$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json) Hash identifier: ICujtLNYd0IVeBVZq/iU6VpuXcCKFftUAzRXrrerWLg= Subject key identifier: 99:F9:06:F8:EC:1C:D0:4F:2B:CF:84:88:6E:08:8E:6C:08:13:D5:28 Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft Manifest number: 0A2B Signing time: Sun 02 Nov 2025 19:43:51 +0000 Manifest this update: Sun 02 Nov 2025 19:43:50 +0000 Manifest next update: Sun 09 Nov 2025 19:43:50 +0000 Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: vukVSg3THxzgRdU4URj1SpFanZKDHrbglOWF/t0TskA=) 2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: h8TCOQAYkMWzOV4xPaOkVqyIiRzREyWEnJXkzl12ups=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Validity Not Before: Nov 2 19:43:50 2025 GMT Not After : Nov 9 19:43:50 2025 GMT Subject: CN=6907b477-f009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:50:47:da:b6:21:b1:35:af:f7:1c:77:e3:26: 8f:d2:3e:2d:a2:e0:33:ec:2a:69:3e:0b:09:28:6b: de:a9:7a:d0:93:3d:68:38:54:36:88:81:fe:a0:e8: 22:93:3c:26:39:c2:89:54:27:6f:25:e0:f2:91:2a: 93:52:95:c0:0f:74:39:f7:b6:f0:ef:99:90:50:21: eb:4c:54:d9:6b:c8:6e:76:10:49:a5:22:4f:39:89: f7:ef:17:e7:a8:de:ea:d8:40:b2:b3:0c:95:6c:7a: da:5f:9f:ba:3f:51:94:d2:c3:6e:10:74:de:fe:65: ba:a8:98:c2:61:4c:61:a4:47:05:b6:08:83:00:a1: 32:fa:97:a2:d2:fb:be:e1:7d:2f:86:86:2f:cb:67: 88:3b:e8:27:d0:78:6b:16:c3:b4:bd:39:dd:5c:13: a8:63:3a:b8:79:ed:4f:65:b0:77:90:6d:11:7d:6c: 9d:17:d4:9b:84:44:d4:ac:fb:1e:66:c5:4c:f7:93: 4f:61:81:11:55:34:2e:00:97:ef:c3:47:9b:58:c8: 66:67:ab:38:74:d6:a3:15:5a:33:3a:0f:50:18:f0: 2f:87:18:23:84:ec:05:96:d2:ec:e8:45:ea:77:ba: 60:19:10:45:a6:dc:d2:2c:97:f0:7d:ad:7a:fa:87: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F9:06:F8:EC:1C:D0:4F:2B:CF:84:88:6E:08:8E:6C:08:13:D5:28 X509v3 Authority Key Identifier: keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:74:9c:4a:1f:a7:48:fa:9c:39:f9:00:9f:33:71:7b:97:19: 7d:48:f7:09:ee:fc:0b:da:98:1b:b8:ee:74:3f:5a:9b:b3:84: 23:32:55:62:f1:dd:c6:72:d6:a6:11:4f:05:eb:5d:08:0b:a7: 48:ca:03:4e:02:68:ba:c1:66:a2:c6:92:27:72:c1:32:2c:30: 5d:ef:fc:97:c2:e0:03:73:23:0b:99:11:23:e7:cd:e6:0e:aa: ba:8e:f0:e8:d8:71:02:3b:b4:86:c0:10:64:bf:24:ef:82:e7: 77:29:ac:53:25:99:b6:96:bd:fb:bc:a0:5a:c5:a4:c3:9b:fe: 34:b7:f1:93:49:2a:04:7b:01:31:17:d1:2c:aa:78:05:8c:11: f4:43:3e:fe:87:e5:c0:a2:16:07:e4:62:92:9e:4e:59:59:61: e8:33:4e:66:24:b3:d5:a3:f5:ee:8f:8d:51:a2:bb:6b:ea:b8: ba:8a:89:71:50:21:21:c6:5d:47:f8:32:7d:f1:48:9f:d1:44: ea:05:e0:d6:d3:f6:92:c1:e1:b7:85:b9:d0:d5:1c:0d:f1:86: 5a:30:de:7d:0a:40:23:3f:52:ba:3e:85:d4:fb:cc:73:47:4c: 8e:ab:30:3d:52:7d:58:4f:57:56:20:3b:73:ec:36:65:ed:39: 90:13:3b:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDEyNTYwMThGRTZFNTM4QzQwMEY2M0ZDN0UxMjFDM0E3 MDFGMkRFQTkwHhcNMjUxMTAyMTk0MzUwWhcNMjUxMTA5MTk0MzUwWjAYMRYwFAYD VQQDEw02OTA3YjQ3Ny1mMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFBH2rYhsTWv9xx34yaP0j4touAz7CppPgsJKGveqXrQkz1oOFQ2iIH+oOgi kzwmOcKJVCdvJeDykSqTUpXAD3Q597bw75mQUCHrTFTZa8hudhBJpSJPOYn37xfn qN7q2ECyswyVbHraX5+6P1GU0sNuEHTe/mW6qJjCYUxhpEcFtgiDAKEy+pei0vu+ 4X0vhoYvy2eIO+gn0HhrFsO0vTndXBOoYzq4ee1PZbB3kG0RfWydF9SbhETUrPse ZsVM95NPYYERVTQuAJfvw0ebWMhmZ6s4dNajFVozOg9QGPAvhxgjhOwFltLs6EXq d7pgGRBFptzSLJfwfa16+oco9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn5Bvjs HNBPK8+EiG4IjmwIE9UoMB8GA1UdIwQYMBaAFBJWAY/m5TjEAPY/x+Ehw6cB8t6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81QzhDQjRENjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9NUUE5al9INFNIRHB3SHkz cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VsWUJqLWJsT01RQTlqX0g0U0hEcHdIeTNxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81QzhDQjRENjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9N UUE5al9INFNIRHB3SHkzcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZdJxKH6dI+pw5+QCfM3F7lxl9SPcJ7vwL2pgbuO50P1qbs4QjMlVi 8d3GctamEU8F610IC6dIygNOAmi6wWaixpIncsEyLDBd7/yXwuADcyMLmREj583m Dqq6jvDo2HECO7SGwBBkvyTvgud3KaxTJZm2lr37vKBaxaTDm/40t/GTSSoEewEx F9EsqngFjBH0Qz7+h+XAohYH5GKSnk5ZWWHoM05mJLPVo/Xuj41Rortr6ri6iolx UCEhxl1H+DJ98Uif0UTqBeDW0/aSweG3hbnQ1RwN8YZaMN59CkAjP1K6PoXU+8xz R0yOqzA9Un1YT1dWIDtz7DZl7TmQEzux -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:07 2025 by rpki-client