$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: C3sHIEMThyz37c4R8RQHOqBg6TsflYeQhIg2wSEa3Y8= Subject key identifier: 19:95:39:12:7B:8B:52:59:80:BE:52:8A:4C:3E:D2:5D:02:89:FD:D4 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 0734 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 072B Signing time: Sun 02 Nov 2025 21:45:03 +0000 Manifest this update: Sun 02 Nov 2025 21:45:02 +0000 Manifest next update: Sun 09 Nov 2025 21:45:02 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: tf+2VwTrcJz7W7UA2mNv7U+gVJjka0CUM+ydQx8GCSg=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1844 (0x734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Nov 2 21:45:02 2025 GMT Not After : Nov 9 21:45:02 2025 GMT Subject: CN=6907d0de-580c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:40:01:fd:87:28:e5:cd:94:38:ed:b3:29: 83:ce:20:25:72:50:3e:2e:ec:32:e9:20:71:8c:ca: 45:b7:18:d2:e9:5b:00:cc:8e:e3:a8:06:d1:30:8e: 3c:0c:cb:d9:c9:65:f5:1a:0a:ca:ee:24:6d:a8:83: ae:b5:81:e6:af:5c:46:28:1e:8b:a2:af:8c:ab:92: bb:ed:2b:56:fa:3b:b7:c4:bd:49:cb:69:04:2d:58: 29:b4:02:6b:d6:b7:1a:a2:88:9f:c4:7b:1d:5e:e8: 20:9b:ab:fc:d8:f3:19:ba:4d:54:99:8f:75:de:63: 45:04:d0:93:9e:a3:0b:a5:f1:d0:cf:37:5f:7b:7f: 36:70:d2:08:a1:2b:af:81:b5:7d:62:3a:a6:83:e4: f1:60:fa:15:36:7d:64:ec:26:41:e0:c3:ea:b5:3f: 62:3c:39:00:2a:1b:b7:bd:5e:ba:7d:de:fe:6b:91: c4:4e:c4:3e:cc:04:1d:3c:7e:61:95:47:73:6a:18: cb:23:d7:33:5a:ba:c3:fb:a7:b3:1d:69:b9:1b:89: 32:a2:31:5a:09:9e:88:96:b7:fd:d7:ba:47:a6:23: a9:d4:7b:6a:60:66:7f:d5:b9:03:92:78:e0:39:59: 47:a0:8c:0a:41:95:9e:92:f5:a5:92:1b:04:a6:ed: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:39:12:7B:8B:52:59:80:BE:52:8A:4C:3E:D2:5D:02:89:FD:D4 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:62:a5:08:3a:59:c7:43:64:7a:d4:20:b0:d2:36:c7:b1:c4: 6b:74:f4:6d:78:c5:0a:a2:b2:22:be:8c:0d:e0:95:0b:c0:d3: d8:5b:76:4b:37:c9:a3:44:89:3c:c7:17:75:26:b9:a8:3f:7c: 95:3d:76:b2:84:f2:0c:44:d9:3a:47:e1:e5:94:5f:14:d7:f8: de:b2:4d:cf:12:85:0b:fd:a0:24:d4:69:f4:4a:59:13:d8:1b: 17:ad:f7:d2:1b:99:c9:0d:d4:88:cb:f6:d2:3d:b8:e3:d5:e5: 89:c9:ea:3e:b7:0f:46:1b:2d:a5:1c:fb:66:8e:0c:48:26:a6: 0d:41:e7:fc:b6:83:d5:8d:2d:2d:05:42:2c:b2:74:a0:41:88: fb:74:79:ba:38:bc:33:af:10:17:a8:48:ad:57:bb:ef:a0:b9: 5f:e8:0c:d7:41:1e:4d:4e:1f:62:04:50:cd:eb:d1:75:c6:d7: 9f:ce:32:02:32:86:e4:16:f1:4d:fb:32:e9:84:29:c8:64:6c: ac:32:14:33:46:e8:ba:e3:97:43:0b:a3:90:3a:28:76:b8:ef: d2:c7:fe:3f:38:b7:8a:82:8d:c0:53:70:cb:fb:3f:82:53:64: d4:89:9b:8d:af:45:f8:27:b4:3f:ac:af:66:b7:15:c0:94:a6: be:9f:d2:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUxMTAyMjE0NTAyWhcNMjUxMTA5MjE0NTAyWjAYMRYwFAYD VQQDEw02OTA3ZDBkZS01ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaxAAf2HKOXNlDjtsymDziAlclA+Luwy6SBxjMpFtxjS6VsAzI7jqAbRMI48 DMvZyWX1GgrK7iRtqIOutYHmr1xGKB6Loq+Mq5K77StW+ju3xL1Jy2kELVgptAJr 1rcaooifxHsdXuggm6v82PMZuk1UmY913mNFBNCTnqMLpfHQzzdfe382cNIIoSuv gbV9Yjqmg+TxYPoVNn1k7CZB4MPqtT9iPDkAKhu3vV66fd7+a5HETsQ+zAQdPH5h lUdzahjLI9czWrrD+6ezHWm5G4kyojFaCZ6Ilrf917pHpiOp1HtqYGZ/1bkDknjg OVlHoIwKQZWekvWlkhsEpu01swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmVORJ7 i1JZgL5Sikw+0l0Cif3UMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIYqUIOlnHQ2R61CCw0jbHscRrdPRteMUKorIivowN4JULwNPYW3ZL N8mjRIk8xxd1JrmoP3yVPXayhPIMRNk6R+HllF8U1/jesk3PEoUL/aAk1Gn0SlkT 2BsXrffSG5nJDdSIy/bSPbjj1eWJyeo+tw9GGy2lHPtmjgxIJqYNQef8toPVjS0t BUIssnSgQYj7dHm6OLwzrxAXqEitV7vvoLlf6AzXQR5NTh9iBFDN69F1xtefzjIC MobkFvFN+zLphCnIZGysMhQzRui645dDC6OQOih2uO/Sx/4/OLeKgo3AU3DL+z+C U2TUiZuNr0X4J7Q/rK9mtxXAlKa+n9IU -----END CERTIFICATE-----Generated at Tue Nov 4 08:31:19 2025 by rpki-client