$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: adT9CCwFLjnOUiz03lW2c1dgJ93fosUJt17vefbx7p4= Subject key identifier: 6D:75:11:B6:13:18:AC:3A:A4:AE:99:0E:24:7F:D7:59:24:C1:A3:A3 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0CF4 Signing time: Tue 04 Nov 2025 18:12:43 +0000 Manifest this update: Tue 04 Nov 2025 18:12:42 +0000 Manifest next update: Tue 11 Nov 2025 18:12:42 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: w1hc645Zc+xVeAVB5W0SYWaztiIQd6Yg3Qrml8xRbyQ=) 2: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: WwXl48vJNivZYV02F4DhTAdSziCXHjo0WT9hGEi74tE=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: odtdAeT3uybzWOWQg7rEN3DZC1Lg8w9hAFA2d8d7ZGI=) 4: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Nov 4 18:12:42 2025 GMT Not After : Nov 11 18:12:42 2025 GMT Subject: CN=690a421a-3f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:bd:df:4e:c3:10:fd:98:65:1f:56:36:e0: ef:6e:85:72:04:b8:a2:e9:87:e6:8c:75:66:e1:e1: 05:6e:17:16:0a:dc:3a:b7:04:1d:dd:6c:ab:9a:ad: f8:e0:00:a3:d0:a2:8d:cc:45:2f:4d:92:91:79:8a: f9:5a:d2:80:aa:55:10:93:5f:7c:81:18:7b:e7:ca: 5d:4a:e5:64:65:aa:67:35:5b:76:43:59:96:a3:14: ae:f3:7a:3c:b9:61:de:43:4a:0a:c3:d0:1e:75:b0: 08:23:3e:8b:cf:2a:18:1a:39:ab:36:85:a0:56:10: 99:ca:fa:68:56:07:4b:04:fe:3c:8d:d0:1c:f9:86: af:97:6e:6e:b2:81:fb:b6:ec:70:78:b2:45:a5:2e: 3d:cb:7b:d4:c3:35:be:2a:a2:ef:fe:9c:11:77:fa: 90:31:f7:65:79:6a:aa:ec:de:0d:65:2f:07:cb:39: 4e:2b:dc:7c:f6:36:2a:2a:4f:22:b7:f0:92:fd:7b: d2:55:3e:c7:97:4f:d6:81:08:01:03:27:7c:eb:40: a1:52:e2:c3:4e:8e:75:c1:fd:88:30:ab:6e:e6:f0: bc:08:db:b7:a1:6c:31:b5:2c:5c:64:b2:8e:b8:5a: 7d:d1:ea:b1:bc:92:89:1f:13:01:6c:bc:35:8c:9e: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:75:11:B6:13:18:AC:3A:A4:AE:99:0E:24:7F:D7:59:24:C1:A3:A3 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:85:45:ba:04:0e:47:6b:20:9d:b6:1c:df:89:ae:f8:0a:cd: 71:36:ef:ef:c1:3e:14:39:bc:0e:6f:64:38:93:b1:64:0d:3e: bb:18:ad:27:7a:16:e0:94:b5:50:a5:af:67:14:1c:77:13:44: 47:69:d5:b1:01:0e:6d:dd:69:09:a0:7b:14:15:f8:ac:9d:d8: 37:73:75:fe:ae:a5:4c:02:1c:29:82:57:bc:16:1a:b6:07:23: 99:8b:15:0b:cb:86:1c:3f:da:07:ef:65:9b:f2:c9:d3:ea:e5: 82:63:9d:3b:84:e4:0b:b9:de:2c:3f:c4:44:d9:e6:8a:34:1e: e4:50:ac:c1:42:ef:5c:89:42:95:71:77:56:cf:4d:7c:3b:bb: d4:ce:75:1c:44:95:b3:b9:54:00:9e:30:5e:fd:2e:e1:20:f6: c8:88:46:38:1e:f9:9e:9a:b2:84:9e:c2:49:f0:29:e1:df:3e: 4e:1f:4f:66:89:e8:c3:e1:57:7e:a4:87:3c:5d:7b:c8:38:2a: 22:7f:2f:b2:7b:de:be:99:d4:30:14:cf:8e:a7:4b:da:76:a9: 93:c1:ca:c0:d9:b1:bb:89:68:b9:4d:98:1b:fa:1b:0f:f1:91: c2:3c:4e:2c:29:de:f4:15:fa:2c:37:00:78:1f:32:b4:c2:4e: 24:e8:f9:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUxMTA0MTgxMjQyWhcNMjUxMTExMTgxMjQyWjAYMRYwFAYD VQQDEw02OTBhNDIxYS0zZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr69307DEP2YZR9WNuDvboVyBLii6YfmjHVm4eEFbhcWCtw6twQd3Wyrmq34 4ACj0KKNzEUvTZKReYr5WtKAqlUQk198gRh758pdSuVkZapnNVt2Q1mWoxSu83o8 uWHeQ0oKw9AedbAIIz6LzyoYGjmrNoWgVhCZyvpoVgdLBP48jdAc+Yavl25usoH7 tuxweLJFpS49y3vUwzW+KqLv/pwRd/qQMfdleWqq7N4NZS8HyzlOK9x89jYqKk8i t/CS/XvSVT7Hl0/WgQgBAyd860ChUuLDTo51wf2IMKtu5vC8CNu3oWwxtSxcZLKO uFp90eqxvJKJHxMBbLw1jJ4C/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG11EbYT GKw6pK6ZDiR/11kkwaOjMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCThUW6BA5HayCdthzfia74Cs1xNu/vwT4UObwOb2Q4k7FkDT67GK0n ehbglLVQpa9nFBx3E0RHadWxAQ5t3WkJoHsUFfisndg3c3X+rqVMAhwpgle8Fhq2 ByOZixULy4YcP9oH72Wb8snT6uWCY507hOQLud4sP8RE2eaKNB7kUKzBQu9ciUKV cXdWz018O7vUznUcRJWzuVQAnjBe/S7hIPbIiEY4HvmemrKEnsJJ8Cnh3z5OH09m iejD4Vd+pIc8XXvIOCoify+ye96+mdQwFM+Op0vadqmTwcrA2bG7iWi5TZgb+hsP 8ZHCPE4sKd70FfosNwB4HzK0wk4k6Pn9 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:11 2025 by rpki-client