$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: NvZkk9jEU92qu1nj3q14I7uPI97ae06TJdfaIJt9tNY= Subject key identifier: 5B:AC:0E:82:61:48:F8:AF:53:58:6A:FE:9B:A8:97:3B:30:93:25:E9 Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: 01E1 Signing time: Wed 05 Nov 2025 02:55:37 +0000 Manifest this update: Wed 05 Nov 2025 02:55:37 +0000 Manifest next update: Wed 12 Nov 2025 02:55:37 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: H8DGO0mihgU9S6S69mhh1ex1LvYUNt+Ul+1ZXK+7hA8=) 2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: 1jcnYgiH1oCe12gdnItbi9E2/n5D/nkIQyDzvjflQcQ=) 3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: Nov 5 02:55:37 2025 GMT Not After : Nov 12 02:55:37 2025 GMT Subject: CN=690abca9-9203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:9e:f4:a9:96:29:77:cc:3b:b2:c4:98:17: c7:03:e3:07:45:83:8a:61:67:0b:21:98:32:10:91: 9c:41:9a:33:6d:ff:da:47:1f:53:51:af:ae:f4:02: 05:85:3a:fc:11:02:93:cc:ac:86:f3:47:f4:28:04: ce:ea:89:3b:1a:04:cc:1f:a0:08:47:81:b9:d8:d0: fa:c4:7a:54:b8:0c:e6:ec:eb:87:25:75:9f:a8:f0: a6:6c:46:bb:79:2a:2b:02:17:92:92:be:f8:c7:31: 62:f1:37:97:b2:bf:65:f9:27:f8:ae:3f:8a:57:d7: c1:8e:91:73:65:6c:b0:c6:d3:49:b3:ae:ba:7f:d6: 1c:45:8f:25:65:7e:da:e0:1c:91:b5:9d:4e:c8:4d: f1:73:30:35:2c:79:7d:bc:c5:c5:33:71:a3:6a:54: 55:37:b3:96:f4:2c:1d:5a:30:5e:e9:2e:37:a5:e5: 1f:0f:cb:c5:61:af:9c:fb:df:da:6c:7c:3f:52:fe: 80:2d:45:de:88:b2:7a:b7:9e:42:ad:5b:13:4c:b5: 9d:fa:0f:2c:eb:ed:fa:f1:a5:4b:7c:e8:06:18:8f: 66:bb:91:e7:92:f8:58:6e:69:0a:e9:93:57:2c:e3: 35:54:5c:33:bd:01:41:cd:24:9f:70:a9:23:aa:5d: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AC:0E:82:61:48:F8:AF:53:58:6A:FE:9B:A8:97:3B:30:93:25:E9 X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:44:14:95:c1:85:3a:aa:2b:ef:b3:af:f3:fc:88:92:89:a6: 54:62:df:5d:cd:e2:bc:1d:a7:10:b9:61:03:6b:f9:18:e7:da: ef:cc:fe:ee:f2:27:26:64:16:37:e9:64:2b:8f:33:8d:bc:15: 39:10:78:41:7f:1e:9b:33:d3:1f:19:95:c5:cb:f3:5c:d5:35: 96:ce:08:9d:e1:52:11:0b:d3:c2:68:ec:89:06:5b:6e:6c:a5: 07:11:be:04:fd:55:64:93:ab:46:c4:a1:2f:54:f7:df:0f:26: 07:f8:03:a6:eb:e9:96:5b:22:b4:47:a1:24:34:a2:9f:2c:4e: 26:17:5f:bd:d2:a7:99:88:c3:3c:80:c6:f0:95:58:8e:50:70: 8f:1e:05:98:8c:4f:6f:be:e6:35:22:fe:73:ea:02:72:65:98: 6a:6d:fb:f2:6b:4d:57:22:53:09:7f:f8:39:96:7a:bf:26:c3: 09:aa:ba:bc:23:29:0b:83:14:b4:ec:12:75:56:e7:7a:81:8a: 38:0e:e9:42:1e:d8:a8:ac:f6:fd:6e:e7:7c:21:e3:81:01:79: 61:88:65:36:5c:89:5a:df:3e:a2:bf:c6:79:10:01:df:d1:3f: 3f:e9:ff:0c:55:aa:a3:67:ca:de:58:d1:58:ce:54:c1:2e:9b: a1:8f:82:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjUxMTA1MDI1NTM3WhcNMjUxMTEyMDI1NTM3WjAYMRYwFAYD VQQDEw02OTBhYmNhOS05MjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7Se9KmWKXfMO7LEmBfHA+MHRYOKYWcLIZgyEJGcQZozbf/aRx9TUa+u9AIF hTr8EQKTzKyG80f0KATO6ok7GgTMH6AIR4G52ND6xHpUuAzm7OuHJXWfqPCmbEa7 eSorAheSkr74xzFi8TeXsr9l+Sf4rj+KV9fBjpFzZWywxtNJs666f9YcRY8lZX7a 4ByRtZ1OyE3xczA1LHl9vMXFM3GjalRVN7OW9CwdWjBe6S43peUfD8vFYa+c+9/a bHw/Uv6ALUXeiLJ6t55CrVsTTLWd+g8s6+368aVLfOgGGI9mu5HnkvhYbmkK6ZNX LOM1VFwzvQFBzSSfcKkjql3GkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFusDoJh SPivU1hq/puolzswkyXpMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARRBSVwYU6qivvs6/z/IiSiaZUYt9dzeK8HacQuWEDa/kY59rvzP7u 8icmZBY36WQrjzONvBU5EHhBfx6bM9MfGZXFy/Nc1TWWzgid4VIRC9PCaOyJBltu bKUHEb4E/VVkk6tGxKEvVPffDyYH+AOm6+mWWyK0R6EkNKKfLE4mF1+90qeZiMM8 gMbwlViOUHCPHgWYjE9vvuY1Iv5z6gJyZZhqbfvya01XIlMJf/g5lnq/JsMJqrq8 IykLgxS07BJ1Vud6gYo4DulCHtiorPb9bud8IeOBAXlhiGU2XIla3z6iv8Z5EAHf 0T8/6f8MVaqjZ8reWNFYzlTBLpuhj4IG -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:30 2025 by rpki-client