$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: Y3v6ci4jOqlmTIQ8RUmQBQPkGO0wIioF3redHYdIUlI= Subject key identifier: 24:AA:23:2E:03:20:D2:14:46:B6:3A:77:C8:5C:28:D6:49:F7:07:9C Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 01EC Signing time: Wed 05 Nov 2025 02:42:34 +0000 Manifest this update: Wed 05 Nov 2025 02:42:33 +0000 Manifest next update: Wed 12 Nov 2025 02:42:33 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: 4479Awn//VvWV0eB2+wTp4jp2cQUUHWI4Kd5ejZuYLQ=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: Nov 5 02:42:33 2025 GMT Not After : Nov 12 02:42:33 2025 GMT Subject: CN=690ab999-a967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:fc:c3:46:aa:8b:a1:3c:f2:31:6e:e0:51: e0:e1:d8:b9:99:c6:78:00:39:78:53:45:4b:4d:b3: ec:46:3a:83:56:f2:82:47:7c:b1:8b:1b:ab:2b:9a: bd:81:51:10:45:e9:f4:af:45:8b:6c:c5:17:77:9d: b9:61:54:94:99:4a:89:40:58:d9:e0:4b:c4:1c:6f: fe:1f:f1:74:cc:1a:63:0e:47:3b:02:75:9e:d9:c5: c4:1c:04:d8:26:9d:2e:82:f5:d4:4e:03:64:c8:79: 27:81:81:b0:2e:06:8d:af:f4:38:5e:92:68:16:ca: f2:26:78:09:1c:c9:0f:8e:b6:a5:9d:76:b2:49:93: 2a:32:0c:f1:95:6c:a6:aa:24:a4:e9:65:03:a7:c6: 79:ac:72:03:a6:6a:86:a6:01:18:dc:89:c3:6e:df: 91:e0:05:d3:a1:c1:45:59:e0:c6:1e:b5:75:48:ad: 6c:b6:cc:04:6e:27:85:a5:f1:87:fa:bb:31:d6:d4: 7b:8d:4f:eb:a0:24:ef:e2:74:3f:4a:6f:da:8c:00: f6:b7:54:21:08:e8:b8:f0:dc:ff:08:62:4f:29:f7: 6f:4d:62:1d:5c:81:81:f0:fb:58:c5:a9:80:49:02: cc:1a:9f:f7:61:72:42:10:71:4d:b9:15:8c:9f:29: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:23:2E:03:20:D2:14:46:B6:3A:77:C8:5C:28:D6:49:F7:07:9C X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:fe:3c:35:38:dd:7d:66:9f:72:e4:72:e3:54:e1:a1:eb: b1:69:c4:26:ea:7b:db:58:88:41:1d:81:be:cf:12:58:02:7e: 26:7b:12:e4:bd:60:48:33:3a:28:3f:6e:c4:b2:d9:72:1d:e2: 65:53:96:9c:ac:9c:86:52:17:67:34:24:d5:e4:bd:33:f7:18: b2:c8:5a:84:c4:8a:35:b6:21:bc:f1:71:2d:f2:75:b3:e6:7d: b9:37:ea:4d:be:b4:c0:46:0c:d9:a6:3b:00:37:d6:19:e6:67: 15:3b:62:e6:d1:25:75:a4:8a:71:aa:dc:7f:02:cb:95:93:42: dd:95:d6:2d:93:1f:27:e4:36:1f:d0:59:a1:64:27:43:f5:f2: a6:7c:48:7c:20:5e:38:10:4d:7b:81:7f:dc:6d:b7:1f:15:61: 77:0b:30:b5:b9:11:03:f5:17:8a:08:b1:85:1d:e1:e3:13:54: 61:14:76:45:d7:27:4a:bf:f2:a5:ce:c9:55:a1:23:23:b8:ec: 60:b7:7a:c0:cd:25:9e:24:20:49:56:ba:42:f7:78:1c:85:29: ec:ea:d4:bb:82:f6:73:e8:9a:73:b7:90:79:fe:ac:e5:72:6d: 6d:c4:fc:49:14:66:20:73:f9:a4:30:49:d5:18:a9:ec:2e:e5: f3:cb:da:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjUxMTA1MDI0MjMzWhcNMjUxMTEyMDI0MjMzWjAYMRYwFAYD VQQDEw02OTBhYjk5OS1hOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqL8w0aqi6E88jFu4FHg4di5mcZ4ADl4U0VLTbPsRjqDVvKCR3yxixurK5q9 gVEQRen0r0WLbMUXd525YVSUmUqJQFjZ4EvEHG/+H/F0zBpjDkc7AnWe2cXEHATY Jp0ugvXUTgNkyHkngYGwLgaNr/Q4XpJoFsryJngJHMkPjralnXaySZMqMgzxlWym qiSk6WUDp8Z5rHIDpmqGpgEY3InDbt+R4AXTocFFWeDGHrV1SK1stswEbieFpfGH +rsx1tR7jU/roCTv4nQ/Sm/ajAD2t1QhCOi48Nz/CGJPKfdvTWIdXIGB8PtYxamA SQLMGp/3YXJCEHFNuRWMnyl0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSqIy4D INIURrY6d8hcKNZJ9wecMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAKv48NTjdfWafcuRy41ThoeuxacQm6nvbWIhBHYG+zxJYAn4mexLk vWBIMzooP27EstlyHeJlU5acrJyGUhdnNCTV5L0z9xiyyFqExIo1tiG88XEt8nWz 5n25N+pNvrTARgzZpjsAN9YZ5mcVO2Lm0SV1pIpxqtx/AsuVk0LdldYtkx8n5DYf 0FmhZCdD9fKmfEh8IF44EE17gX/cbbcfFWF3CzC1uRED9ReKCLGFHeHjE1RhFHZF 1ydKv/KlzslVoSMjuOxgt3rAzSWeJCBJVrpC93gchSns6tS7gvZz6Jpzt5B5/qzl cm1txPxJFGYgc/mkMEnVGKnsLuXzy9qy -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:47 2025 by rpki-client