$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft File: Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json) Hash identifier: CpVi1dLRr4sEqKyb0hl2Z62ODr3C0nevTY7X595GbNM= Subject key identifier: 0F:8F:D2:A2:14:61:75:79:A8:1D:12:5E:C0:F1:EE:67:10:7A:E2:E2 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft Manifest number: 0B6F Signing time: Mon 20 Oct 2025 19:49:56 +0000 Manifest this update: Mon 20 Oct 2025 19:49:55 +0000 Manifest next update: Mon 27 Oct 2025 19:49:55 +0000 Files and hashes: 1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: /pfwzLuqP19IFMyOgjQJGSQZCxVoE3OeNvuowP3jvo4=) 2: 09534036847011F0A17FCE63C4F9AE02.roa (hash: PdJl8I+ys5mY6W97HjsxfAl70ScWMMUlyRe/qkuqiA0=) 3: BB46A670849811F08EA6E444C4F9AE02.roa (hash: Zt/7xi+nXrTj/iilNfK0wU0w18V9L0wFMcOFcwVdW/k=) 4: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: v527tHPDU0uVPbXjXzW0KocA0xKJVkiNxeh4nwu9KSk=) 5: F6722FA6822411F088762570C4F9AE02.roa (hash: 6cwVFvvqQcA0BWrig1rdOJJl09Bzs2MEoyjinBBklP4=) 6: 12AE33B4419811EAA268D964C4F9AE02.roa (hash: WByJv+/0UWcFSBkuQVt24N8Bh5eeznOvZMkj35xeU8o=) 7: 7147D9D69D9811F09B4CDC3EC4F9AE02.roa (hash: 6Ic+sOOlihEzvzyvrHCjJtxNC+c9AoDdHtp21QAX8Po=) 8: F5E1478E822411F088762570C4F9AE02.roa (hash: FtG2AONefrzS1aqmU6M+Rb0qH4cFpoVfgLPk4YTu7w0=) 9: A5FE56B2596B11F0AF4BB31EC4F9AE02.roa (hash: plyiht/V1LmRJUTFVmqkO0mlXSVbC2l7eMnY30pWhS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Oct 20 19:49:55 2025 GMT Not After : Oct 27 19:49:55 2025 GMT Subject: CN=68f69264-fed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:8b:8c:31:2d:31:b8:ab:7f:71:cc:8c:e9: ca:43:17:43:ff:f7:68:69:f3:ec:34:ca:a6:49:bb: 31:6d:ef:39:ea:82:63:af:c6:9c:a6:e8:a7:8e:94: 69:ec:fb:af:ba:cc:d8:0f:d3:83:c2:2c:a2:ad:0c: e6:11:4c:55:db:db:b0:a0:8f:5e:53:be:21:1e:bd: a0:52:73:43:d5:12:a1:21:c3:7a:ef:98:7e:a3:1f: a6:f3:12:0b:45:2f:01:c4:0e:86:04:70:41:3b:7f: 5a:81:37:ea:95:1b:c5:a0:87:af:f4:cd:a8:29:15: f3:ba:31:2e:34:ff:7a:c6:22:87:3a:ba:27:36:08: c7:c2:ab:63:5d:a7:d2:28:d3:07:08:ca:64:37:99: f2:a7:a2:94:48:38:be:c9:c7:62:c3:45:cc:a2:3c: 81:1f:92:d7:6b:8b:95:54:76:f0:33:d2:48:c5:92: ba:6d:fa:01:ea:cd:8d:40:b0:9a:82:03:fb:05:4a: 2c:be:03:ce:fe:3a:2c:8d:c1:dc:41:ff:5c:f4:99: 4a:55:09:6a:90:49:98:bf:b8:80:ec:41:50:73:21: bb:29:01:d4:7e:7b:0b:78:2c:3c:23:2c:34:2f:e3: 80:10:56:04:41:b4:f6:ff:05:87:c5:0f:8b:9d:4a: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8F:D2:A2:14:61:75:79:A8:1D:12:5E:C0:F1:EE:67:10:7A:E2:E2 X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:df:52:1a:82:0d:60:88:93:a0:76:71:0b:ab:a3:ad:6a:cf: 0c:88:cb:22:31:5a:ac:56:5a:7a:53:c7:7b:82:eb:5f:bc:52: 38:d7:d4:47:b1:9b:b4:d7:9e:44:fe:85:17:13:66:b6:63:43: c0:2e:d0:82:49:eb:2d:be:27:8a:9b:74:8f:4e:7f:6f:8d:e3: f5:a6:1f:c1:3e:ff:6a:0e:fa:f4:16:72:52:0e:cb:09:da:8b: ad:d3:27:d8:64:54:2f:cd:02:10:57:ca:41:31:eb:32:92:ca: 73:3c:0b:ee:29:af:15:43:2f:c6:35:8a:ad:d7:f8:8f:90:8d: 46:ec:e4:a5:66:37:d6:8e:57:2a:a9:f7:a3:50:73:32:35:70: 64:fb:d2:60:17:7a:10:b4:f3:1c:f0:33:47:aa:4f:50:1b:f2: 8d:be:17:f6:f3:8d:c2:45:a5:2b:ba:54:f9:c6:f6:03:a5:27: 54:76:d0:f3:c5:54:26:6b:60:73:0d:64:e6:2d:b7:59:ec:65: f4:4a:9b:21:15:2f:c8:45:96:c2:08:93:1d:c3:24:28:85:ee: 66:75:ee:37:c8:de:65:fd:dc:e1:3d:4e:34:bd:97:d8:43:2a: bb:57:77:46:d3:99:fd:4d:65:9e:40:6e:8b:d1:60:58:e5:d8: a0:6d:a5:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUxMDIwMTk0OTU1WhcNMjUxMDI3MTk0OTU1WjAYMRYwFAYD VQQDEw02OGY2OTI2NC1mZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27uLjDEtMbirf3HMjOnKQxdD//doafPsNMqmSbsxbe856oJjr8acpuinjpRp 7PuvuszYD9ODwiyirQzmEUxV29uwoI9eU74hHr2gUnND1RKhIcN675h+ox+m8xIL RS8BxA6GBHBBO39agTfqlRvFoIev9M2oKRXzujEuNP96xiKHOronNgjHwqtjXafS KNMHCMpkN5nyp6KUSDi+ycdiw0XMojyBH5LXa4uVVHbwM9JIxZK6bfoB6s2NQLCa ggP7BUosvgPO/josjcHcQf9c9JlKVQlqkEmYv7iA7EFQcyG7KQHUfnsLeCw8Iyw0 L+OAEFYEQbT2/wWHxQ+LnUoyBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+P0qIU YXV5qB0SXsDx7mcQeuLiMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5 eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC231Iagg1giJOgdnELq6Otas8MiMsiMVqsVlp6U8d7gutfvFI419RH sZu0155E/oUXE2a2Y0PALtCCSestvieKm3SPTn9vjeP1ph/BPv9qDvr0FnJSDssJ 2out0yfYZFQvzQIQV8pBMesykspzPAvuKa8VQy/GNYqt1/iPkI1G7OSlZjfWjlcq qfejUHMyNXBk+9JgF3oQtPMc8DNHqk9QG/KNvhf2843CRaUrulT5xvYDpSdUdtDz xVQma2BzDWTmLbdZ7GX0SpshFS/IRZbCCJMdwyQohe5mde43yN5l/dzhPU40vZfY Qyq7V3dG05n9TWWeQG6L0WBY5digbaVG -----END CERTIFICATE-----Generated at Wed Oct 22 17:51:25 2025 by rpki-client