$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: 1CV170fLCS1WiUYP3bqVhZ9sSa94QGXQgTSug416Edo= Subject key identifier: 18:F5:E5:FE:4C:30:FC:18:FF:EC:B0:44:B2:32:80:BE:2F:38:A0:B6 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 214C Signing time: Tue 04 Nov 2025 16:01:42 +0000 Manifest this update: Tue 04 Nov 2025 16:01:41 +0000 Manifest next update: Tue 11 Nov 2025 16:01:41 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: 13vbmyxvIzpI0FoQGzQq3M0f3yCNu2Jpz/ih/2nWRm0=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8536 (0x2158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Nov 4 16:01:41 2025 GMT Not After : Nov 11 16:01:41 2025 GMT Subject: CN=690a2366-d460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a8:65:f0:41:c6:84:61:5f:db:02:01:e4:d6: e7:4f:2d:2f:c6:f5:de:94:fb:95:9b:b2:85:a3:2d: f0:71:7a:da:b0:7d:0a:06:15:18:80:61:5c:27:30: 4b:0a:c3:6b:81:1a:44:46:21:3e:c9:7d:ef:7e:8b: 28:17:c7:b3:a0:ea:1e:66:4b:f4:b5:77:98:07:2f: 80:0c:2f:85:73:ee:1e:60:8e:5d:c9:ea:74:16:7b: 00:35:3f:a6:e3:c4:77:9d:2d:d1:c7:54:81:da:1f: c9:ca:2e:e6:aa:05:c7:96:d3:dd:a8:56:fb:58:b8: 9c:8f:e0:ae:67:75:2f:7e:52:12:44:db:37:37:43: b2:c4:ec:96:e4:6c:68:d0:c6:1a:c3:49:cf:94:ae: 59:91:1c:d5:8a:ad:d1:23:73:05:ef:e8:81:c4:01: 60:8d:2f:b1:90:63:ad:49:cf:67:a0:e9:f1:77:16: 0f:c5:0b:44:c6:50:f6:86:86:f6:98:8c:5e:5f:51: 90:a8:fd:22:0f:66:4c:e8:57:90:58:19:eb:21:04: d7:3b:e8:cc:08:28:97:9f:b0:ac:8a:04:15:10:47: 16:49:94:ae:f7:0b:6b:d0:86:b0:da:76:92:16:d1: b1:24:a3:2c:1a:14:7b:a1:4d:eb:4d:3f:2a:97:08: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F5:E5:FE:4C:30:FC:18:FF:EC:B0:44:B2:32:80:BE:2F:38:A0:B6 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:80:b7:b2:36:8d:7a:69:8b:46:94:df:3e:43:45:97:20:65: ee:f6:71:1a:3d:8a:5e:2f:d0:a6:c8:4d:14:36:2b:f1:89:96: 8b:10:4c:80:cb:20:9b:8b:e7:15:69:84:d8:21:28:1b:47:b2: d1:ec:8a:f0:74:9a:c9:0b:38:fb:f5:2d:b1:0f:3f:55:53:4a: 9e:d0:b2:24:80:a3:50:af:0a:e2:3c:7e:3e:fa:55:90:41:b3: fd:43:30:8c:46:c8:fd:6b:7a:dd:ae:68:09:0a:25:54:34:94: 3d:a6:6b:f8:48:90:f9:92:ed:4a:83:47:2d:24:53:ea:53:62: ae:8a:45:bd:5c:2a:ef:94:b2:b0:5e:b6:9c:4f:24:1d:49:11: 28:7b:e3:f6:a4:6c:1a:41:a6:d4:54:6b:31:85:d8:34:95:49: a9:ad:7f:87:f2:72:ab:5b:8d:db:d1:9c:58:ec:89:6b:09:df: 64:14:35:a4:ee:30:c0:f6:f7:7e:f6:ea:96:00:fe:8c:50:44: 0b:e0:17:ca:bc:3c:cc:f6:77:87:82:8d:df:bf:06:79:ad:c9: 9f:65:89:fc:48:dc:a9:00:bd:f3:a6:1c:30:08:e4:78:59:84: 86:a6:af:40:22:68:26:7b:c1:29:d6:12:c4:b7:16:dd:db:02: 81:76:f2:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUxMTA0MTYwMTQxWhcNMjUxMTExMTYwMTQxWjAYMRYwFAYD VQQDEw02OTBhMjM2Ni1kNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Khl8EHGhGFf2wIB5NbnTy0vxvXelPuVm7KFoy3wcXrasH0KBhUYgGFcJzBL CsNrgRpERiE+yX3vfosoF8ezoOoeZkv0tXeYBy+ADC+Fc+4eYI5dyep0FnsANT+m 48R3nS3Rx1SB2h/Jyi7mqgXHltPdqFb7WLicj+CuZ3UvflISRNs3N0OyxOyW5Gxo 0MYaw0nPlK5ZkRzViq3RI3MF7+iBxAFgjS+xkGOtSc9noOnxdxYPxQtExlD2hob2 mIxeX1GQqP0iD2ZM6FeQWBnrIQTXO+jMCCiXn7CsigQVEEcWSZSu9wtr0Iaw2naS FtGxJKMsGhR7oU3rTT8qlwhE+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj15f5M MPwY/+ywRLIygL4vOKC2MB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCogLeyNo16aYtGlN8+Q0WXIGXu9nEaPYpeL9CmyE0UNivxiZaLEEyA yyCbi+cVaYTYISgbR7LR7IrwdJrJCzj79S2xDz9VU0qe0LIkgKNQrwriPH4++lWQ QbP9QzCMRsj9a3rdrmgJCiVUNJQ9pmv4SJD5ku1Kg0ctJFPqU2KuikW9XCrvlLKw XracTyQdSREoe+P2pGwaQabUVGsxhdg0lUmprX+H8nKrW43b0ZxY7IlrCd9kFDWk 7jDA9vd+9uqWAP6MUEQL4BfKvDzM9neHgo3fvwZ5rcmfZYn8SNypAL3zphwwCOR4 WYSGpq9AImgme8Ep1hLEtxbd2wKBdvLF -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:26 2025 by rpki-client