$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: pS+85rCewab/kO6iL9eciRCgIDbsApXyswB+ivsXvaI= Subject key identifier: A2:26:8C:16:16:5B:F2:E4:1B:00:79:5F:A2:99:5C:C8:D8:31:69:F2 Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 049D Signing time: Mon 03 Nov 2025 01:04:30 +0000 Manifest this update: Mon 03 Nov 2025 01:04:29 +0000 Manifest next update: Mon 10 Nov 2025 01:04:29 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: BZd2q2HRTcK1LpikNvqI8BQfPGhIXEofE1a5xUVOu/g=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: aBiTKrdRm+ziRS/jKwG3ua8HiLf0c5Bx0y3taLaPOUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Nov 3 01:04:29 2025 GMT Not After : Nov 10 01:04:29 2025 GMT Subject: CN=6907ff9d-1f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:f9:58:e4:2f:09:fd:a9:d4:a0:be:57:8e: 3e:08:e8:39:55:88:6f:4c:a6:50:a1:19:9d:a4:aa: 79:2a:06:28:ee:f5:9c:93:66:1f:2b:02:4d:e2:41: 84:8f:0c:85:27:21:05:4f:b9:3a:e5:84:32:dd:c7: 62:0c:11:d5:cf:2d:21:d8:78:29:ae:2c:23:4a:bb: 27:7c:22:71:2d:0d:a2:bb:09:cf:7f:59:b1:1c:cb: 97:5f:0a:75:8a:f0:8b:a3:0e:26:12:3f:a5:f7:27: 2f:8f:9f:1a:7f:07:04:60:ed:ba:c6:a3:e3:17:9b: 6b:fd:78:5c:21:8b:67:f9:1e:c2:8a:aa:e5:77:80: 6f:0d:39:54:d8:8b:15:44:30:8d:7c:30:77:0a:05: 27:94:fd:5c:28:73:ed:1e:72:e3:82:1a:4e:a6:44: df:ed:71:5e:a2:0c:db:54:53:38:6f:2a:ab:1c:ea: a5:c6:6a:7d:1b:25:6d:01:fd:b0:09:56:a1:53:bf: 11:6e:f8:b7:34:12:21:b5:52:d1:dd:f1:0e:45:11: cd:a9:53:15:b1:69:14:cc:5e:24:77:a1:ce:73:9b: d2:57:95:57:25:00:4c:d6:29:a7:85:b8:6f:3c:3d: 23:76:48:78:45:03:4a:fd:0b:bd:b6:87:24:3d:fe: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:26:8C:16:16:5B:F2:E4:1B:00:79:5F:A2:99:5C:C8:D8:31:69:F2 X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c8:15:b3:88:3f:f0:08:84:f0:35:19:37:e7:1f:cf:d9:a6: 6c:5d:07:65:db:42:3b:78:a8:2b:11:db:7a:9a:5f:f2:4d:24: 09:4c:ca:70:2e:db:d8:10:70:a5:18:0b:f5:f0:a7:5d:10:47: 4e:56:91:f0:4d:9c:8c:8a:b4:ed:50:49:da:d2:90:6e:b3:90: 4d:f9:77:2b:23:c2:83:5c:a1:0a:13:d3:5c:f7:ba:09:4c:a5: ec:76:40:b5:04:c5:ac:73:c1:4b:7b:d8:2b:92:ba:b4:94:2a: 1c:57:11:ea:d8:59:2e:e2:65:05:c3:8f:c5:37:06:a7:62:9e: 35:95:d8:90:06:25:ff:86:42:d6:58:9b:94:94:1e:47:00:91: 06:aa:48:04:68:64:71:60:31:9b:4d:ba:f1:dd:55:4d:48:c1: 22:df:9e:e1:ba:74:7d:ca:5f:30:94:f4:c1:1c:f7:73:b8:d0: 40:55:7d:7c:74:62:9e:22:67:b9:41:be:ab:64:87:62:77:59: 50:41:c8:c2:13:45:aa:e5:53:5b:18:a2:f2:a6:ed:3b:5a:79: 8a:3d:f3:b9:28:a3:35:a6:fb:ff:d0:c4:7d:bf:79:6d:0b:fb: 17:58:8d:43:8a:cc:1d:28:15:a4:c7:04:0f:30:83:22:22:ca: 42:34:23:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjUxMTAzMDEwNDI5WhcNMjUxMTEwMDEwNDI5WjAYMRYwFAYD VQQDEw02OTA3ZmY5ZC0xZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05b5WOQvCf2p1KC+V44+COg5VYhvTKZQoRmdpKp5KgYo7vWck2YfKwJN4kGE jwyFJyEFT7k65YQy3cdiDBHVzy0h2HgpriwjSrsnfCJxLQ2iuwnPf1mxHMuXXwp1 ivCLow4mEj+l9ycvj58afwcEYO26xqPjF5tr/XhcIYtn+R7Ciqrld4BvDTlU2IsV RDCNfDB3CgUnlP1cKHPtHnLjghpOpkTf7XFeogzbVFM4byqrHOqlxmp9GyVtAf2w CVahU78Rbvi3NBIhtVLR3fEORRHNqVMVsWkUzF4kd6HOc5vSV5VXJQBM1imnhbhv PD0jdkh4RQNK/Qu9tockPf6sbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKImjBYW W/LkGwB5X6KZXMjYMWnyMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdyBWziD/wCITwNRk35x/P2aZsXQdl20I7eKgrEdt6ml/yTSQJTMpw LtvYEHClGAv18KddEEdOVpHwTZyMirTtUEna0pBus5BN+XcrI8KDXKEKE9Nc97oJ TKXsdkC1BMWsc8FLe9grkrq0lCocVxHq2Fku4mUFw4/FNwanYp41ldiQBiX/hkLW WJuUlB5HAJEGqkgEaGRxYDGbTbrx3VVNSMEi357hunR9yl8wlPTBHPdzuNBAVX18 dGKeIme5Qb6rZIdid1lQQcjCE0Wq5VNbGKLypu07WnmKPfO5KKM1pvv/0MR9v3lt C/sXWI1DiswdKBWkxwQPMIMiIspCNCOz -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:44 2025 by rpki-client