$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: NM64MuPK6aKFqw3gM+K16nqKhYELwue+MRuRniF1EKU= Subject key identifier: 39:D4:36:21:39:B2:CF:18:3E:88:2C:78:92:00:77:01:3B:74:E2:FA Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B42 Signing time: Sun 02 Nov 2025 19:12:57 +0000 Manifest this update: Sun 02 Nov 2025 19:12:57 +0000 Manifest next update: Sun 09 Nov 2025 19:12:57 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: APNxFHuLJ/rW1OC7JEDzTlCfeSJalt5Eqql7rpSXp8U=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: H58uLnLgtQRXxjwDdpgj46LQrUNsRnsgJgSttmaA0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Nov 2 19:12:57 2025 GMT Not After : Nov 9 19:12:57 2025 GMT Subject: CN=6907ad39-8a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:ee:dd:93:aa:68:20:09:65:2d:7d:0e:5e: a8:8d:2d:1c:50:60:48:29:c3:09:85:22:20:d2:1c: 9f:1c:d4:e1:d4:fa:0a:b1:4f:fd:eb:4f:d5:0c:de: 45:73:da:4d:2b:c3:0a:bf:08:8b:f3:74:60:dc:f4: a8:c4:86:39:4a:96:01:df:84:45:71:b6:d5:9a:02: b3:bc:58:8d:dd:84:d4:5c:c9:ea:46:6b:df:f0:f2: 1a:de:b4:67:03:90:3a:1d:90:89:5b:9d:c5:8f:97: 9c:27:5d:5d:f1:7d:1b:32:61:73:31:f2:9b:b6:7a: a8:6b:ac:9e:ea:c4:6a:de:b6:de:1f:06:93:da:a9: 82:83:0f:dd:6f:a4:61:77:fc:32:5f:83:43:1f:a3: 51:98:2c:f5:62:8a:93:cf:ee:5f:f7:2e:35:9e:31: ae:f2:1b:7c:6c:52:05:e6:b8:b6:48:3d:cc:18:5d: 1d:8a:d3:52:cc:c7:49:39:eb:a5:f0:e3:3b:51:de: 03:eb:ae:ea:4f:50:37:0b:2e:7c:69:ea:b3:5b:a1: 12:5a:6d:fe:21:4e:bc:c6:3e:c1:bd:01:9b:63:a4: fe:3a:35:c7:db:26:3b:5f:56:c8:82:43:a4:a0:e3: d6:96:5f:49:37:03:a6:6e:b6:94:66:fe:8a:3f:4e: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:36:21:39:B2:CF:18:3E:88:2C:78:92:00:77:01:3B:74:E2:FA X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:58:69:78:04:dd:b7:c1:ad:f7:86:d2:c5:f2:eb:ab:71:ef: 5c:06:1a:1a:55:c5:00:20:7a:27:e0:65:5d:f5:b0:4b:45:20: 88:22:38:a7:40:8a:0a:a4:69:f8:3c:92:9d:d4:c2:38:27:fd: 14:10:16:f6:34:ad:ec:86:0f:23:fb:b9:01:02:de:3e:db:03: 8f:fb:09:46:f5:74:19:f0:6c:e6:7b:9a:b7:d8:8e:2c:a8:c8: c4:26:0b:32:65:62:93:d9:46:72:28:a7:3a:1c:47:8d:b2:17: ea:a3:5e:70:d4:de:f2:d8:34:98:17:ca:14:f2:a5:a3:ad:eb: 21:59:32:14:97:16:b2:97:7b:8a:2c:60:0a:e4:4f:6b:2e:2c: bd:d6:02:ab:21:85:5d:8d:f6:62:74:38:ca:a9:4a:10:72:80: 66:7a:6e:3f:bf:0c:66:98:e5:d6:06:6a:de:64:11:68:da:69: 75:61:5b:15:29:49:64:bd:f1:b5:0a:3d:59:9a:86:ea:e5:1f: 05:c1:2e:4a:8f:d9:7e:9a:8e:6f:5f:51:12:4f:0a:a0:b7:b7: 1e:10:fa:b4:01:7d:9a:5c:cc:f0:f5:5c:e1:01:91:c8:b5:26: d4:99:0b:87:60:d9:dc:b9:4c:1b:5a:22:f8:61:f6:71:ab:73: 31:48:1d:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUxMTAyMTkxMjU3WhcNMjUxMTA5MTkxMjU3WjAYMRYwFAYD VQQDEw02OTA3YWQzOS04YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslHu3ZOqaCAJZS19Dl6ojS0cUGBIKcMJhSIg0hyfHNTh1PoKsU/960/VDN5F c9pNK8MKvwiL83Rg3PSoxIY5SpYB34RFcbbVmgKzvFiN3YTUXMnqRmvf8PIa3rRn A5A6HZCJW53Fj5ecJ11d8X0bMmFzMfKbtnqoa6ye6sRq3rbeHwaT2qmCgw/db6Rh d/wyX4NDH6NRmCz1YoqTz+5f9y41njGu8ht8bFIF5ri2SD3MGF0ditNSzMdJOeul 8OM7Ud4D667qT1A3Cy58aeqzW6ESWm3+IU68xj7BvQGbY6T+OjXH2yY7X1bIgkOk oOPWll9JNwOmbraUZv6KP063xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnUNiE5 ss8YPogseJIAdwE7dOL6MB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVWGl4BN23wa33htLF8uurce9cBhoaVcUAIHon4GVd9bBLRSCIIjin QIoKpGn4PJKd1MI4J/0UEBb2NK3shg8j+7kBAt4+2wOP+wlG9XQZ8Gzme5q32I4s qMjEJgsyZWKT2UZyKKc6HEeNshfqo15w1N7y2DSYF8oU8qWjreshWTIUlxayl3uK LGAK5E9rLiy91gKrIYVdjfZidDjKqUoQcoBmem4/vwxmmOXWBmreZBFo2ml1YVsV KUlkvfG1Cj1Zmobq5R8FwS5Kj9l+mo5vX1ESTwqgt7ceEPq0AX2aXMzw9VzhAZHI tSbUmQuHYNncuUwbWiL4YfZxq3MxSB0X -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:10 2025 by rpki-client