$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json) Hash identifier: wGZJ2zZS9lKUahqb7ckW4D1kzWrgnFuHo5NfY4NLhN4= Subject key identifier: 6B:84:3C:73:35:4E:E3:0C:7D:6A:61:56:F9:85:A7:00:00:51:86:FA Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft Manifest number: 055D Signing time: Sun 02 Nov 2025 23:24:05 +0000 Manifest this update: Sun 02 Nov 2025 23:24:05 +0000 Manifest next update: Sun 09 Nov 2025 23:24:05 +0000 Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: jWtaxm6w/bnWrs4h9uuf5WJ0GRilf01zcV+U45/aXZs=) 2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: +Mi7BZoKW+xr25lpsKkabZrOyuilHhAO129Cyy+dlGI=) 3: E1755B4E24D711EDBE2C660BC4F9AE02.roa (hash: wWURC3RR4weDeL/+js4Lxv4EiqiaY71sbi8A+8GXIJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Nov 2 23:24:05 2025 GMT Not After : Nov 9 23:24:05 2025 GMT Subject: CN=6907e815-5f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:b8:e5:31:85:ca:31:8a:86:b0:53:7a:2f: ad:82:a2:41:1d:8b:9d:8a:3e:59:26:eb:a0:54:e5: 1f:38:18:bc:b2:1d:19:a2:78:3d:f6:ae:ed:f0:37: 23:3d:0b:27:17:c9:38:61:ca:19:a7:31:3d:09:12: 6d:45:42:29:df:fe:8d:61:bc:5f:13:4c:8d:e0:e3: 75:63:c1:a2:0b:6f:b5:51:80:32:60:8a:73:5d:57: 78:20:e0:11:b3:fa:94:9d:7d:1e:a3:dd:11:80:63: 50:0c:a5:35:91:26:e5:92:dd:6c:38:30:bd:f7:f1: 26:e7:e9:d4:a1:01:23:64:94:ce:d4:cd:38:2b:80: 3b:c2:9a:82:0d:fd:4c:05:ca:ad:92:1a:35:ab:f8: 3a:a7:73:46:74:bf:3f:ff:ac:80:dd:4f:34:b5:e9: 9f:e9:72:a9:76:e6:05:aa:4b:9d:0e:16:0b:37:07: ce:21:98:ec:88:74:33:e2:6d:19:22:be:12:70:1e: 2c:06:1e:cf:73:67:dd:f8:2f:2a:a2:f5:b7:f7:3b: e3:b7:b9:90:88:56:23:dc:65:03:72:45:e8:9d:07: 90:79:63:45:fc:00:a2:83:4a:b6:c1:ee:a0:f3:0f: 03:21:01:6c:6c:41:e2:9a:69:f4:6b:dc:54:3a:6e: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:3C:73:35:4E:E3:0C:7D:6A:61:56:F9:85:A7:00:00:51:86:FA X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:06:ec:6c:b5:f3:63:b9:60:64:cf:84:39:06:1a:ac:10:19: 6f:55:11:ff:ef:15:92:78:e7:e6:a8:6a:30:9a:f3:be:13:41: e6:b7:17:3c:ad:7c:22:80:61:ff:7b:8c:f4:b7:35:75:3f:d2: e8:e6:77:bc:13:25:54:0b:19:71:de:29:c6:2b:68:d7:62:60: 8b:17:ec:4d:fa:e2:42:69:91:f1:1a:ca:49:00:77:b9:75:a2: 93:cf:5c:ac:aa:33:9c:0d:06:0f:12:27:50:a4:4e:b3:46:78: e5:1e:de:40:ce:8f:dd:52:81:ec:7a:19:89:ff:73:0f:44:86: 6a:06:fa:ab:5f:23:12:77:51:65:04:5f:96:19:53:6a:36:f7: b9:a4:be:f7:a2:76:d8:76:fe:8b:b0:b1:be:f7:e4:1a:41:35: f7:1d:ad:a6:9c:b9:06:77:5c:9e:e9:3a:92:de:1f:93:ee:f1: 63:f1:5b:68:45:32:c7:33:a3:3a:38:0a:7c:ff:d2:4a:3f:0a: 1a:4d:ad:c8:ff:4a:87:58:3f:bd:62:02:0d:72:d1:a3:81:34: 36:e8:51:c9:a3:ed:3c:77:fc:19:6a:d5:b5:e2:ea:69:0c:1e: e8:7d:c7:ae:b3:8c:4a:89:cc:ef:c0:1d:49:cf:5a:e2:15:2f: 93:c0:54:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjUxMTAyMjMyNDA1WhcNMjUxMTA5MjMyNDA1WjAYMRYwFAYD VQQDEw02OTA3ZTgxNS01ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36O45TGFyjGKhrBTei+tgqJBHYudij5ZJuugVOUfOBi8sh0Zong99q7t8Dcj PQsnF8k4YcoZpzE9CRJtRUIp3/6NYbxfE0yN4ON1Y8GiC2+1UYAyYIpzXVd4IOAR s/qUnX0eo90RgGNQDKU1kSblkt1sODC99/Em5+nUoQEjZJTO1M04K4A7wpqCDf1M Bcqtkho1q/g6p3NGdL8//6yA3U80temf6XKpduYFqkudDhYLNwfOIZjsiHQz4m0Z Ir4ScB4sBh7Pc2fd+C8qovW39zvjt7mQiFYj3GUDckXonQeQeWNF/ACig0q2we6g 8w8DIQFsbEHimmn0a9xUOm665wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuEPHM1 TuMMfWphVvmFpwAAUYb6MB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3 eDNHUXFFLWJHTnVPdE9JbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwBuxstfNjuWBkz4Q5BhqsEBlvVRH/7xWSeOfmqGowmvO+E0Hmtxc8 rXwigGH/e4z0tzV1P9Lo5ne8EyVUCxlx3inGK2jXYmCLF+xN+uJCaZHxGspJAHe5 daKTz1ysqjOcDQYPEidQpE6zRnjlHt5Azo/dUoHsehmJ/3MPRIZqBvqrXyMSd1Fl BF+WGVNqNve5pL73onbYdv6LsLG+9+QaQTX3Ha2mnLkGd1ye6TqS3h+T7vFj8Vto RTLHM6M6OAp8/9JKPwoaTa3I/0qHWD+9YgINctGjgTQ26FHJo+08d/wZatW14upp DB7ofceus4xKiczvwB1Jz1riFS+TwFTK -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:40 2025 by rpki-client