$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json) Hash identifier: ULQ94V8Zu9KHXUd92IFlDNKRy2NKB2/ydBrCNL7f/xo= Subject key identifier: BE:4C:4A:E9:25:1B:BD:3B:24:64:8D:44:22:88:72:7C:A6:A8:4C:D1 Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft Manifest number: 35 Signing time: Thu 23 Oct 2025 09:53:21 +0000 Manifest this update: Thu 23 Oct 2025 09:53:21 +0000 Manifest next update: Thu 30 Oct 2025 09:53:21 +0000 Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: QwqVe9c8BUlTtBFkWuTtEsa49BXy+LZswbs81HGvc3k=) 2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: bd7Gyj5KNeVEwD0iXG4ANGqD2PVntxmIGI6qgC7T6Rg=) 3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 9jfSP8gh6271KQbI+jNnvgnlMdq0sgOuoX6+h4wU+tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Validity Not Before: Oct 23 09:53:21 2025 GMT Not After : Oct 30 09:53:21 2025 GMT Subject: CN=68f9fb11-820f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:dd:4f:c3:20:b0:cc:11:c6:23:51:e5:19: b6:2f:96:f4:cf:83:2a:de:03:cc:f7:22:67:b2:41: e3:89:3d:27:bd:8d:11:70:34:3d:16:46:ee:df:17: 21:3f:31:91:fc:0c:60:fb:8a:df:c5:34:b6:f0:f3: 9d:6a:7c:da:e5:42:74:f6:fa:f5:44:3e:4e:58:32: 34:f8:08:63:5a:57:90:3a:1d:4d:cd:3e:b3:dd:16: 82:85:48:b8:61:1f:97:73:33:46:50:a1:90:51:37: 85:bc:08:89:9d:ea:9e:87:00:99:58:1e:61:b2:a0: d2:b7:72:df:58:de:60:d7:b9:e9:c5:82:63:46:34: 0f:72:ae:3c:bd:f6:ae:b4:b7:98:18:e3:7c:62:17: c5:2e:06:4e:68:7e:75:fa:28:b1:84:8a:d1:7f:97: f1:ce:1f:52:b7:bd:6c:1a:33:e1:de:04:86:88:1f: cd:bc:22:a3:75:0a:a8:dc:d3:0c:cf:0c:9a:f3:0e: 9a:59:69:b7:52:38:57:60:41:39:3a:3a:d0:8c:f4: 20:4a:7b:be:9d:b1:98:65:fa:c8:82:41:b3:e7:be: 18:f8:8d:b2:21:a2:3d:d5:69:be:98:26:6a:6f:66: c2:26:59:df:90:14:bb:24:24:09:7c:bb:ad:3f:83: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4C:4A:E9:25:1B:BD:3B:24:64:8D:44:22:88:72:7C:A6:A8:4C:D1 X509v3 Authority Key Identifier: keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d0:69:99:19:1b:1a:f7:f6:88:a6:b0:2c:a9:70:83:61:ac: c0:07:1c:c4:6c:da:d7:17:f1:1a:f9:2e:38:88:9f:61:e6:63: dc:dc:24:73:62:fa:6a:3f:b5:13:e0:b6:fa:70:8f:87:04:2e: b1:db:04:35:39:0b:bc:1a:3e:94:11:2c:53:8e:9d:01:bf:b7: d1:f8:81:a9:06:c9:37:27:b7:d6:34:85:25:1a:af:a6:f7:ed: 74:6a:37:54:ee:20:19:ba:8e:be:c4:d6:8d:4c:1f:40:54:7d: 79:14:f8:d1:f3:88:8a:95:d0:fb:40:e4:03:1b:9d:e6:97:3b: 07:25:32:d1:93:70:53:54:1b:ea:51:a6:4b:8e:13:36:58:28: 6f:7b:e5:80:99:dd:e6:d5:49:c3:c1:f6:c4:bc:48:62:ce:bd: 18:b8:46:af:fe:7f:6d:3f:48:7d:f0:85:91:87:a5:00:64:a6: e9:4f:db:36:1e:2d:8a:13:4e:d1:be:c8:e3:41:1b:a8:a5:58: 86:c8:79:0d:75:20:7f:6d:20:cb:29:d1:34:67:3e:c0:c0:09: 3a:14:5a:c8:d6:68:82:55:e3:b0:8d:bd:9f:7c:99:86:81:34: e1:8a:f3:5f:45:51:17:ae:2b:93:12:27:83:3c:9d:af:cf:0a: 1b:00:9b:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMTAwQjI1MzU0NjY0NjgxREFBQjkwNUNFRkY0QTREQTc0 OUM0RUI4QTAeFw0yNTEwMjMwOTUzMjFaFw0yNTEwMzAwOTUzMjFaMBgxFjAUBgNV BAMTDTY4ZjlmYjExLTgyMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5wd1PwyCwzBHGI1HlGbYvlvTPgyreA8z3ImeyQeOJPSe9jRFwND0WRu7fFyE/ MZH8DGD7it/FNLbw851qfNrlQnT2+vVEPk5YMjT4CGNaV5A6HU3NPrPdFoKFSLhh H5dzM0ZQoZBRN4W8CImd6p6HAJlYHmGyoNK3ct9Y3mDXuenFgmNGNA9yrjy99q60 t5gY43xiF8UuBk5ofnX6KLGEitF/l/HOH1K3vWwaM+HeBIaIH828IqN1Cqjc0wzP DJrzDppZabdSOFdgQTk6OtCM9CBKe76dsZhl+siCQbPnvhj4jbIhoj3Vab6YJmpv ZsImWd+QFLskJAl8u60/g7zPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvkxK6SUb vTskZI1EIohyfKaoTNEwHwYDVR0jBBgwFoAUEAslNUZkaB2quQXO/0pNp0nE64ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzQ2QjAwNTA0NkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUFzbE5VWmthQjJxdVFYT18wcE5wMG5FNjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzQ2QjAwNTA0NkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIy cXVRWE9fMHBOcDBuRTY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABHQaZkZGxr39oimsCypcINhrMAHHMRs2tcX8Rr5LjiIn2HmY9zcJHNi +mo/tRPgtvpwj4cELrHbBDU5C7waPpQRLFOOnQG/t9H4gakGyTcnt9Y0hSUar6b3 7XRqN1TuIBm6jr7E1o1MH0BUfXkU+NHziIqV0PtA5AMbneaXOwclMtGTcFNUG+pR pkuOEzZYKG975YCZ3ebVScPB9sS8SGLOvRi4Rq/+f20/SH3whZGHpQBkpulP2zYe LYoTTtG+yONBG6ilWIbIeQ11IH9tIMsp0TRnPsDACToUWsjWaIJV47CNvZ98mYaB NOGK819FUReuK5MSJ4M8na/PChsAmwk= -----END CERTIFICATE-----Generated at Fri Oct 24 00:36:46 2025 by rpki-client