$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft File: AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json) Hash identifier: WDOWgAMTT7fvBZiqYj2pr24GLBE3z4CTmgXTiygTIw8= Subject key identifier: 78:81:AC:A2:34:9F:E9:55:C4:D3:79:9C:9B:7D:42:C7:42:BB:56:5B Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 Certificate issuer: /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Certificate serial: 0346 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft Manifest number: 0342 Signing time: Mon 03 Nov 2025 00:58:38 +0000 Manifest this update: Mon 03 Nov 2025 00:58:38 +0000 Manifest next update: Mon 10 Nov 2025 00:58:38 +0000 Files and hashes: 1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: +keaViNYyZyuPFiDc60D9YUfvw7u/b79A/dyOoQusjo=) 2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: yybFsJYo0u1DXgO0+Ag0eONj7o/2vIeK/qEAg2e5UXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Validity Not Before: Nov 3 00:58:38 2025 GMT Not After : Nov 10 00:58:38 2025 GMT Subject: CN=6907fe3e-2d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:03:23:d1:52:3d:1d:c2:8a:27:6b:b0:59: bb:cc:bc:b7:d7:2a:c5:63:c9:dc:c3:9a:2b:11:34: f3:47:1d:9d:15:f5:d7:e5:77:2c:d9:26:79:e4:df: 47:ba:54:14:9f:eb:7d:da:b3:c5:69:be:aa:22:be: ce:12:e5:b7:7e:ea:40:53:d5:7d:f4:0f:4a:71:d4: ca:ba:a2:c3:7c:6d:77:c8:36:ae:a5:e4:9e:06:d0: 3e:eb:99:ca:48:33:4e:86:e8:57:8c:a2:7a:18:c9: 36:98:c0:d6:84:82:9d:d2:53:8b:d5:77:4c:e8:c6: c0:2f:84:f2:85:24:9c:09:92:ec:d8:7b:ca:e6:03: 58:c8:79:d4:18:ee:a7:cf:88:f0:75:7f:99:4f:d1: 2b:61:2f:24:09:b9:eb:f2:7c:93:06:0b:02:07:5b: 55:03:8f:7d:4a:c0:57:72:ee:92:7c:8c:8a:0c:8b: d0:b9:52:c3:e5:1f:3d:9c:d7:87:a5:fe:39:82:91: 6b:7f:d7:97:50:d9:d8:2f:7d:3f:7d:1f:8f:01:ff: e6:76:54:8a:11:c8:04:d8:51:3b:17:4a:a5:ec:b7: 89:80:fc:72:c5:26:9a:26:89:91:89:e2:64:28:f4: 25:86:97:70:9a:c0:1e:91:b6:3c:3b:87:75:db:8c: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:81:AC:A2:34:9F:E9:55:C4:D3:79:9C:9B:7D:42:C7:42:BB:56:5B X509v3 Authority Key Identifier: keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:97:51:7e:ca:0c:c5:48:af:50:1b:38:b3:52:fd:19:c3:2f: c8:8f:d5:6a:77:f9:c2:98:e5:bd:34:1d:41:f3:8e:30:ff:9d: 0f:f2:d9:c1:67:9e:73:00:33:38:fe:7a:59:74:64:d2:60:7b: dc:6b:9a:5b:92:40:ab:96:26:a9:1d:b6:fc:06:b5:3d:60:ad: f5:04:90:50:38:a6:be:39:14:fd:ea:33:92:f2:1b:c4:81:b3: 6f:d6:99:8a:74:fc:a7:6f:63:5b:a9:6b:90:d6:17:ad:98:00: da:5e:23:5d:6a:9e:8c:3c:d7:20:27:50:5f:0b:29:13:d8:b7: d2:1d:fa:6d:09:95:87:1f:36:66:70:29:5e:11:da:e6:70:30: b2:07:bf:30:97:0f:f4:9f:64:70:22:17:06:27:2f:94:66:8d: f9:9f:f0:66:4a:c9:ac:f9:23:4a:3f:53:cd:e6:9c:d6:60:36: ba:45:5a:90:83:ae:e0:96:c8:f7:41:07:1f:5b:dc:1e:45:4f: 93:4c:2e:12:d3:90:05:24:d1:43:cf:ac:79:f8:78:6b:a3:1d: 7d:a6:2f:ca:98:e9:aa:e8:af:31:91:46:73:a6:c0:87:c6:d7: 83:1a:a0:04:1d:96:73:05:88:26:e0:e2:38:91:e9:76:ad:44: 65:3a:77:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNkQxMTAvBgNVBAUTKDAwNDFFRkFCRkYzNDNDQzJFODNGQ0U5NkNFRDg5MDU5 RThGNEUyQzEwHhcNMjUxMTAzMDA1ODM4WhcNMjUxMTEwMDA1ODM4WjAYMRYwFAYD VQQDEw02OTA3ZmUzZS0yZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrQDI9FSPR3CiidrsFm7zLy31yrFY8ncw5orETTzRx2dFfXX5Xcs2SZ55N9H ulQUn+t92rPFab6qIr7OEuW3fupAU9V99A9KcdTKuqLDfG13yDaupeSeBtA+65nK SDNOhuhXjKJ6GMk2mMDWhIKd0lOL1XdM6MbAL4TyhSScCZLs2HvK5gNYyHnUGO6n z4jwdX+ZT9ErYS8kCbnr8nyTBgsCB1tVA499SsBXcu6SfIyKDIvQuVLD5R89nNeH pf45gpFrf9eXUNnYL30/fR+PAf/mdlSKEcgE2FE7F0ql7LeJgPxyxSaaJomRieJk KPQlhpdwmsAekbY8O4d124wgqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiBrKI0 n+lVxNN5nJt9QsdCu1ZbMB8GA1UdIwQYMBaAFABB76v/NDzC6D/Ols7YkFno9OLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM2RC8yMkU2OTJBQURD QjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBNTG9QODZXenRpUVdlajA0 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFSHZxXzgwUE1Mb1A4Nld6dGlRV2VqMDRzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM2RC8yMkU2OTJBQURDQjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBN TG9QODZXenRpUVdlajA0c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKl1F+ygzFSK9QGzizUv0Zwy/Ij9Vqd/nCmOW9NB1B844w/50P8tnB Z55zADM4/npZdGTSYHvca5pbkkCrliapHbb8BrU9YK31BJBQOKa+ORT96jOS8hvE gbNv1pmKdPynb2NbqWuQ1hetmADaXiNdap6MPNcgJ1BfCykT2LfSHfptCZWHHzZm cCleEdrmcDCyB78wlw/0n2RwIhcGJy+UZo35n/BmSsms+SNKP1PN5pzWYDa6RVqQ g67glsj3QQcfW9weRU+TTC4S05AFJNFDz6x5+Hhrox19pi/KmOmq6K8xkUZzpsCH xteDGqAEHZZzBYgm4OI4kel2rURlOndB -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:26 2025 by rpki-client