$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: iAuSZMLg/C/hp6mXVmgvVlkEYJa8lkWLP8KNpS0UxKg= Subject key identifier: 17:EE:4B:87:C5:92:21:67:5B:98:8E:9F:B2:38:EC:B0:A5:B6:DD:51 Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 12F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 12E7 Signing time: Sun 26 Oct 2025 17:18:19 +0000 Manifest this update: Sun 26 Oct 2025 17:18:18 +0000 Manifest next update: Sun 02 Nov 2025 17:18:18 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: TJebIizQf6iRKQtwdZQ0G3wjB30rTdDf1WDevfo7qfo=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: u9nxVTI/r7lzehBnkG/r0mQCumereCzRN9vx0cIP9pw=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: 19aOOHsZIBgvBeUs9wb25z5uEUWs4WLEIR4d7F8bWpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4857 (0x12f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Oct 26 17:18:18 2025 GMT Not After : Nov 2 17:18:18 2025 GMT Subject: CN=68fe57da-e7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:48:d4:6a:9c:b8:6f:b2:3d:96:26:23:b5: e5:1a:50:cb:20:80:5c:06:dd:7c:49:11:70:68:2d: 6f:fa:7c:fa:e1:11:11:87:83:32:f0:3a:66:bd:f9: 2e:1b:4e:48:97:25:cf:93:4a:28:69:55:b7:ee:7f: 01:12:b3:79:18:3d:e0:c6:f5:b6:a9:51:c4:7d:45: 11:76:e7:67:ba:e7:e0:66:60:b2:de:4f:93:4f:26: bc:9c:62:e6:7d:8e:ef:a9:1a:e9:37:2f:1b:6a:41: d6:43:ad:a1:82:d5:66:8b:22:07:dd:ab:e0:75:35: b6:c0:5d:7a:13:4c:e1:31:a8:c1:ba:1f:60:de:dc: be:df:3e:65:5a:21:4e:6e:66:ed:bb:b0:93:27:98: ca:c9:17:22:32:9e:c1:24:02:1c:ad:65:ae:ac:5e: 39:7f:d7:73:68:18:7c:32:20:80:e8:de:a3:01:3b: ad:e2:63:21:ea:0a:3f:45:9e:9c:3e:d4:eb:42:9c: 88:69:34:21:2c:47:df:87:91:ca:34:78:9d:e6:a1: b3:41:d6:6b:b3:92:ff:ae:4a:42:86:14:80:41:5e: 14:bf:77:ce:0a:06:7f:df:7d:31:16:c5:c6:06:83: 63:63:1b:1a:6c:89:68:f6:a2:04:ff:75:3a:6f:08: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EE:4B:87:C5:92:21:67:5B:98:8E:9F:B2:38:EC:B0:A5:B6:DD:51 X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:cf:e8:fd:ea:34:4d:c3:a3:89:66:4d:b2:6f:57:68:74:8f: c9:cd:4a:2e:ef:4f:74:b5:c5:5d:b5:ee:1e:f2:a8:6e:f3:f3: 5f:9e:1d:85:84:a2:86:5e:93:fe:c9:ad:27:45:66:5a:94:51: ae:63:e2:5f:0e:ac:05:3b:38:ab:ed:56:f3:a8:4f:b8:d8:ad: b7:d9:c9:a9:08:e6:e9:98:63:e5:9d:af:84:92:c9:42:fe:e2: fd:c3:ad:ab:a5:e2:f9:80:52:5d:8e:35:67:bb:12:df:b3:36: 19:55:5e:54:4f:b3:31:f9:e8:68:d1:1b:a7:25:6a:c9:dd:69: d1:ef:1d:c4:c2:93:aa:ef:1a:f6:60:1c:ed:16:e9:4b:31:e5: a6:d8:a5:64:16:1d:d3:da:b6:1e:84:b3:30:e5:4d:61:c8:9c: 37:b1:b2:34:4f:74:ea:13:1b:89:c6:f3:75:85:6c:82:31:8b: 6e:e0:98:31:99:ad:6c:3c:a4:a4:a5:21:72:c3:df:85:75:60: 74:9d:a3:91:c5:9e:b8:80:34:32:93:dd:a1:19:f9:4f:8f:47: 73:b0:10:e0:55:bd:f4:80:92:e6:4e:6c:1a:91:73:b0:95:e7: e4:72:82:9b:6d:4d:e5:8f:2d:c4:07:f9:c1:fc:16:f2:30:c5: f7:c8:c7:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUxMDI2MTcxODE4WhcNMjUxMTAyMTcxODE4WjAYMRYwFAYD VQQDEw02OGZlNTdkYS1lN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon5I1GqcuG+yPZYmI7XlGlDLIIBcBt18SRFwaC1v+nz64RERh4My8Dpmvfku G05IlyXPk0ooaVW37n8BErN5GD3gxvW2qVHEfUURdudnuufgZmCy3k+TTya8nGLm fY7vqRrpNy8bakHWQ62hgtVmiyIH3avgdTW2wF16E0zhMajBuh9g3ty+3z5lWiFO bmbtu7CTJ5jKyRciMp7BJAIcrWWurF45f9dzaBh8MiCA6N6jATut4mMh6go/RZ6c PtTrQpyIaTQhLEffh5HKNHid5qGzQdZrs5L/rkpChhSAQV4Uv3fOCgZ/330xFsXG BoNjYxsabIlo9qIE/3U6bwji9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfuS4fF kiFnW5iOn7I47LCltt1RMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApz+j96jRNw6OJZk2yb1dodI/JzUou7090tcVdte4e8qhu8/Nfnh2F hKKGXpP+ya0nRWZalFGuY+JfDqwFOzir7VbzqE+42K232cmpCObpmGPlna+EkslC /uL9w62rpeL5gFJdjjVnuxLfszYZVV5UT7Mx+eho0RunJWrJ3WnR7x3EwpOq7xr2 YBztFulLMeWm2KVkFh3T2rYehLMw5U1hyJw3sbI0T3TqExuJxvN1hWyCMYtu4Jgx ma1sPKSkpSFyw9+FdWB0naORxZ64gDQyk92hGflPj0dzsBDgVb30gJLmTmwakXOw lefkcoKbbU3ljy3EB/nB/BbyMMX3yMdy -----END CERTIFICATE-----Generated at Tue Oct 28 16:53:17 2025 by rpki-client