$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: 2QQzrfMK/1iHOzyIEhTC0ULmnCagy+ypazTZaez/3vY= Subject key identifier: C7:7A:38:8C:32:A6:BD:5D:6C:49:9D:C9:EE:C1:D7:12:F6:EA:2F:16 Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0C89 Signing time: Sun 02 Nov 2025 18:21:51 +0000 Manifest this update: Sun 02 Nov 2025 18:21:50 +0000 Manifest next update: Sun 09 Nov 2025 18:21:50 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: tRHNOtNi5XwnVPFV/0sHMuMxwy6abtm3PCENYDEEJmE=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: Nov 2 18:21:50 2025 GMT Not After : Nov 9 18:21:50 2025 GMT Subject: CN=6907a13f-af7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:66:f1:de:b5:15:61:b1:82:0d:21:32:01: 66:8f:4c:4b:3d:a3:e6:a7:ea:e1:89:5b:f3:07:bc: bf:e2:94:e1:67:74:86:b9:0d:90:87:8e:05:b1:bf: 8b:93:d5:d9:0f:ba:dd:19:3f:f3:26:84:6c:f3:bc: ff:27:db:e2:c9:a8:22:d2:c8:fa:27:9d:ee:f4:73: 10:1a:6d:b1:04:83:78:3d:ca:76:d1:9c:b1:9b:25: b3:a1:d5:d9:7b:37:12:7e:6b:6c:b1:b1:c0:8c:b4: 6c:8a:dc:28:09:3b:b1:e8:b2:b6:b5:05:7a:50:45: 56:64:f3:8f:14:c2:c3:03:df:68:e4:47:96:e8:f8: cd:97:eb:57:db:6e:46:f7:68:f6:03:7b:28:6e:dc: 31:e1:51:0c:77:9d:92:c8:e6:33:8f:b0:0e:33:04: 05:cb:ff:71:ae:6a:c0:27:28:50:7c:c6:51:b3:0c: ca:72:0a:07:c2:ae:6d:20:94:94:d8:b7:d8:d3:1a: 5e:59:2b:d2:f5:d4:c6:88:2e:bc:84:61:97:ad:e1: 12:b8:54:f6:85:ce:fe:b5:02:eb:f7:60:c6:4b:c5: 1b:83:73:8c:b8:28:c2:c5:13:7d:5c:ab:1c:02:82: d0:5e:9c:de:ec:3c:8a:93:32:1b:86:1a:f4:c0:61: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7A:38:8C:32:A6:BD:5D:6C:49:9D:C9:EE:C1:D7:12:F6:EA:2F:16 X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:92:1c:b1:78:d5:42:b2:39:88:54:ca:a2:12:27:37:54:de: 46:9e:d6:e2:70:5e:96:d2:09:1e:6c:12:b6:f5:3a:2c:d2:dd: 52:49:c0:d2:2f:d4:fb:74:bd:ce:a4:3a:37:a3:cd:e7:d4:56: 1b:25:f8:37:11:6d:9c:db:c4:5d:1a:7e:55:71:f5:90:e6:4b: b6:fb:f3:5b:b2:bb:49:41:1b:84:17:01:0c:ab:46:c1:7e:a2: be:80:3f:ab:ce:c5:23:c6:94:35:8b:82:57:00:b9:75:01:38: f7:8f:eb:29:c8:bd:90:dd:ac:ce:76:7f:cc:32:45:80:fa:28: 28:84:46:ed:3e:fd:41:38:56:6d:17:3d:d8:c8:68:d2:c0:60: a7:7f:13:eb:75:72:9f:c3:ba:e1:3e:e7:1e:92:05:4e:8a:44: 87:1e:5a:a2:4c:4a:f8:82:72:13:36:ca:ff:d7:15:32:e7:a3: 3f:01:23:27:5e:d1:2e:fe:de:a0:15:5d:6d:03:d1:9e:09:2b: 98:e9:0b:46:68:51:39:35:2b:4e:dd:e3:53:74:37:f3:5c:1e: bf:66:d5:8d:9f:03:d0:c9:45:92:96:69:eb:1c:82:d5:28:30: 7b:72:79:4c:dd:07:2b:14:e1:03:16:92:81:6e:48:9a:94:7d: 8d:d1:cd:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjUxMTAyMTgyMTUwWhcNMjUxMTA5MTgyMTUwWjAYMRYwFAYD VQQDEw02OTA3YTEzZi1hZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Mhm8d61FWGxgg0hMgFmj0xLPaPmp+rhiVvzB7y/4pThZ3SGuQ2Qh44Fsb+L k9XZD7rdGT/zJoRs87z/J9viyagi0sj6J53u9HMQGm2xBIN4Pcp20ZyxmyWzodXZ ezcSfmtssbHAjLRsitwoCTux6LK2tQV6UEVWZPOPFMLDA99o5EeW6PjNl+tX225G 92j2A3sobtwx4VEMd52SyOYzj7AOMwQFy/9xrmrAJyhQfMZRswzKcgoHwq5tIJSU 2LfY0xpeWSvS9dTGiC68hGGXreESuFT2hc7+tQLr92DGS8Ubg3OMuCjCxRN9XKsc AoLQXpze7DyKkzIbhhr0wGEiZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd6OIwy pr1dbEmdye7B1xL26i8WMB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfkhyxeNVCsjmIVMqiEic3VN5GntbicF6W0gkebBK29Tos0t1SScDS L9T7dL3OpDo3o83n1FYbJfg3EW2c28RdGn5VcfWQ5ku2+/NbsrtJQRuEFwEMq0bB fqK+gD+rzsUjxpQ1i4JXALl1ATj3j+spyL2Q3azOdn/MMkWA+igohEbtPv1BOFZt Fz3YyGjSwGCnfxPrdXKfw7rhPucekgVOikSHHlqiTEr4gnITNsr/1xUy56M/ASMn XtEu/t6gFV1tA9GeCSuY6QtGaFE5NStO3eNTdDfzXB6/ZtWNnwPQyUWSlmnrHILV KDB7cnlM3QcrFOEDFpKBbkialH2N0c1a -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:59 2025 by rpki-client