:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjUxMTA0MjAwNDQ4WhcNMjUxMTExMjAwNDQ4WjAYMRYwFAYD VQQDEw02OTBhNWM2MC1jZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2t4scL4LloKXWIcsxQQENr5yLejcfwubVq0KvVLKPJ3ILLtxZu0pYq4JzEgx Vzp3WQ8Ch4KuIcl0x2wAIzvzguzFQfRr2uPWuhiPvSPAEsBTXppG39+oTeC3Zsbt BhoMJvKCVAQqyTI6TcTJ+jyHotQZiFl2R3KBlGua1BrLydvpaJ17s/NU04NaVXoH ahcQgHfd5f11ALSXea+BOz/R2z9E4Gjm0nNm22s4byA40dQ+BTNNAuFTeBXQZ9BT qBvwbamjqudjU4VfZIp/TqWfXCxopYJlrqeuPXTxxZ18piCCUUA5omjvb6MLHKLB SOXhN1bnsrn+04xzx8XpU67hZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY0m+4g MiaaV0iVz7HCA5aBaRWLMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH YmR2eXc1SzNVWnpKREJvUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3dIO/BwStExIIDlPFmPlR9hb6w1fypkYnxrHqsuRMCLbum0uaAgaJ ym6NWWgNkJZli/+bgCFyZng/H9fpn6G9YoPHQ+JQY5YOr9o+W0Y4FHVkgksfpIqZ K+cvbVrL+YROWkuZckzwkRnJMcTxtLgmtEB5WHJqN0Y4+MP4Go4iJxEfCGKFlLFz 226YCzM0LDtltwTxwYdUBqZlqOM12n8Ms91V61GCkfEB41PGYDx721Dnzp/F0A+h lwymEavlLtQiYc2FH8NtXEk1b79XSPkhfB0mqmAdAw442+rJzoMSRhT6ezOD5Eu/ 2bz8EWlYqIp3G23jJQQYexYQMNleZsqG -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:45 2025 by rpki-client