$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: cIBMLJ6SyClAwgm2trGWrhMJLzhtr0U0wjolcGY7Ccs= Subject key identifier: AB:FD:3D:43:09:C1:BB:16:C3:B9:57:76:EC:38:BE:5C:F0:E1:EF:62 Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 03DC Signing time: Mon 03 Nov 2025 00:33:29 +0000 Manifest this update: Mon 03 Nov 2025 00:33:29 +0000 Manifest next update: Mon 10 Nov 2025 00:33:29 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: L8XIvdrvb9vwz/fGKdQ7pY+Y7BQ/c/u6dIV5acu62Xc=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: eYkm574zXfPZBssf+KqgdlPvB8riPVJCVgCP7O8B6S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Nov 3 00:33:29 2025 GMT Not After : Nov 10 00:33:29 2025 GMT Subject: CN=6907f859-39e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:d3:c8:59:cf:d8:b5:c6:1c:b8:03:03:e0: 69:85:c5:2b:34:82:b3:07:4b:a1:8e:7d:b2:3c:35: be:f8:e4:16:93:0a:69:89:08:94:6e:19:a8:34:1e: c3:98:48:b5:27:20:d4:2d:c3:f8:d7:ab:a6:06:70: 5a:ab:5c:18:b4:04:60:ad:f5:c2:84:ad:63:ae:15: c7:88:28:50:5a:78:3d:c6:3e:49:74:7d:58:7e:76: c6:ac:8c:16:c6:3c:06:f1:27:fc:72:a0:8a:ae:9b: 39:12:ef:96:fb:dc:63:a6:15:90:3d:fa:30:ec:e3: 0b:89:71:3e:81:76:8e:19:58:1a:5a:d5:09:b6:cb: e4:93:ab:0c:0f:93:33:c6:61:5e:ae:f0:6d:16:91: 97:3a:b4:b6:b9:5c:96:d2:db:c1:f2:f2:64:e3:6b: 12:79:17:0c:88:d2:37:d6:d9:21:f3:b7:6c:5a:4c: b8:74:89:8d:28:ac:24:3e:2a:e7:32:97:0b:bb:25: 7c:72:7f:42:c5:ce:89:53:75:31:e1:63:e6:2d:a1: d6:6d:86:26:71:06:e6:96:d5:dd:ff:cd:90:a3:ef: 0d:d5:f2:3b:2d:6c:5b:40:38:2d:c7:d1:a1:92:ff: ac:48:cf:5d:09:95:9e:b5:d1:2c:fa:cb:67:6b:e5: 1c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FD:3D:43:09:C1:BB:16:C3:B9:57:76:EC:38:BE:5C:F0:E1:EF:62 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1c:05:93:e1:37:d0:4d:f3:15:3a:6d:22:c1:94:38:ef:6d: 44:88:35:e1:77:b4:d8:79:6b:11:29:4f:59:be:53:9b:f2:8f: a3:02:5d:b7:3e:a8:78:f2:10:92:c9:8c:b7:ab:60:a6:82:6b: 4f:b5:77:89:df:91:f0:c7:c1:43:68:5a:53:9b:a6:0f:b3:d8: 5b:4d:0b:52:7f:71:61:56:a0:ce:c1:d0:36:07:d6:5b:b2:30: d8:78:98:ea:dc:82:09:d8:62:62:6f:b8:b0:e1:7c:d8:3b:39: a9:9e:06:cc:9f:ae:ba:a1:b3:f9:1e:7d:06:7f:e1:12:11:c5: d9:eb:bc:95:0f:92:a3:50:c2:c2:f9:3e:2f:95:f5:89:d1:3c: e9:0b:90:9d:2a:6e:0a:2e:cb:ab:80:e3:28:6f:0d:d5:30:21: a2:91:b4:79:15:d5:f3:f3:84:e1:29:64:d8:a3:f2:b9:11:11: 22:ec:c5:40:35:c7:01:0e:c2:9d:8c:c1:bc:af:1b:8e:9d:37: 33:96:8a:af:e6:51:8b:4b:1d:58:d5:fa:93:5d:15:cd:d4:c5: 89:8a:f8:6b:2a:02:85:51:ae:0f:cc:ed:02:2e:ec:cd:a3:99: d0:23:a7:98:fa:6a:7e:b5:51:c7:1f:f1:27:86:01:03:b0:76: e1:f9:bc:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjUxMTAzMDAzMzI5WhcNMjUxMTEwMDAzMzI5WjAYMRYwFAYD VQQDEw02OTA3Zjg1OS0zOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdPTyFnP2LXGHLgDA+BphcUrNIKzB0uhjn2yPDW++OQWkwppiQiUbhmoNB7D mEi1JyDULcP416umBnBaq1wYtARgrfXChK1jrhXHiChQWng9xj5JdH1YfnbGrIwW xjwG8Sf8cqCKrps5Eu+W+9xjphWQPfow7OMLiXE+gXaOGVgaWtUJtsvkk6sMD5Mz xmFervBtFpGXOrS2uVyW0tvB8vJk42sSeRcMiNI31tkh87dsWky4dImNKKwkPirn MpcLuyV8cn9Cxc6JU3Ux4WPmLaHWbYYmcQbmltXd/82Qo+8N1fI7LWxbQDgtx9Gh kv+sSM9dCZWetdEs+stna+UcmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKv9PUMJ wbsWw7lXduw4vlzw4e9iMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKHAWT4TfQTfMVOm0iwZQ4721EiDXhd7TYeWsRKU9ZvlOb8o+jAl23 Pqh48hCSyYy3q2CmgmtPtXeJ35Hwx8FDaFpTm6YPs9hbTQtSf3FhVqDOwdA2B9Zb sjDYeJjq3IIJ2GJib7iw4XzYOzmpngbMn666obP5Hn0Gf+ESEcXZ67yVD5KjUMLC +T4vlfWJ0TzpC5CdKm4KLsurgOMobw3VMCGikbR5FdXz84ThKWTYo/K5EREi7MVA NccBDsKdjMG8rxuOnTczloqv5lGLSx1Y1fqTXRXN1MWJivhrKgKFUa4PzO0CLuzN o5nQI6eY+mp+tVHHH/EnhgEDsHbh+bx6 -----END CERTIFICATE-----Generated at Tue Nov 4 08:26:53 2025 by rpki-client