$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: 2ci/3xvVN4iAM7Wm7wnbBAFxd7g6n+hRY1NQ1wj/HR8= Subject key identifier: A4:30:B2:89:29:40:96:3A:42:AC:E0:44:18:04:32:B1:C6:22:30:90 Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0BB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0B56 Signing time: Sun 02 Nov 2025 19:19:54 +0000 Manifest this update: Sun 02 Nov 2025 19:19:53 +0000 Manifest next update: Sun 09 Nov 2025 19:19:53 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: bGgXAmvpFaaL26BPDGD4NYe/AEdOWm7h82FU3agJlg4=) 2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: Gi3ZB3u4tIqQA57JWptzmGj4T0h+RzUq8o/c0VetBYI=) 3: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: lgdsNT8nYBqcm8DCsobXOW7p2S7NgKOOoWUT5xQjbBE=) 4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: 3JOJzRv4irtlrsMwD4nhQQebwbICPddO6QXSBTA7ZXU=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: eR1CwoT+DNfBY5Fom2xgTVdBct441pK1ZuTbHGG+Djc=) 6: B66F0C58817111EFB121970CC4F9AE02.roa (hash: mu1iARnCi5kA2mbUie8M1ra9hiXhkaHe7HXaTEKFUdU=) 7: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: TTlhGhUAD/2NGqtgzSrC9HKcOBdgmaTheq7ErX+FNZ4=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: YF3wvRDD0dzUZakdeFWJrsLYoJUpMBgClY/hZFPMmvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2996 (0xbb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Nov 2 19:19:53 2025 GMT Not After : Nov 9 19:19:53 2025 GMT Subject: CN=6907aed9-fd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:af:4b:0f:3f:b8:8d:eb:2c:65:3b:4f:26: 20:c0:fd:54:a6:7f:b9:44:23:38:b3:2e:48:68:05: b8:10:db:8f:85:8e:b5:c0:25:41:b1:24:7c:90:37: 5f:49:e6:b9:fd:78:b3:67:c3:79:da:65:dd:cb:85: b2:50:ad:16:ef:f2:f4:ec:83:41:32:bc:2c:c6:50: e1:70:36:6a:5b:1c:05:2a:45:79:ee:4e:20:56:73: 71:e3:c6:79:05:5f:05:4a:13:36:4b:49:83:78:74: 03:80:f7:4e:ff:c7:e7:4e:39:f4:ab:fd:62:6b:8d: 9c:a1:5d:7a:21:27:5c:1c:db:60:3f:14:76:cb:a4: e9:56:a5:ea:27:3c:bf:b3:07:0e:71:25:43:98:2a: da:9f:9d:20:a4:a2:e5:e1:dc:10:54:33:45:6f:7a: 39:5f:9c:f2:a8:99:b1:e7:da:d8:95:59:54:fc:5e: 8a:47:77:07:47:33:9e:e8:84:59:ff:29:d3:33:aa: 5d:db:11:6a:9a:86:fe:7f:6e:9f:03:f6:23:39:8b: 47:89:3a:b0:54:bc:03:ed:0b:aa:81:79:22:30:d1: a4:c1:33:79:fa:6e:2f:fd:a9:14:8a:72:1f:f1:7d: cc:79:81:d0:be:a1:e4:28:e1:a5:f5:62:22:1c:f2: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:30:B2:89:29:40:96:3A:42:AC:E0:44:18:04:32:B1:C6:22:30:90 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:6c:0b:c8:de:c2:96:7d:a3:7f:41:16:f9:29:44:96:7d:36: 82:0a:02:32:4f:37:38:d3:86:03:62:c8:05:ff:95:de:4c:c5: 53:a7:90:0e:f4:99:25:56:2d:ba:9e:74:bc:e8:02:b2:50:af: e1:04:e5:db:87:0b:3b:e2:ca:5c:3c:f7:98:41:66:b9:21:ef: 31:13:64:41:29:1d:79:80:00:42:22:07:9e:5f:74:5c:66:02: 15:ec:58:b3:d6:2e:74:7e:d0:d7:c2:42:1f:3a:12:d0:cd:bc: a0:79:52:74:52:2a:08:9a:08:e6:25:5d:f5:99:76:bf:36:78: b3:ae:b4:f9:bb:90:af:a5:06:55:f1:47:b0:ed:2b:62:ed:02: 18:02:b7:60:d1:7d:80:9a:6d:72:d2:02:4e:3c:5b:14:97:ea: f7:f1:6c:98:e3:01:bd:bd:f2:99:75:c6:8d:d2:53:90:2c:36: 57:38:9d:57:13:9a:fe:73:6d:1a:ce:9b:05:1a:e9:97:e6:e8: c3:47:5e:97:76:9c:5b:23:e3:ea:4c:bf:38:51:00:c0:3d:88: b2:c6:83:78:7f:62:2c:14:71:44:c2:58:2d:9d:ba:34:f9:63: ed:96:92:2d:31:bb:51:d2:ee:13:d9:5d:a8:b2:05:03:05:35: 25:d7:d2:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjUxMTAyMTkxOTUzWhcNMjUxMTA5MTkxOTUzWjAYMRYwFAYD VQQDEw02OTA3YWVkOS1mZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOuvSw8/uI3rLGU7TyYgwP1Upn+5RCM4sy5IaAW4ENuPhY61wCVBsSR8kDdf Sea5/XizZ8N52mXdy4WyUK0W7/L07INBMrwsxlDhcDZqWxwFKkV57k4gVnNx48Z5 BV8FShM2S0mDeHQDgPdO/8fnTjn0q/1ia42coV16ISdcHNtgPxR2y6TpVqXqJzy/ swcOcSVDmCran50gpKLl4dwQVDNFb3o5X5zyqJmx59rYlVlU/F6KR3cHRzOe6IRZ /ynTM6pd2xFqmob+f26fA/YjOYtHiTqwVLwD7QuqgXkiMNGkwTN5+m4v/akUinIf 8X3MeYHQvqHkKOGl9WIiHPIbowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQwsokp QJY6QqzgRBgEMrHGIjCQMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlbAvI3sKWfaN/QRb5KUSWfTaCCgIyTzc404YDYsgF/5XeTMVTp5AO 9JklVi26nnS86AKyUK/hBOXbhws74spcPPeYQWa5Ie8xE2RBKR15gABCIgeeX3Rc ZgIV7Fiz1i50ftDXwkIfOhLQzbygeVJ0UioImgjmJV31mXa/NnizrrT5u5CvpQZV 8Uew7Sti7QIYArdg0X2Amm1y0gJOPFsUl+r38WyY4wG9vfKZdcaN0lOQLDZXOJ1X E5r+c20azpsFGumX5ujDR16XdpxbI+PqTL84UQDAPYiyxoN4f2IsFHFEwlgtnbo0 +WPtlpItMbtR0u4T2V2osgUDBTUl19Jo -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:55 2025 by rpki-client