$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: M9hRTBKtcd3tbdXD8GJfcUeXltlcTd4PB8H+PBTpaW4= Subject key identifier: ED:AC:E3:4A:5D:6E:C0:5D:5C:10:A7:56:3F:86:0B:5A:07:7D:F5:E4 Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 01FC Signing time: Wed 05 Nov 2025 02:33:43 +0000 Manifest this update: Wed 05 Nov 2025 02:33:43 +0000 Manifest next update: Wed 12 Nov 2025 02:33:43 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: 4I1rA/8jJPOUGV/nvGKJkODF2WOP2p36/czy3cQV4No=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: O+pEwQE3iQIl6k8H64M8+4x6mQxagzl13MHt0furEwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Nov 5 02:33:43 2025 GMT Not After : Nov 12 02:33:43 2025 GMT Subject: CN=690ab787-6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:ae:8f:a1:93:e5:dd:53:8f:f4:bd:cc:92: b2:5b:39:a4:06:34:11:50:f5:bc:1b:e1:3d:65:23: 8e:cb:09:75:18:f7:a7:58:ca:5b:1e:51:80:c2:31: 44:4f:2f:a0:80:81:f0:91:cc:cb:19:38:ad:ac:14: 3b:b0:ed:54:a1:7f:2d:22:39:20:74:74:08:a2:e5: bd:8b:6d:e4:b1:51:c5:2f:e6:bd:83:bb:52:b0:61: 33:8c:ba:93:c6:fb:2c:4f:8f:78:54:e9:8e:bd:27: 74:fe:10:bb:af:db:46:ae:0c:45:bb:24:b1:97:bb: f8:04:d9:d8:ff:a4:d5:88:7a:fa:7f:83:7b:53:e6: 14:68:da:15:ab:ca:1c:b6:03:36:7f:50:48:04:dc: 61:2c:e9:a8:72:35:0f:0d:ea:71:35:ca:ec:4f:5e: d6:fa:c5:d2:81:56:e3:25:6a:41:7c:27:ef:21:48: 0f:8c:fd:8b:59:3f:7d:28:8e:66:38:74:2b:c8:c1: 45:da:1c:8e:f6:60:c4:6e:64:02:a5:e7:4f:48:5c: 01:b9:72:10:38:d6:b0:af:b9:5e:1b:57:87:05:05: 25:f8:1f:74:b8:7d:8e:e7:a2:bb:9a:f1:6a:6e:50: 49:6e:5b:99:a9:9a:7a:a6:ff:97:71:94:86:6c:cb: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AC:E3:4A:5D:6E:C0:5D:5C:10:A7:56:3F:86:0B:5A:07:7D:F5:E4 X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:56:31:6e:dc:60:5d:af:8c:24:0a:d9:6a:ee:2e:68:49:41: fa:42:fd:99:a1:80:56:6d:91:42:ad:53:37:f5:c6:60:ac:03: 19:95:86:a2:26:1e:d9:65:23:9b:cc:ef:f2:bb:be:b2:85:a3: 6a:ab:c8:30:66:6a:8d:21:c1:8c:17:98:86:0f:ee:85:08:7f: 82:dd:5e:19:ac:3f:c0:5b:2f:6d:9d:b9:c4:99:7d:c4:c0:30: fb:25:21:23:97:76:c1:8b:fa:2a:48:81:b2:cd:bd:66:6b:e2: 45:34:a9:37:fc:a4:37:51:fa:8b:a8:f7:e8:50:5a:d8:d7:d2: 2d:e8:86:cd:82:9f:64:36:85:25:08:d4:b8:5c:c8:6f:db:82: a3:b1:6a:ab:c8:e0:11:80:1a:3c:c0:10:06:40:b1:b0:af:84: f3:f5:89:86:d3:6a:51:1f:03:65:cc:1e:d7:b3:5c:f9:b3:fc: f2:12:48:04:a6:98:a7:48:f6:f5:d8:89:d5:ec:bb:e7:9e:a7: cd:be:52:99:6e:f6:ee:f5:eb:34:ac:fd:e2:1c:50:b5:39:55: af:9c:8f:4d:8d:8b:9c:6b:b6:41:a0:d4:5c:85:78:b0:da:2f: f6:ca:04:45:24:2f:c4:e6:5d:91:e2:42:0f:0b:d5:42:c7:13: 0d:35:30:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUxMTA1MDIzMzQzWhcNMjUxMTEyMDIzMzQzWjAYMRYwFAYD VQQDEw02OTBhYjc4Ny02YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2euj6GT5d1Tj/S9zJKyWzmkBjQRUPW8G+E9ZSOOywl1GPenWMpbHlGAwjFE Ty+ggIHwkczLGTitrBQ7sO1UoX8tIjkgdHQIouW9i23ksVHFL+a9g7tSsGEzjLqT xvssT494VOmOvSd0/hC7r9tGrgxFuySxl7v4BNnY/6TViHr6f4N7U+YUaNoVq8oc tgM2f1BIBNxhLOmocjUPDepxNcrsT17W+sXSgVbjJWpBfCfvIUgPjP2LWT99KI5m OHQryMFF2hyO9mDEbmQCpedPSFwBuXIQONawr7leG1eHBQUl+B90uH2O56K7mvFq blBJbluZqZp6pv+XcZSGbMvFsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2s40pd bsBdXBCnVj+GC1oHffXkMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwVjFu3GBdr4wkCtlq7i5oSUH6Qv2ZoYBWbZFCrVM39cZgrAMZlYai Jh7ZZSObzO/yu76yhaNqq8gwZmqNIcGMF5iGD+6FCH+C3V4ZrD/AWy9tnbnEmX3E wDD7JSEjl3bBi/oqSIGyzb1ma+JFNKk3/KQ3UfqLqPfoUFrY19It6IbNgp9kNoUl CNS4XMhv24KjsWqryOARgBo8wBAGQLGwr4Tz9YmG02pRHwNlzB7Xs1z5s/zyEkgE ppinSPb12InV7LvnnqfNvlKZbvbu9es0rP3iHFC1OVWvnI9NjYuca7ZBoNRchXiw 2i/2ygRFJC/E5l2R4kIPC9VCxxMNNTAx -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:42 2025 by rpki-client