$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: ZtSpCPUQWwdXkgsBgxKmzbJCC4g5aeNUtFjBALnDVsc= Subject key identifier: 09:68:9E:A3:82:DB:73:FF:D6:C4:B1:15:D4:A2:86:39:4D:A7:EE:40 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0A49 Signing time: Sun 02 Nov 2025 19:40:24 +0000 Manifest this update: Sun 02 Nov 2025 19:40:23 +0000 Manifest next update: Sun 09 Nov 2025 19:40:23 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: pHLMiDXi3A6pBUEB+eAWvMmIbJVogVlX+2uuNOeIS1Y=) 2: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: TxCwNFrh+xkaqDR3M5kqqPa5bX7FhYwp1p0wkxa1CxU=) 3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: JxcjLdYbfNpLt4XJbaeEwHRAAk7SbV4Cw+ExyqNKBV4=) 4: C8A0E422831611EA95762453C4F9AE02.roa (hash: yUwouY97arbHx1ysSRkQtB3/fVJX2BMSgtA5eI1eKIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Nov 2 19:40:23 2025 GMT Not After : Nov 9 19:40:23 2025 GMT Subject: CN=6907b3a8-10f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:ba:86:1f:16:c1:23:da:d1:d4:da:1f:78: 21:7a:ec:ea:af:35:2f:ed:88:76:22:44:36:18:0a: af:cd:48:71:29:21:e6:e5:0c:c8:30:5b:2e:f9:6d: 0e:24:bc:b3:50:59:a6:60:c2:8f:cc:0f:35:69:cf: a5:39:b6:36:9a:c2:72:a6:18:90:af:02:40:ec:78: 88:4e:2d:ee:f7:ed:78:95:68:cd:d6:e7:a4:28:a8: aa:4a:81:c5:76:10:32:a2:e7:5d:a1:fe:89:fd:6d: 73:54:46:b3:f7:75:a1:ac:d2:cf:46:9f:fd:9b:29: 23:c6:28:96:d3:93:ed:89:be:dc:db:63:d8:4a:b3: 0a:cd:fe:44:b3:c4:a3:cc:4c:16:a3:28:ed:78:68: 7a:d6:e2:c9:39:5c:bc:51:a1:b0:1e:ef:97:98:a6: 6e:58:10:ba:49:82:7e:56:57:d7:a2:ae:b5:65:b4: 91:f3:37:a7:08:b5:a5:1e:5c:84:31:34:f2:f8:14: f2:1e:bc:b2:b0:63:e0:81:d8:50:68:d0:ce:60:25: f0:fd:c5:44:7e:0c:5a:39:f9:03:19:72:e2:9e:74: d4:f8:4f:7d:1e:8a:bf:f3:f2:61:8a:f2:03:24:91: b7:73:1d:6a:c8:2d:c2:73:d7:66:9c:e3:dc:02:d9: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:68:9E:A3:82:DB:73:FF:D6:C4:B1:15:D4:A2:86:39:4D:A7:EE:40 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:b5:aa:fb:32:6a:26:db:c5:52:8c:13:4f:e7:41:c0:27:4d: 8e:e3:0a:79:da:5d:fe:7b:3e:d7:a7:bc:2d:e7:73:28:56:2e: 5a:44:b1:af:6d:a2:39:e4:46:d9:c5:d3:a1:61:a7:d9:0d:08: 61:55:74:3d:98:54:e0:7b:aa:16:fd:80:28:88:9a:30:11:38: 4b:24:d7:53:bc:25:c7:72:89:3a:ed:25:39:e6:9f:a1:e9:cc: 9d:6e:b4:b2:9a:c3:9c:06:fa:94:95:ea:89:6e:e2:06:65:b1: 60:f6:a5:c7:1e:bc:4e:3f:cb:59:b2:c0:5f:bf:03:0a:b5:64: 02:55:95:09:5e:93:2d:49:31:14:0f:f6:8b:26:3b:db:8d:67: fa:db:28:43:05:3a:0a:4d:79:1e:a4:35:3a:26:66:62:0f:7e: 5c:0c:e5:2d:7c:b6:07:d0:43:b8:e7:18:28:2a:34:53:ec:dc: 08:ab:8f:b2:f4:4f:df:c0:95:55:86:75:65:e9:1c:55:e7:3b: 45:75:e7:0d:ae:97:40:55:8d:ac:ec:77:6a:ca:de:cc:d9:9f: d8:db:76:c1:35:ce:7e:cc:aa:7a:d7:f1:00:43:f0:b1:b3:ff: e4:5b:be:d4:8c:e5:46:39:cf:da:a3:cd:0d:38:fa:8d:08:dd: d7:06:3b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjUxMTAyMTk0MDIzWhcNMjUxMTA5MTk0MDIzWjAYMRYwFAYD VQQDEw02OTA3YjNhOC0xMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso+6hh8WwSPa0dTaH3gheuzqrzUv7Yh2IkQ2GAqvzUhxKSHm5QzIMFsu+W0O JLyzUFmmYMKPzA81ac+lObY2msJyphiQrwJA7HiITi3u9+14lWjN1uekKKiqSoHF dhAyouddof6J/W1zVEaz93WhrNLPRp/9mykjxiiW05Ptib7c22PYSrMKzf5Es8Sj zEwWoyjteGh61uLJOVy8UaGwHu+XmKZuWBC6SYJ+VlfXoq61ZbSR8zenCLWlHlyE MTTy+BTyHryysGPggdhQaNDOYCXw/cVEfgxaOfkDGXLinnTU+E99Hoq/8/JhivID JJG3cx1qyC3Cc9dmnOPcAtlMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlonqOC 23P/1sSxFdSihjlNp+5AMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCttar7Mmom28VSjBNP50HAJ02O4wp52l3+ez7Xp7wt53MoVi5aRLGv baI55EbZxdOhYafZDQhhVXQ9mFTge6oW/YAoiJowEThLJNdTvCXHcok67SU55p+h 6cydbrSymsOcBvqUleqJbuIGZbFg9qXHHrxOP8tZssBfvwMKtWQCVZUJXpMtSTEU D/aLJjvbjWf62yhDBToKTXkepDU6JmZiD35cDOUtfLYH0EO45xgoKjRT7NwIq4+y 9E/fwJVVhnVl6RxV5ztFdecNrpdAVY2s7Hdqyt7M2Z/Y23bBNc5+zKp61/EAQ/Cx s//kW77UjOVGOc/ao80NOPqNCN3XBjs8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:43 2025 by rpki-client