$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: 6lV8WkrgdiG803ybIFRPTHNapcqB/8a8q9TtDY1K4vo= Subject key identifier: 8E:E2:E4:3A:A9:B8:89:96:C4:5B:47:95:C8:D0:87:1D:2F:54:71:FA Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0D5D Signing time: Sun 02 Nov 2025 17:59:53 +0000 Manifest this update: Sun 02 Nov 2025 17:59:52 +0000 Manifest next update: Sun 09 Nov 2025 17:59:52 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: +xXfJXvRmzvL+Lv6gx3By2o+YuWb5KbTNuzaEID75aE=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: BSAvl2a+qU3ElNPvDphfnCyZJ7WfZOIWkfyio3AfY2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Nov 2 17:59:52 2025 GMT Not After : Nov 9 17:59:52 2025 GMT Subject: CN=69079c18-05d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:30:74:fd:00:f6:a5:ae:34:9c:58:0c:fa: 07:03:f8:11:65:c8:a1:9b:a0:ba:0f:f6:3b:a8:c9: a8:6f:ba:d1:80:cb:95:f9:59:01:82:71:68:c2:12: ad:e1:f9:f2:bf:5b:7a:2f:cf:b0:89:08:56:35:ea: 1f:d0:5d:f2:fd:dd:0e:ab:d8:38:b3:f1:10:18:c2: b3:66:4d:6a:a1:d9:aa:d5:11:da:b5:b2:1d:6e:36: 0e:0a:68:f6:0b:d9:09:8a:78:42:ee:af:1e:85:b1: fe:0b:a7:42:27:2f:f8:e6:9c:15:28:e7:60:ff:74: 90:13:35:0f:be:c7:79:bc:0c:f9:65:eb:e1:47:c2: c9:27:08:22:68:bb:74:75:17:86:b3:9c:19:ec:6b: 38:e7:4d:c1:e1:3a:f3:87:c8:84:6c:d6:c5:79:39: 51:f6:f6:3b:27:88:ac:cc:40:65:c5:40:c6:ae:57: 54:40:e3:ff:cc:f5:e6:67:d0:9a:3f:82:68:64:16: 9d:4b:cf:aa:f0:b5:09:e1:87:60:86:38:21:cb:dd: 42:68:df:11:9a:3c:54:2c:a3:4e:5d:72:6f:25:7c: 10:09:29:27:c3:5b:0e:f1:cb:75:37:b5:42:2c:cc: 25:6c:9e:30:a0:c9:80:22:e8:a9:5c:49:01:58:0f: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E2:E4:3A:A9:B8:89:96:C4:5B:47:95:C8:D0:87:1D:2F:54:71:FA X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f4:a4:bb:18:6d:76:2c:56:70:fd:c9:0a:f6:b6:eb:e1:33: d7:b7:15:b1:6b:62:27:8f:3f:38:c5:cd:cf:ba:3c:94:e7:bd: d1:21:c5:98:c7:85:f4:ea:7d:bf:d6:9c:be:86:2e:2c:46:e6: 94:e2:e1:94:07:aa:af:e9:ff:6e:39:70:38:4f:55:24:b9:71: 22:34:d5:62:ac:96:d5:27:bc:cc:4e:e6:d8:f2:83:65:91:a0: b4:b7:cd:25:64:22:20:5e:f2:52:8e:0c:03:aa:85:24:fc:99: 6d:3c:ec:c6:0b:37:90:d7:e5:7c:f0:67:5e:d4:5e:03:06:be: ae:c8:88:65:bb:77:d9:e8:76:ad:f7:c3:93:25:6d:58:0e:81: 8e:cc:3b:54:dd:a1:8d:b3:f6:2a:62:2b:e7:a6:61:1a:5a:ee: b1:97:b6:fe:5e:fc:b3:66:3a:f0:34:2c:da:7b:9a:50:4d:cc: 04:2b:5f:8a:4c:3e:b3:dc:0f:ae:77:75:e1:01:c3:68:44:85: b8:fa:8c:14:3e:21:11:d5:d6:65:b1:96:18:7b:51:01:35:3a: 84:91:44:52:48:fa:b7:a7:9f:71:98:b5:98:d4:05:87:02:41: a4:02:7b:28:4f:a9:12:1e:ec:6a:85:a1:8d:dc:6b:4a:bc:be: bd:45:d0:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUxMTAyMTc1OTUyWhcNMjUxMTA5MTc1OTUyWjAYMRYwFAYD VQQDEw02OTA3OWMxOC0wNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0wwdP0A9qWuNJxYDPoHA/gRZcihm6C6D/Y7qMmob7rRgMuV+VkBgnFowhKt 4fnyv1t6L8+wiQhWNeof0F3y/d0Oq9g4s/EQGMKzZk1qodmq1RHatbIdbjYOCmj2 C9kJinhC7q8ehbH+C6dCJy/45pwVKOdg/3SQEzUPvsd5vAz5ZevhR8LJJwgiaLt0 dReGs5wZ7Gs4503B4Trzh8iEbNbFeTlR9vY7J4iszEBlxUDGrldUQOP/zPXmZ9Ca P4JoZBadS8+q8LUJ4Ydghjghy91CaN8RmjxULKNOXXJvJXwQCSknw1sO8ct1N7VC LMwlbJ4woMmAIuipXEkBWA+5KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7i5Dqp uImWxFtHlcjQhx0vVHH6MB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX9KS7GG12LFZw/ckK9rbr4TPXtxWxa2Injz84xc3PujyU573RIcWY x4X06n2/1py+hi4sRuaU4uGUB6qv6f9uOXA4T1UkuXEiNNVirJbVJ7zMTubY8oNl kaC0t80lZCIgXvJSjgwDqoUk/JltPOzGCzeQ1+V88Gde1F4DBr6uyIhlu3fZ6Hat 98OTJW1YDoGOzDtU3aGNs/YqYivnpmEaWu6xl7b+XvyzZjrwNCzae5pQTcwEK1+K TD6z3A+ud3XhAcNoRIW4+owUPiER1dZlsZYYe1EBNTqEkURSSPq3p59xmLWY1AWH AkGkAnsoT6kSHuxqhaGN3GtKvL69RdAf -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:58 2025 by rpki-client