$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft File: aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json) Hash identifier: a2eyLWsNwgg77LJ8gBU5+tTvTMwy0w9YJc193Gex7sw= Subject key identifier: 8D:B1:39:CF:FD:9A:EC:0A:9E:AD:91:F1:1A:46:27:84:06:A7:9D:DE Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft Manifest number: 0492 Signing time: Wed 05 Nov 2025 00:11:59 +0000 Manifest this update: Wed 05 Nov 2025 00:11:59 +0000 Manifest next update: Wed 12 Nov 2025 00:11:59 +0000 Files and hashes: 1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: MmuV6IhDHbMQqZkxRBxcieVJg3ktH0lE0O6YGLwIc3M=) 2: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: QEkMEVTQBayFx2m7EivW7eRMOejHOK5Ic4vwhvxB81A=) 3: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: +odywDquwxeF6SYI69k239OrBCZD98jk7qEP7myd7ZI=) 4: 63E8739003C111EEB2272068C4F9AE02.roa (hash: Lee2Usqd9hsodQDlh02wVnCx8PbKZpN8M7lZu7WoioY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Validity Not Before: Nov 5 00:11:59 2025 GMT Not After : Nov 12 00:11:59 2025 GMT Subject: CN=690a964f-9c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:35:76:c1:31:7d:07:96:26:2e:f0:7f:3f: 81:67:a5:63:c4:b8:24:50:b4:2a:8c:17:72:c5:be: f4:6e:0c:73:67:1d:5f:fb:a0:37:ac:43:e1:42:b8: 74:64:04:9e:38:d7:46:7f:02:a7:1e:94:f5:b9:ff: 65:79:bf:35:13:33:45:18:ad:9a:3e:c8:e9:6f:0c: d9:0f:fb:90:81:b7:43:ba:59:e8:9f:72:5c:b9:f6: 91:f4:06:35:25:4b:0d:eb:46:0d:99:9f:65:99:9e: c4:2e:3f:4d:fd:22:28:ee:fd:42:75:b8:ee:5e:1e: 93:9c:cb:51:45:b4:8d:c0:5f:3d:79:b0:2c:fd:f0: 29:d3:05:f9:b8:15:65:f5:d7:f2:ae:b7:6f:44:78: 42:bc:93:e8:e3:92:9b:a5:54:22:3e:5e:0d:56:25: 56:15:28:06:6c:1c:7a:4e:e0:99:f4:53:3a:cd:70: 17:3f:a1:bd:68:9f:a3:6f:a1:40:2b:2c:cf:23:04: 6f:d3:f6:3e:4c:dc:c2:a1:c2:54:bd:22:7a:2a:0f: 0c:2a:2b:ce:83:bd:f6:7a:b9:93:6e:3a:e9:9c:f1: 8f:fb:be:06:c9:e9:72:72:6c:58:95:73:b3:6f:78: 80:52:74:45:ce:62:49:8e:0e:ba:45:07:97:13:ef: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B1:39:CF:FD:9A:EC:0A:9E:AD:91:F1:1A:46:27:84:06:A7:9D:DE X509v3 Authority Key Identifier: keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:9c:4e:72:cb:8e:06:5d:24:2b:56:a1:14:15:3e:a7:58: b9:5c:12:5d:df:22:09:b9:26:0a:0f:c0:d8:15:d6:dd:b5:d0: 82:a1:2e:29:3f:c1:89:56:b9:6b:52:f9:fa:f4:b9:06:08:1d: 92:6b:e4:52:26:b8:21:ec:66:11:98:65:eb:eb:44:30:60:14: 6e:16:b8:53:6a:33:ec:5c:86:af:60:62:60:76:74:57:7c:a0: 34:89:ae:39:70:fb:ce:34:91:9b:91:fd:23:24:7e:f9:5d:29: 30:01:34:d1:7c:12:9a:6a:be:a9:9e:b7:d9:b9:1e:fe:52:19: 4e:c2:1b:ca:ae:8a:dd:8e:a5:f2:cc:70:49:57:e8:4d:2c:d9: 7c:32:12:0a:9a:cf:a8:74:9b:ed:8a:1a:f5:d5:dc:37:68:8e: 47:5f:1e:52:61:05:b0:34:5b:23:27:af:d6:d1:a3:69:60:5d: 8b:2a:f4:70:2c:70:5a:69:3a:84:b5:19:90:3a:01:37:c3:b9: c6:56:a3:4c:9f:4b:85:4e:4d:da:fc:00:7e:1e:93:94:be:99: b6:e3:73:a4:47:68:64:e0:43:2a:7f:21:fb:6e:01:57:c3:9f: 8f:ca:d3:4e:b6:68:c2:d2:07:4c:39:18:e6:4f:15:7c:d8:e5: be:c9:fa:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJBMUYxMTAvBgNVBAUTKDY5MzlGQzA0MERBNUMzMEI3NjZEQzc5NEY5Q0E0QzJG NDFBQ0FFRUEwHhcNMjUxMTA1MDAxMTU5WhcNMjUxMTEyMDAxMTU5WjAYMRYwFAYD VQQDEw02OTBhOTY0Zi05YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oQ1dsExfQeWJi7wfz+BZ6VjxLgkULQqjBdyxb70bgxzZx1f+6A3rEPhQrh0 ZASeONdGfwKnHpT1uf9leb81EzNFGK2aPsjpbwzZD/uQgbdDulnon3JcufaR9AY1 JUsN60YNmZ9lmZ7ELj9N/SIo7v1CdbjuXh6TnMtRRbSNwF89ebAs/fAp0wX5uBVl 9dfyrrdvRHhCvJPo45KbpVQiPl4NViVWFSgGbBx6TuCZ9FM6zXAXP6G9aJ+jb6FA KyzPIwRv0/Y+TNzCocJUvSJ6Kg8MKivOg732ermTbjrpnPGP+74GyelycmxYlXOz b3iAUnRFzmJJjg66RQeXE++KnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2xOc/9 muwKnq2R8RpGJ4QGp53eMB8GA1UdIwQYMBaAFGk5/AQNpcMLdm3HlPnKTC9BrK7q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkExRi8xRUNGRkM0QzYy MTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3dDJiY2VVLWNwTUwwR3Ny dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUbjhCQTJsd3d0MmJjZVUtY3BNTDBHc3J1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkExRi8xRUNGRkM0QzYyMTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3 dDJiY2VVLWNwTUwwR3NydW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqcpxOcsuOBl0kK1ahFBU+p1i5XBJd3yIJuSYKD8DYFdbdtdCCoS4p P8GJVrlrUvn69LkGCB2Sa+RSJrgh7GYRmGXr60QwYBRuFrhTajPsXIavYGJgdnRX fKA0ia45cPvONJGbkf0jJH75XSkwATTRfBKaar6pnrfZuR7+UhlOwhvKrordjqXy zHBJV+hNLNl8MhIKms+odJvtihr11dw3aI5HXx5SYQWwNFsjJ6/W0aNpYF2LKvRw LHBaaTqEtRmQOgE3w7nGVqNMn0uFTk3a/AB+HpOUvpm243OkR2hk4EMqfyH7bgFX w5+PytNOtmjC0gdMORjmTxV82OW+yfqa -----END CERTIFICATE-----Generated at Wed Nov 5 08:00:07 2025 by rpki-client