$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: Ka60/TQfBFzMtQQD8O1KfcXDbTcZ6BKVD8DtMDfBzUs= Subject key identifier: 16:0F:B0:E4:CD:60:F3:52:0C:E1:38:B9:9E:3A:DF:2A:67:E8:12:41 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 018C Signing time: Wed 05 Nov 2025 03:45:04 +0000 Manifest this update: Wed 05 Nov 2025 03:45:04 +0000 Manifest next update: Wed 12 Nov 2025 03:45:04 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: wq1wUnbP2YJD0sccDMWspWoSDktf0/kXzDhH0Y3Bn18=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: LxLPbHiBrc2q8AKSiQDO6oDP+86BoYqMLvI4jJ40wTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Nov 5 03:45:04 2025 GMT Not After : Nov 12 03:45:04 2025 GMT Subject: CN=690ac840-97f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:79:59:a7:6d:2a:93:99:ed:c1:3a:b4:47: 7e:f9:58:95:42:0d:42:7b:60:83:fb:d7:5e:52:9b: ee:82:56:1e:73:00:89:1e:dc:f1:98:3a:c4:1f:b9: 64:fa:0c:30:4e:d7:b9:de:12:86:ed:6d:5f:97:c0: 80:e6:a6:d4:76:ef:5a:cd:58:02:37:39:20:25:14: 1a:18:ed:a1:96:7a:27:6d:49:ba:4a:e1:bc:5f:bf: ae:03:15:49:d7:64:59:6d:50:9a:ff:00:6d:82:1b: 26:96:29:da:11:82:78:cc:ec:27:60:61:c7:59:cc: 2b:6e:bf:e5:ea:10:55:cf:f1:cc:44:48:3c:4f:5d: f4:82:24:b9:18:ef:d3:2b:32:c5:14:1c:f1:d6:59: 0a:4c:25:70:97:bd:a3:5e:97:c3:dd:6b:79:a9:f2: 6c:9b:ab:1d:1b:e8:46:2d:4e:1e:aa:cb:2d:1e:78: 64:af:32:52:ac:8e:d1:b1:ff:0c:12:96:44:aa:03: c0:b4:52:ad:79:79:c9:d1:07:1e:2d:44:50:90:9a: 21:f2:85:96:08:7c:f0:8e:c5:4a:f7:7f:88:1b:97: 30:f9:69:98:db:ea:ed:f9:29:9c:27:11:20:ac:0d: 80:2f:7c:85:bc:ad:fd:75:80:20:0a:2a:dc:70:86: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0F:B0:E4:CD:60:F3:52:0C:E1:38:B9:9E:3A:DF:2A:67:E8:12:41 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:cc:4e:3b:bd:c3:cb:f2:72:5b:8f:49:a0:cc:be:75:cc:52: 24:81:c2:4a:5d:f5:c7:bd:e4:f0:65:4a:7a:50:ed:49:a5:b0: df:a2:e3:27:94:31:3c:25:b8:d9:95:49:22:5e:9c:99:3c:89: 34:3b:9b:d4:5e:dd:01:03:e8:6f:1a:82:72:a2:6e:da:ac:cf: 19:9f:cf:cf:bc:fc:bd:34:3a:37:a8:1b:f6:c1:f3:0f:b0:cb: d4:91:a5:17:3e:a8:b0:d4:d6:4c:21:26:e1:e7:82:6f:ab:ce: 77:ea:e1:05:bf:68:cc:de:47:af:56:4d:52:85:7d:68:03:ad: 9d:67:14:74:fd:8a:e2:2b:9e:3d:bc:cb:8c:5a:6a:58:a1:c9: a3:3c:1c:ab:00:75:1a:7a:a5:ea:64:e6:01:d9:ea:c3:83:ed: 88:f3:c4:4f:3f:7f:63:5e:25:60:2a:e2:75:a5:a3:c6:5b:c8: 10:d7:c4:67:7f:d3:3c:2b:b7:98:62:d2:62:31:8e:e8:0c:99: d2:13:25:af:c4:6f:e4:64:81:93:03:ad:d5:00:7e:bf:c1:65: 07:92:2a:5a:5f:6a:fc:e1:51:17:c4:49:0e:e3:70:71:fc:46: 51:66:73:1f:25:84:81:f0:09:cf:3e:45:8f:da:6e:55:04:4c: 45:c6:8f:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUxMTA1MDM0NTA0WhcNMjUxMTEyMDM0NTA0WjAYMRYwFAYD VQQDEw02OTBhYzg0MC05N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgV5WadtKpOZ7cE6tEd++ViVQg1Ce2CD+9deUpvuglYecwCJHtzxmDrEH7lk +gwwTte53hKG7W1fl8CA5qbUdu9azVgCNzkgJRQaGO2hlnonbUm6SuG8X7+uAxVJ 12RZbVCa/wBtghsmlinaEYJ4zOwnYGHHWcwrbr/l6hBVz/HMREg8T130giS5GO/T KzLFFBzx1lkKTCVwl72jXpfD3Wt5qfJsm6sdG+hGLU4eqsstHnhkrzJSrI7Rsf8M EpZEqgPAtFKteXnJ0QceLURQkJoh8oWWCHzwjsVK93+IG5cw+WmY2+rt+SmcJxEg rA2AL3yFvK39dYAgCirccIYuswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYPsOTN YPNSDOE4uZ463ypn6BJBMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEzE47vcPL8nJbj0mgzL51zFIkgcJKXfXHveTwZUp6UO1JpbDfouMn lDE8JbjZlUkiXpyZPIk0O5vUXt0BA+hvGoJyom7arM8Zn8/PvPy9NDo3qBv2wfMP sMvUkaUXPqiw1NZMISbh54Jvq8536uEFv2jM3kevVk1ShX1oA62dZxR0/YriK549 vMuMWmpYocmjPByrAHUaeqXqZOYB2erDg+2I88RPP39jXiVgKuJ1paPGW8gQ18Rn f9M8K7eYYtJiMY7oDJnSEyWvxG/kZIGTA63VAH6/wWUHkipaX2r84VEXxEkO43Bx /EZRZnMfJYSB8AnPPkWP2m5VBExFxo8o -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:44 2025 by rpki-client