$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft File: E6R11r48LHrEqN03EGaqbAF0-j0.mft (raw, json) Hash identifier: cqKCHZ9Cm4D/yIePv7+8Fazgwmg7zCGF8PWwvVa6CrU= Subject key identifier: 1F:DA:74:BD:80:83:9A:CE:38:82:2A:6A:69:AA:9C:98:3F:CC:81:FC Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D Certificate issuer: /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D Certificate serial: 0989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft Manifest number: 0982 Signing time: Sun 02 Nov 2025 20:02:01 +0000 Manifest this update: Sun 02 Nov 2025 20:02:00 +0000 Manifest next update: Sun 09 Nov 2025 20:02:00 +0000 Files and hashes: 1: E6R11r48LHrEqN03EGaqbAF0-j0.crl (hash: slThKAviQeeDX0uMxo+fs4tTtk9yLN0rwUOrqipZPP4=) 2: 6B576C449E5711EABC193842C4F9AE02.roa (hash: rmBjNT0g6o5OQJ7VMnQunSAodjeObi4QujloW5TWZhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2441 (0x989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D Validity Not Before: Nov 2 20:02:00 2025 GMT Not After : Nov 9 20:02:00 2025 GMT Subject: CN=6907b8b8-2e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:05:85:ad:4b:fe:6c:c6:52:22:03:e9:82: 9c:bb:c2:3d:36:c8:5d:0c:45:4f:e8:65:6f:5e:07: 04:db:cf:71:5c:03:c4:45:a7:91:48:ac:5a:cb:cf: 4d:5f:db:a4:43:2f:37:20:d2:36:d3:d0:29:6f:aa: 85:35:c3:b9:07:4a:2a:28:d0:69:74:fa:8c:1f:d3: b6:69:e4:56:ee:55:d6:70:3c:29:ae:eb:60:1e:01: 59:f8:8c:5a:d5:65:36:0b:c5:1a:66:8e:a2:9f:b9: 81:06:73:73:75:39:60:4f:18:22:8c:f8:33:fa:1f: 76:3a:36:1f:c6:7c:da:51:19:e4:d3:4c:89:f5:1c: fa:d4:8e:e3:4f:c7:10:6e:ed:ff:91:1e:74:65:60: 11:17:98:1d:7e:30:8b:33:12:e0:49:72:07:96:fe: 5e:c0:be:1f:ec:09:43:09:94:5b:b8:de:b2:5b:7e: 9c:3b:a5:d6:2d:3f:35:fe:60:51:b9:3d:ee:50:c8: ed:3f:8b:06:c4:6e:2e:05:5c:cc:a9:98:22:1e:cc: e3:02:7e:ff:b9:fe:1b:97:60:16:bc:8f:72:87:dc: 0d:47:34:44:e3:d1:a5:8b:2c:5f:24:7c:1f:76:30: c8:e1:ea:e8:1f:6f:5e:35:66:25:b5:5c:e7:86:6b: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DA:74:BD:80:83:9A:CE:38:82:2A:6A:69:AA:9C:98:3F:CC:81:FC X509v3 Authority Key Identifier: keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:05:6b:1e:2f:8a:e1:1b:68:12:e9:eb:68:0c:12:f1:43:d5: 32:c5:24:b4:c2:eb:fe:22:38:7f:8c:9b:d6:d1:d2:b4:aa:34: a2:c8:2e:ab:bb:fe:a1:bc:c8:88:6d:43:cf:b1:96:ee:46:bb: 55:3c:c3:9a:85:7e:74:03:1e:1b:03:d1:28:64:43:39:34:36: a7:e8:97:7f:57:c5:26:64:1a:e2:e7:50:51:16:de:47:f9:f6: 10:94:11:a2:27:4c:6d:04:11:3a:c8:6c:87:7e:e7:ba:2b:08: 2b:78:79:0d:6c:32:a7:6e:90:ea:77:5d:54:67:89:2e:84:10: c8:01:7d:9e:38:44:a2:40:b4:83:2e:54:8a:dd:f9:6a:56:6b: 79:5d:1c:68:be:b9:76:8b:4b:ec:d2:61:eb:69:6b:c3:bd:86: 35:d8:25:ec:90:1e:f6:62:b4:20:b2:71:e1:26:d0:a2:bb:51: a9:08:d2:c4:20:8f:bd:34:57:ab:bf:38:6a:68:c9:be:e1:aa: 2d:5b:c0:94:e2:de:56:74:f9:31:2e:9a:12:6e:45:7a:af:95: cc:42:32:29:d2:18:4b:1d:c9:3d:b6:91:5a:89:a1:2a:17:d7: 2a:f6:dc:0a:c6:cf:67:5e:b9:36:de:80:2e:7a:94:ba:2b:d9: e2:84:2f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExNDExMTAvBgNVBAUTKDEzQTQ3NUQ2QkUzQzJDN0FDNEE4REQzNzEwNjZBQTZD MDE3NEZBM0QwHhcNMjUxMTAyMjAwMjAwWhcNMjUxMTA5MjAwMjAwWjAYMRYwFAYD VQQDEw02OTA3YjhiOC0yZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SsFha1L/mzGUiID6YKcu8I9NshdDEVP6GVvXgcE289xXAPERaeRSKxay89N X9ukQy83INI209Apb6qFNcO5B0oqKNBpdPqMH9O2aeRW7lXWcDwprutgHgFZ+Ixa 1WU2C8UaZo6in7mBBnNzdTlgTxgijPgz+h92OjYfxnzaURnk00yJ9Rz61I7jT8cQ bu3/kR50ZWARF5gdfjCLMxLgSXIHlv5ewL4f7AlDCZRbuN6yW36cO6XWLT81/mBR uT3uUMjtP4sGxG4uBVzMqZgiHszjAn7/uf4bl2AWvI9yh9wNRzRE49GliyxfJHwf djDI4eroH29eNWYltVznhmuO7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/adL2A g5rOOIIqammqnJg/zIH8MB8GA1UdIwQYMBaAFBOkdda+PCx6xKjdNxBmqmwBdPo9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTE0MS9BRUQxOERBODlF NTUxMUVBOEREMTkwM0NDNEY5QUUwMi9FNlIxMXI0OExIckVxTjAzRUdhcWJBRjAt ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U2UjExcjQ4TEhyRXFOMDNFR2FxYkFGMC1qMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTE0MS9BRUQxOERBODlFNTUxMUVBOEREMTkwM0NDNEY5QUUwMi9FNlIxMXI0OExI ckVxTjAzRUdhcWJBRjAtajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjBWseL4rhG2gS6etoDBLxQ9UyxSS0wuv+Ijh/jJvW0dK0qjSiyC6r u/6hvMiIbUPPsZbuRrtVPMOahX50Ax4bA9EoZEM5NDan6Jd/V8UmZBri51BRFt5H +fYQlBGiJ0xtBBE6yGyHfue6KwgreHkNbDKnbpDqd11UZ4kuhBDIAX2eOESiQLSD LlSK3flqVmt5XRxovrl2i0vs0mHraWvDvYY12CXskB72YrQgsnHhJtCiu1GpCNLE II+9NFervzhqaMm+4aotW8CU4t5WdPkxLpoSbkV6r5XMQjIp0hhLHck9tpFaiaEq F9cq9twKxs9nXrk23oAuepS6K9nihC8w -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:38 2025 by rpki-client