$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: 9Ito0PhPp1qyYaYFw/s8upaAEO5eNtXnKmiIw7SvW8E= Subject key identifier: E5:8A:27:DB:77:35:B8:AC:4A:3B:65:91:23:A9:B9:9E:24:94:37:E8 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 0195 Signing time: Mon 03 Nov 2025 03:25:01 +0000 Manifest this update: Mon 03 Nov 2025 03:25:00 +0000 Manifest next update: Mon 10 Nov 2025 03:25:00 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: 51CJ64o8klfin0bf0geQg6NCWZYWn4yb+AooGCKgh4s=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: pevsaD4Tdrw3Ixu5KEE5rMHmedLOctKuJ/befOUTShA=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: T8iSluo7SP9pG/tufgbYgInS5lll4OSd156UhBgQ4N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Nov 3 03:25:00 2025 GMT Not After : Nov 10 03:25:00 2025 GMT Subject: CN=6908208d-e364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:ef:28:ff:6c:45:0a:d5:cf:1e:52:14:16: c4:4d:46:42:64:32:60:9a:42:d1:9b:78:4e:39:4e: fa:cf:b5:34:d7:dc:f4:fb:48:8e:2e:b6:2a:03:b8: 38:47:71:1b:ce:7b:16:5c:96:26:95:a7:65:83:2c: 84:29:e1:a6:62:d7:bb:b5:fa:33:4b:f7:10:e5:52: 7d:1f:cf:02:30:2e:bd:ce:d9:69:65:65:96:58:d3: 5f:db:bf:aa:89:cf:05:26:39:1e:77:97:07:eb:91: e4:7d:36:31:a0:0b:ca:ae:15:dc:73:51:59:0b:79: 41:f8:cd:1b:3f:1b:94:44:99:9a:6c:bd:c0:96:f8: ff:b2:45:94:01:2e:7c:52:5d:56:4b:2f:90:b6:80: d2:55:22:b1:8b:ae:03:67:63:fc:c1:b1:c3:3d:fc: 8d:dd:af:66:a6:5f:2b:e5:7a:55:48:c6:1d:0b:0a: 8b:a2:3b:35:e1:61:63:f9:da:1f:af:ba:79:15:49: ab:12:17:bf:60:ab:64:75:e6:b5:cc:2f:bb:12:31: 3a:9b:57:55:4e:e7:13:fa:3d:74:3c:16:c3:94:02: e7:00:a2:41:1a:8a:05:47:73:e9:fd:aa:a7:28:09: aa:d3:4f:4f:7c:45:4d:d8:af:20:2e:29:23:12:2d: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:27:DB:77:35:B8:AC:4A:3B:65:91:23:A9:B9:9E:24:94:37:E8 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:10:89:45:f8:ae:b7:15:24:f7:97:5f:58:c8:9e:c5:58:83: 93:a1:bc:b4:7f:7f:62:14:5d:35:c6:8a:8f:cc:63:e1:5f:b6: 21:28:86:17:a4:9a:5c:99:68:fc:11:70:78:49:2a:bd:b8:8a: 05:99:9c:4d:ca:b6:58:6f:c0:d1:87:f2:7f:a9:08:10:8a:8b: 05:64:46:9d:70:8b:d2:51:14:d8:f2:29:bf:92:19:93:23:3c: 09:6d:4a:5b:94:9b:73:09:3d:dd:ec:c6:36:e9:0a:fd:3d:c1: 3e:b7:89:59:db:2d:7f:c9:07:6e:81:12:45:36:c5:7d:b8:6e: 17:cf:6f:bd:1b:62:66:5a:3e:13:43:cf:ec:c7:23:39:3a:8a: 71:87:ca:29:8a:1f:42:0d:2f:96:a8:be:6b:aa:c0:d9:ed:04: 93:20:80:35:7e:43:6b:76:bf:94:7f:7c:6b:48:9c:5f:8d:f2: be:a8:35:05:5c:3c:16:bb:13:d3:f0:08:93:48:93:0a:f1:0b: 69:a5:5b:a1:58:7c:3b:fd:49:ee:a2:fc:43:e5:7b:63:1f:50: 1a:02:f6:46:dc:83:6d:73:8b:1a:f1:c7:a9:3c:c6:44:0c:7b: e4:18:3f:20:c0:57:c2:8a:3d:e3:7a:7f:c7:72:0c:54:7c:94: a5:9b:87:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjUxMTAzMDMyNTAwWhcNMjUxMTEwMDMyNTAwWjAYMRYwFAYD VQQDEw02OTA4MjA4ZC1lMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfHvKP9sRQrVzx5SFBbETUZCZDJgmkLRm3hOOU76z7U019z0+0iOLrYqA7g4 R3EbznsWXJYmladlgyyEKeGmYte7tfozS/cQ5VJ9H88CMC69ztlpZWWWWNNf27+q ic8FJjked5cH65HkfTYxoAvKrhXcc1FZC3lB+M0bPxuURJmabL3Alvj/skWUAS58 Ul1WSy+QtoDSVSKxi64DZ2P8wbHDPfyN3a9mpl8r5XpVSMYdCwqLojs14WFj+dof r7p5FUmrEhe/YKtkdea1zC+7EjE6m1dVTucT+j10PBbDlALnAKJBGooFR3Pp/aqn KAmq009PfEVN2K8gLikjEi3X2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWKJ9t3 NbisSjtlkSOpuZ4klDfoMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1EIlF+K63FST3l19YyJ7FWIOToby0f39iFF01xoqPzGPhX7YhKIYX pJpcmWj8EXB4SSq9uIoFmZxNyrZYb8DRh/J/qQgQiosFZEadcIvSURTY8im/khmT IzwJbUpblJtzCT3d7MY26Qr9PcE+t4lZ2y1/yQdugRJFNsV9uG4Xz2+9G2JmWj4T Q8/sxyM5Oopxh8opih9CDS+WqL5rqsDZ7QSTIIA1fkNrdr+Uf3xrSJxfjfK+qDUF XDwWuxPT8AiTSJMK8QtppVuhWHw7/UnuovxD5XtjH1AaAvZG3INtc4sa8cepPMZE DHvkGD8gwFfCij3jen/HcgxUfJSlm4dB -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:08 2025 by rpki-client