$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: b0Y8gpUXZc3ABA6y8HXVt+FRRIg+Pudz6PmX0GkSf5A= Subject key identifier: 85:B8:5A:F2:72:9B:61:4F:C4:34:6E:42:91:57:6F:B9:D8:B9:F7:8B Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 01EB Signing time: Mon 03 Nov 2025 02:34:49 +0000 Manifest this update: Mon 03 Nov 2025 02:34:48 +0000 Manifest next update: Mon 10 Nov 2025 02:34:48 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: 3qqsNamO+GVfRzgFlmHngFv1gLHtmBUjD/L4GaPpppQ=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EAhOEk1Moc8akKSrCsGi3T0LgEn8rEjOcRa2pHiI7Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Nov 3 02:34:48 2025 GMT Not After : Nov 10 02:34:48 2025 GMT Subject: CN=690814c8-1811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:97:40:7d:a4:a7:f0:b6:0a:63:d4:3f:3d: 24:84:d3:b0:a4:13:0a:f6:93:e5:e5:d6:e6:0f:b0: e6:8b:f2:77:37:9c:37:8e:29:17:a0:c7:00:e8:03: 81:e6:53:b1:f5:c3:20:47:f4:63:87:82:8b:e3:92: a1:b4:b1:57:7e:d6:3c:18:16:c6:f4:67:67:b7:2f: 01:36:2f:4f:51:1e:8b:3d:92:94:35:32:51:f7:3b: 0d:2b:a9:de:52:94:4d:87:7b:db:ef:f8:8a:e1:ba: 30:33:8c:1c:53:a6:2e:50:8f:85:55:3f:6b:4e:88: 4e:6f:34:39:28:2f:b0:0f:a2:8f:ed:83:37:dc:50: 72:87:b7:43:07:e7:91:c6:11:eb:4e:80:7b:b8:c4: 45:ba:2b:6b:4e:74:02:b0:94:09:4b:3f:da:75:28: 75:cc:ad:91:7c:de:6f:ab:6f:e3:a1:5a:2a:45:4b: 1d:6a:4e:4b:79:43:c0:64:c8:e4:1d:46:f9:b5:b9: 65:d8:b1:79:7b:3b:8c:85:95:ac:6c:96:62:0d:26: ec:a4:94:42:29:66:ab:a4:f8:ae:8a:d1:de:b6:14: 23:c5:8d:bb:1c:91:57:d1:66:72:da:8f:e3:3b:ec: 40:f5:bd:97:a5:41:eb:89:a7:98:4f:c7:f5:1a:a6: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B8:5A:F2:72:9B:61:4F:C4:34:6E:42:91:57:6F:B9:D8:B9:F7:8B X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:30:d7:7e:a4:09:00:5a:8e:27:b3:7c:e4:64:af:18:71:e6: 41:99:54:f0:07:8e:22:3b:f9:d1:4d:28:8c:94:cc:1c:0c:9a: 0c:eb:28:11:7e:e1:62:1b:fe:f3:17:09:65:8f:d5:25:d1:62: 01:13:c2:46:f3:a0:79:c7:b6:b3:0f:3f:d6:b0:b9:ae:1c:07: 4a:f7:c2:a7:17:83:73:75:f0:42:30:e1:09:fe:4b:cf:c2:ad: a5:c3:7e:ab:e3:12:22:80:5d:d1:2e:0b:ea:13:a0:a1:d1:b4: 82:17:a0:5c:b1:c5:a9:e7:32:cc:c7:e4:df:be:86:33:43:3c: b5:8f:8e:52:3f:c8:e1:24:df:02:af:fa:f9:27:75:d0:c8:43: eb:b5:4c:1e:5e:11:db:6b:cc:11:b1:e2:b5:6e:ad:06:86:96: 4b:f3:21:c8:32:0a:d6:b5:80:0d:50:11:ec:f7:b9:d4:9e:89: cd:7f:52:49:5b:b7:58:4f:a3:da:f6:cb:7d:24:99:2a:63:16: 9a:58:3b:ec:0a:ec:dc:09:54:32:63:bb:43:a5:b2:80:37:05: 66:98:32:6e:88:e1:f6:cc:ce:3f:63:25:f6:fb:09:ce:01:22: 96:f2:a4:18:3f:8a:e6:a0:e3:6a:57:b8:be:d6:ea:ae:04:11: d9:7a:3f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUxMTAzMDIzNDQ4WhcNMjUxMTEwMDIzNDQ4WjAYMRYwFAYD VQQDEw02OTA4MTRjOC0xODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIaXQH2kp/C2CmPUPz0khNOwpBMK9pPl5dbmD7Dmi/J3N5w3jikXoMcA6AOB 5lOx9cMgR/Rjh4KL45KhtLFXftY8GBbG9Gdnty8BNi9PUR6LPZKUNTJR9zsNK6ne UpRNh3vb7/iK4bowM4wcU6YuUI+FVT9rTohObzQ5KC+wD6KP7YM33FByh7dDB+eR xhHrToB7uMRFuitrTnQCsJQJSz/adSh1zK2RfN5vq2/joVoqRUsdak5LeUPAZMjk HUb5tbll2LF5ezuMhZWsbJZiDSbspJRCKWarpPiuitHethQjxY27HJFX0WZy2o/j O+xA9b2XpUHriaeYT8f1GqaEJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW4WvJy m2FPxDRuQpFXb7nYufeLMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqMNd+pAkAWo4ns3zkZK8YceZBmVTwB44iO/nRTSiMlMwcDJoM6ygR fuFiG/7zFwllj9Ul0WIBE8JG86B5x7azDz/WsLmuHAdK98KnF4NzdfBCMOEJ/kvP wq2lw36r4xIigF3RLgvqE6Ch0bSCF6BcscWp5zLMx+TfvoYzQzy1j45SP8jhJN8C r/r5J3XQyEPrtUweXhHba8wRseK1bq0GhpZL8yHIMgrWtYANUBHs97nUnonNf1JJ W7dYT6Pa9st9JJkqYxaaWDvsCuzcCVQyY7tDpbKANwVmmDJuiOH2zM4/YyX2+wnO ASKW8qQYP4rmoONqV7i+1uquBBHZej98 -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:35 2025 by rpki-client