$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json) Hash identifier: 60CfCLXbzbVoQP4k1dctM94FiHX/i03mbttrdj3zWjw= Subject key identifier: E4:62:90:C8:8D:15:14:CA:98:FE:67:21:43:15:20:20:74:12:8B:78 Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft Manifest number: 01C3 Signing time: Mon 03 Nov 2025 02:54:39 +0000 Manifest this update: Mon 03 Nov 2025 02:54:38 +0000 Manifest next update: Mon 10 Nov 2025 02:54:38 +0000 Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: rHb5xwVKpoSaFCmzDZ70vs7P9lLtjnRCtFLwRlOTll0=) 2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: SwrvoVYgU6/JlbNtHbJmqe4zyeb9jSsFgyQPBZNxoww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: Nov 3 02:54:38 2025 GMT Not After : Nov 10 02:54:38 2025 GMT Subject: CN=6908196f-c6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:08:f9:02:8b:61:d7:c2:98:9e:db:3e:7c: c6:ca:dc:3b:a1:11:64:f6:8d:5e:e8:28:59:06:67: 51:34:0b:f6:71:08:54:8b:91:8a:d6:39:ca:da:d6: 91:c8:63:15:ef:6e:db:29:da:c5:b8:6e:cb:79:bf: e3:c2:07:1e:08:72:0b:77:21:6c:89:9c:c3:9d:4a: b1:51:23:c9:1c:67:e2:fe:e4:da:2d:c5:3c:62:d9: 0d:b1:81:25:97:df:41:41:e4:51:59:70:60:25:5c: c6:98:48:af:12:dd:78:af:5d:b6:3c:ef:24:b5:8c: e0:7b:e1:46:f0:f9:f0:9b:3d:b3:2c:be:bc:69:4a: 7a:31:fe:39:98:ac:05:ad:c9:9c:ef:96:10:4b:42: 8e:81:20:11:dc:fd:5d:f3:00:c5:f9:68:9d:31:51: 91:a7:6f:74:7c:73:c0:98:63:0e:99:40:e3:d2:c4: b6:52:68:30:ca:59:65:5e:81:e1:0b:96:c7:d2:e4: e8:f2:e0:89:1c:75:dd:2d:85:e0:45:3e:db:3b:9e: fe:32:a3:38:21:49:9d:5e:ef:76:a2:4d:7b:87:41: 3e:fa:db:0d:af:a4:6d:2d:b0:4e:58:26:a4:32:aa: 20:bf:f8:f0:d3:cd:77:85:01:78:ba:a3:00:bb:4e: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:62:90:C8:8D:15:14:CA:98:FE:67:21:43:15:20:20:74:12:8B:78 X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8d:99:b9:94:62:35:77:e5:25:36:f2:e4:5b:a2:db:ba:a2: 4c:aa:db:3b:97:51:56:45:94:59:3e:23:fa:6d:e1:0a:10:fa: fd:91:1d:ac:15:9b:8c:1b:d5:e9:8f:a4:fd:09:d0:be:44:11: a7:7c:41:70:25:68:ac:01:35:f1:93:27:e6:d5:21:b8:cc:e6: 2b:c9:3a:ce:7f:ef:ce:a7:ed:4f:a1:24:35:5b:61:d8:b4:90: 09:c0:02:2f:d7:f2:5f:fa:a3:22:51:c0:f7:fe:b3:db:b9:02: 08:35:ab:b4:76:3a:b5:f8:71:56:4f:77:91:93:cf:4d:11:b2: 52:f2:d6:3a:07:ff:8b:21:4e:55:bb:b0:38:7e:ee:d0:00:fb: 93:65:94:d4:b8:a6:f3:2c:67:50:b7:3a:ec:04:49:05:df:d2: e2:67:3e:b5:d7:70:5b:f1:89:40:2c:13:27:7d:b1:ad:08:c1: 9c:11:6e:af:c1:d0:3d:5f:c4:01:9e:d7:af:ba:65:7f:3d:0f: d4:c4:93:3c:c7:19:06:cf:53:47:dc:c9:af:d3:5e:78:90:40: 9e:a2:6a:f9:3c:b2:c7:5f:72:47:c1:c9:ff:62:e1:81:d7:8c: 98:62:ae:dc:9c:44:da:c8:48:a2:90:49:a9:3f:65:f6:6a:b0: 47:69:63:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjUxMTAzMDI1NDM4WhcNMjUxMTEwMDI1NDM4WjAYMRYwFAYD VQQDEw02OTA4MTk2Zi1jNmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApB8I+QKLYdfCmJ7bPnzGytw7oRFk9o1e6ChZBmdRNAv2cQhUi5GK1jnK2taR yGMV727bKdrFuG7Leb/jwgceCHILdyFsiZzDnUqxUSPJHGfi/uTaLcU8YtkNsYEl l99BQeRRWXBgJVzGmEivEt14r122PO8ktYzge+FG8Pnwmz2zLL68aUp6Mf45mKwF rcmc75YQS0KOgSAR3P1d8wDF+WidMVGRp290fHPAmGMOmUDj0sS2UmgwylllXoHh C5bH0uTo8uCJHHXdLYXgRT7bO57+MqM4IUmdXu92ok17h0E++tsNr6RtLbBOWCak Mqogv/jw0813hQF4uqMAu06usQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORikMiN FRTKmP5nIUMVICB0Eot4MB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REFGQi9FQzBGNkEzODAzNDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82 Q2lnYTU0QVRab3p0NmtDclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkjZm5lGI1d+UlNvLkW6LbuqJMqts7l1FWRZRZPiP6beEKEPr9kR2s FZuMG9Xpj6T9CdC+RBGnfEFwJWisATXxkyfm1SG4zOYryTrOf+/Op+1PoSQ1W2HY tJAJwAIv1/Jf+qMiUcD3/rPbuQIINau0djq1+HFWT3eRk89NEbJS8tY6B/+LIU5V u7A4fu7QAPuTZZTUuKbzLGdQtzrsBEkF39LiZz6113Bb8YlALBMnfbGtCMGcEW6v wdA9X8QBntevumV/PQ/UxJM8xxkGz1NH3Mmv0154kECeomr5PLLHX3JHwcn/YuGB 14yYYq7cnETayEiikEmpP2X2arBHaWNH -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:22 2025 by rpki-client