$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: IdqKXFho/relGjTJcoDlqbPkzHw1Uzms6eHQ1CboFBQ= Subject key identifier: 55:FC:EE:A3:66:83:41:16:95:FB:A5:A6:CA:DD:E1:6B:50:5B:06:21 Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 0214 Signing time: Mon 03 Nov 2025 02:15:56 +0000 Manifest this update: Mon 03 Nov 2025 02:15:56 +0000 Manifest next update: Mon 10 Nov 2025 02:15:56 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: GLwAqjZLlQqLq4ne+r/Ul3mjfjXPF7sbyliH43C/ZZI=) 2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: mfifBvvuBOWR51qu4TAHtYf7r268zx0oLY0Ybp1m38c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Nov 3 02:15:56 2025 GMT Not After : Nov 10 02:15:56 2025 GMT Subject: CN=6908105c-c29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:67:6f:5f:f8:12:1a:90:6b:13:83:73:5f: 7d:18:ad:22:14:a9:d0:d1:26:7c:f6:4c:ab:71:10: 21:91:a6:dd:a4:b8:9d:6b:3f:a4:a7:5a:98:a7:3f: 74:df:0d:48:5f:7d:97:61:63:31:50:bd:94:54:46: 3d:c7:7a:b9:7d:20:b5:c3:8d:ce:21:bf:4e:23:af: e3:41:db:90:eb:bf:89:0d:cf:6e:fc:e4:56:4c:ae: 69:6f:d0:07:20:6f:d7:80:fb:5b:83:ca:2e:bd:21: b5:54:14:70:aa:a6:b2:9a:0e:c1:5d:c9:36:54:18: c6:32:5f:d3:c1:60:67:9b:f0:50:75:a0:e2:18:d9: 3f:66:f7:78:34:23:d1:a1:f6:d6:9e:55:51:93:c8: 4d:ac:8f:71:a7:43:45:d7:8c:1f:1b:45:39:55:d7: 92:34:b6:b7:18:9c:58:27:7c:5a:e1:45:a6:a0:dd: c3:fb:b6:46:f5:ea:27:f3:a6:17:98:aa:af:c7:e3: 08:a1:fb:1f:04:96:a3:f8:9c:5a:00:d5:3d:0b:e4: ca:c7:35:26:e9:b2:46:56:8b:ab:bd:46:5f:ef:05: 8c:2b:ac:3b:64:bb:ef:16:4c:62:32:e6:da:70:50: a9:a6:ff:e9:41:f2:27:53:e6:9b:b2:9e:93:da:cb: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FC:EE:A3:66:83:41:16:95:FB:A5:A6:CA:DD:E1:6B:50:5B:06:21 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:50:d8:6f:15:2e:69:46:3a:2e:ea:45:42:98:9e:0f:0d:b3: 46:13:20:9d:fa:61:78:df:1b:6b:15:97:cc:ee:21:58:34:d9: a1:c0:14:aa:f9:3e:d7:3c:05:fe:07:12:83:d9:f7:74:a7:67: 2d:28:05:7a:a4:b8:0a:eb:ce:01:84:56:bc:4b:cb:0c:1c:54: 80:4f:29:11:1b:4d:3e:82:d2:b5:4e:33:04:4d:9a:27:dc:4e: b3:3a:d5:fb:32:20:69:fb:81:f7:f9:ac:7f:b2:82:e7:4e:e2: e6:e5:0c:e1:2e:74:5e:50:d7:d2:c1:e5:b3:83:93:a5:13:5c: 90:32:c9:28:f5:5a:61:c4:d5:32:bd:32:e0:b7:c8:96:e2:9e: 85:c7:bb:b5:63:fa:c2:ec:0a:25:b0:62:ce:7a:da:e3:c6:41: 69:43:82:9e:09:28:6c:d7:7b:bc:db:b6:63:9c:09:47:ba:86: ce:58:6e:bc:ee:4d:69:3a:5a:79:d6:e1:9d:47:7a:74:95:a4: 10:60:db:ae:81:dd:54:a7:3a:ae:b3:14:92:23:af:e0:3d:39: 95:57:aa:47:4c:29:60:b6:98:e4:b7:07:eb:9d:fb:f8:09:e8: 45:48:e7:2d:55:6b:0b:41:7d:e2:57:4d:50:93:63:86:75:25: a8:48:01:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjUxMTAzMDIxNTU2WhcNMjUxMTEwMDIxNTU2WjAYMRYwFAYD VQQDEw02OTA4MTA1Yy1jMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24Fnb1/4EhqQaxODc199GK0iFKnQ0SZ89kyrcRAhkabdpLidaz+kp1qYpz90 3w1IX32XYWMxUL2UVEY9x3q5fSC1w43OIb9OI6/jQduQ67+JDc9u/ORWTK5pb9AH IG/XgPtbg8ouvSG1VBRwqqaymg7BXck2VBjGMl/TwWBnm/BQdaDiGNk/Zvd4NCPR ofbWnlVRk8hNrI9xp0NF14wfG0U5VdeSNLa3GJxYJ3xa4UWmoN3D+7ZG9eon86YX mKqvx+MIofsfBJaj+JxaANU9C+TKxzUm6bJGVourvUZf7wWMK6w7ZLvvFkxiMuba cFCppv/pQfInU+absp6T2sub3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX87qNm g0EWlfulpsrd4WtQWwYhMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFUNhvFS5pRjou6kVCmJ4PDbNGEyCd+mF43xtrFZfM7iFYNNmhwBSq +T7XPAX+BxKD2fd0p2ctKAV6pLgK684BhFa8S8sMHFSATykRG00+gtK1TjMETZon 3E6zOtX7MiBp+4H3+ax/soLnTuLm5QzhLnReUNfSweWzg5OlE1yQMsko9VphxNUy vTLgt8iW4p6Fx7u1Y/rC7AolsGLOetrjxkFpQ4KeCShs13u827ZjnAlHuobOWG68 7k1pOlp51uGdR3p0laQQYNuugd1UpzqusxSSI6/gPTmVV6pHTClgtpjktwfrnfv4 CehFSOctVWsLQX3iV01Qk2OGdSWoSAH+ -----END CERTIFICATE-----Generated at Tue Nov 4 15:01:42 2025 by rpki-client