$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: Vsxc/rHzqx+vG4M4IlIpoeLOECbBsQb+LF4P1a877bY= Subject key identifier: 1A:34:1E:4D:4D:E3:97:38:10:B0:F9:D1:9B:8A:3E:5F:D5:43:64:14 Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 06B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 06B0 Signing time: Tue 04 Nov 2025 22:21:04 +0000 Manifest this update: Tue 04 Nov 2025 22:21:04 +0000 Manifest next update: Tue 11 Nov 2025 22:21:04 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: nCSpQb/6Q5V58/EAIKQjxlN5LVf20xR7rwwPg3jMNYk=) 2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: Nov 4 22:21:04 2025 GMT Not After : Nov 11 22:21:04 2025 GMT Subject: CN=690a7c50-f3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:56:7d:8d:dd:58:44:3f:fe:a3:84:50:16: df:a0:3e:85:dd:9e:7f:fd:47:18:e7:f6:03:60:5d: c1:90:df:68:4d:bb:09:7d:ef:45:b4:8c:dd:61:8a: 8b:bb:aa:93:ae:a8:69:86:98:7f:20:93:2a:6f:51: 6f:9e:0f:7c:57:b2:14:c7:af:c3:c7:15:f4:49:e5: 60:ae:e4:9d:2b:7d:7e:cc:b8:f5:d9:bf:02:ae:f8: 92:d0:44:4b:34:15:95:af:79:0b:70:cc:3d:3f:dc: 6c:76:25:46:ab:00:d8:80:81:ba:bd:e4:54:ce:f7: 81:18:66:23:f4:35:fa:76:ff:05:82:c7:8d:bb:f3: 2f:f6:52:5a:6a:e5:c9:35:1c:45:23:5a:6a:69:88: a8:16:13:57:ac:c6:5a:12:a9:25:8c:6d:b0:f7:af: 7d:3b:30:15:e2:30:a3:59:4d:f1:aa:f5:db:c7:ae: 82:9f:b7:e2:5b:6c:bf:eb:ed:04:63:b1:c6:38:a0: be:a0:a7:58:d7:c7:48:5c:0d:29:e6:c4:96:86:61: 02:8f:f9:2f:7b:51:2c:b2:40:1f:88:d2:ff:a6:0b: 4e:33:47:74:28:31:f9:79:89:33:8c:d5:13:26:97: 3a:c8:89:e5:ad:18:1c:48:c4:5e:b2:86:1a:07:a3: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:34:1E:4D:4D:E3:97:38:10:B0:F9:D1:9B:8A:3E:5F:D5:43:64:14 X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:5d:7c:4c:4c:68:48:be:7f:dc:18:bf:da:9a:a2:17:fb:e2: 01:60:43:ee:81:85:ef:11:35:f9:a6:52:70:f3:98:81:fb:6b: e5:df:d2:90:99:41:ca:01:1a:ae:91:f0:5f:7d:1c:5f:6f:c6: ff:d3:1c:03:d6:b4:b7:ce:c4:e3:03:42:8a:b5:82:f2:e3:a5: 3f:95:1c:ef:18:0e:3c:5c:d4:3b:bc:0a:19:6e:18:aa:86:65: 57:f0:9c:4e:5b:1c:a5:87:ea:c5:98:c9:75:12:b0:e1:18:5e: 51:b5:54:2a:99:04:31:7f:1a:1e:01:84:d4:18:d6:03:38:6b: 45:ee:50:c3:ba:79:dd:62:59:ba:b7:6d:89:66:5d:34:d2:f5: 1e:02:2b:90:cc:c6:60:2b:ac:24:11:ca:88:67:8e:3a:42:82: e2:d4:dc:47:5f:07:d8:85:a2:ba:08:08:a9:a0:f6:ac:b1:9c: 68:55:32:49:42:c4:fa:8c:4a:68:a4:a1:9f:20:c8:17:87:b4: 50:22:5b:84:b8:4b:a7:e0:68:4e:da:aa:b7:e3:98:44:9d:99: e2:98:7f:7d:4d:78:e6:aa:88:3a:63:44:97:3a:43:40:c7:ce: 51:9b:35:3b:7a:04:3e:eb:d5:76:c6:ba:a3:a1:7a:b9:f1:ff: 21:6f:8a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUxMTA0MjIyMTA0WhcNMjUxMTExMjIyMTA0WjAYMRYwFAYD VQQDEw02OTBhN2M1MC1mM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNdWfY3dWEQ//qOEUBbfoD6F3Z5//UcY5/YDYF3BkN9oTbsJfe9FtIzdYYqL u6qTrqhphph/IJMqb1Fvng98V7IUx6/DxxX0SeVgruSdK31+zLj12b8CrviS0ERL NBWVr3kLcMw9P9xsdiVGqwDYgIG6veRUzveBGGYj9DX6dv8FgseNu/Mv9lJaauXJ NRxFI1pqaYioFhNXrMZaEqkljG2w9699OzAV4jCjWU3xqvXbx66Cn7fiW2y/6+0E Y7HGOKC+oKdY18dIXA0p5sSWhmECj/kve1EsskAfiNL/pgtOM0d0KDH5eYkzjNUT Jpc6yInlrRgcSMResoYaB6NbUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBo0Hk1N 45c4ELD50ZuKPl/VQ2QUMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFXXxMTGhIvn/cGL/amqIX++IBYEPugYXvETX5plJw85iB+2vl39KQ mUHKARqukfBffRxfb8b/0xwD1rS3zsTjA0KKtYLy46U/lRzvGA48XNQ7vAoZbhiq hmVX8JxOWxylh+rFmMl1ErDhGF5RtVQqmQQxfxoeAYTUGNYDOGtF7lDDunndYlm6 t22JZl000vUeAiuQzMZgK6wkEcqIZ446QoLi1NxHXwfYhaK6CAipoPassZxoVTJJ QsT6jEpopKGfIMgXh7RQIluEuEun4GhO2qq345hEnZnimH99TXjmqog6Y0SXOkNA x85RmzU7egQ+69V2xrqjoXq58f8hb4ry -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:45 2025 by rpki-client