$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: 5A3TkkapuPRz2VVjl7DDzvqYoT5hiHE/wcLjCeT0s0k= Subject key identifier: 56:A1:47:4D:00:66:E1:B1:C9:30:70:F6:68:DD:65:8E:62:4C:F4:49 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 04CF Signing time: Mon 27 Oct 2025 00:52:57 +0000 Manifest this update: Mon 27 Oct 2025 00:52:57 +0000 Manifest next update: Mon 03 Nov 2025 00:52:57 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: XLHNzj8VNhHuROQZ0yQfxIOpqTQEyOGz7Ogw4ZkgTyI=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Oct 27 00:52:57 2025 GMT Not After : Nov 3 00:52:57 2025 GMT Subject: CN=68fec269-2e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:0d:ba:37:7e:4b:4a:1f:62:89:b1:1e:03: 31:a3:7a:58:4e:d4:81:8f:39:d2:c6:cc:86:68:6e: aa:9c:8d:e7:99:33:a0:10:b4:ca:7c:09:a5:28:47: 19:05:33:d9:74:af:4f:5e:94:94:62:75:3b:84:ba: e7:9a:f7:84:15:e3:a0:ec:5c:7f:2c:c7:5e:87:4b: 80:22:8c:e3:8a:6d:d8:9f:8b:9e:b5:35:c3:4f:73: 72:c2:9a:0e:12:d7:af:0f:97:d8:99:cd:cc:82:d3: 9c:5a:c1:7c:4b:28:46:1c:3a:c3:e9:c8:c9:d4:ce: 75:f6:94:98:b8:f3:be:68:11:ff:a7:3a:ff:74:0c: e3:ae:5c:14:bb:b5:c4:e7:33:6d:a0:04:29:c6:8e: 15:17:56:37:b1:5f:33:3f:fc:0e:c4:d7:c5:33:e6: 7f:aa:28:45:43:a8:e4:6a:90:9e:e8:4c:11:1a:bb: 2b:a5:de:ac:53:5d:13:76:d4:2e:b5:89:07:e3:ab: 2a:fe:70:00:3f:ff:d0:dc:33:28:d6:5c:4e:e4:92: 6f:cf:f8:de:26:a0:55:0b:bd:38:fd:40:92:87:b5: 27:f2:0d:00:35:2f:48:90:b9:73:2d:6f:fa:de:cb: 0d:8e:59:cb:aa:40:b7:89:d6:58:d4:ab:00:97:b6: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A1:47:4D:00:66:E1:B1:C9:30:70:F6:68:DD:65:8E:62:4C:F4:49 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:eb:2d:d0:fb:5d:54:22:b4:ee:22:32:84:e9:fc:79:c6:70: 1e:e3:4d:f2:9f:07:9a:85:f4:e8:2a:3e:91:48:eb:b8:0c:bf: c0:5e:bd:08:51:0b:da:e1:01:37:ac:20:af:b0:20:63:9e:55: 29:52:8a:9f:06:92:93:4f:a6:66:18:6c:e2:e8:d7:f7:dd:b9: 1f:e1:7e:04:97:6a:28:b4:89:8b:c8:57:38:c1:ec:97:95:5a: e2:f1:01:7e:27:cb:3f:f7:35:b2:e7:a0:a8:79:ef:c4:3c:1a: 49:cd:af:28:7b:9a:b8:f0:10:41:68:62:e4:c6:2d:be:95:17: 0f:b5:eb:b4:56:71:5f:1a:19:de:78:4e:75:df:96:21:da:43: dc:d4:b2:e7:ba:9e:f0:1c:9b:a1:9d:3f:de:d8:03:dc:fc:8b: 9d:25:11:fb:3a:80:bf:8e:d9:77:78:73:99:25:29:54:a2:78: 51:40:b3:46:b3:c0:dd:99:aa:dd:4e:c5:38:8a:59:f9:b2:9e: 68:e7:f6:a1:d4:d7:20:66:d7:61:41:57:af:6b:e5:2a:ec:22: dc:e5:55:0e:74:5c:cf:78:ac:50:4a:5f:ea:1f:2c:c5:74:ff: d2:ab:fb:84:db:92:d4:a5:77:10:1c:4f:9a:8a:33:66:f5:3c: 52:12:63:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUxMDI3MDA1MjU3WhcNMjUxMTAzMDA1MjU3WjAYMRYwFAYD VQQDEw02OGZlYzI2OS0yZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyUNujd+S0ofYomxHgMxo3pYTtSBjznSxsyGaG6qnI3nmTOgELTKfAmlKEcZ BTPZdK9PXpSUYnU7hLrnmveEFeOg7Fx/LMdeh0uAIozjim3Yn4uetTXDT3NywpoO EtevD5fYmc3MgtOcWsF8SyhGHDrD6cjJ1M519pSYuPO+aBH/pzr/dAzjrlwUu7XE 5zNtoAQpxo4VF1Y3sV8zP/wOxNfFM+Z/qihFQ6jkapCe6EwRGrsrpd6sU10TdtQu tYkH46sq/nAAP//Q3DMo1lxO5JJvz/jeJqBVC704/UCSh7Un8g0ANS9IkLlzLW/6 3ssNjlnLqkC3idZY1KsAl7bMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFahR00A ZuGxyTBw9mjdZY5iTPRJMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+6y3Q+11UIrTuIjKE6fx5xnAe403ynweahfToKj6RSOu4DL/AXr0I UQva4QE3rCCvsCBjnlUpUoqfBpKTT6ZmGGzi6Nf33bkf4X4El2ootImLyFc4weyX lVri8QF+J8s/9zWy56Coee/EPBpJza8oe5q48BBBaGLkxi2+lRcPteu0VnFfGhne eE5135Yh2kPc1LLnup7wHJuhnT/e2APc/IudJRH7OoC/jtl3eHOZJSlUonhRQLNG s8DdmardTsU4iln5sp5o5/ah1NcgZtdhQVeva+Uq7CLc5VUOdFzPeKxQSl/qHyzF dP/Sq/uE25LUpXcQHE+aijNm9TxSEmN7 -----END CERTIFICATE-----Generated at Tue Oct 28 18:44:11 2025 by rpki-client