$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: OX3SYOrMdvzuG4A5dk6ChUP+2IB6KSFk4JjtPB5H+DY= Subject key identifier: 8D:62:0C:0B:46:88:F7:B2:85:49:BA:3E:55:DF:AA:0A:9C:43:4D:A2 Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: BE Signing time: Sat 01 Nov 2025 06:20:50 +0000 Manifest this update: Sat 01 Nov 2025 06:20:49 +0000 Manifest next update: Sat 08 Nov 2025 06:20:49 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: 5gBPfiAHoi9kxJ17GJWoEuTNRSepyL0p37bQqy5VywI=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 06:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: Nov 1 06:20:49 2025 GMT Not After : Nov 8 06:20:49 2025 GMT Subject: CN=6905a6c2-c58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:fc:fc:0e:df:a9:53:d2:8d:ed:5b:b4:69: 4b:18:3a:30:c2:ee:0c:13:f2:d7:47:db:a5:35:e4: 5a:1a:05:1b:5d:5a:8c:ab:ef:7b:be:04:bb:04:5e: de:6e:e8:eb:5d:8d:98:57:84:d7:43:97:ed:dc:24: a8:a2:e6:1d:22:ec:bc:e0:1d:2b:fb:40:c3:50:a6: b7:64:00:6f:1a:cc:cf:53:7e:3b:91:d8:97:68:39: 3a:0d:a1:cf:2f:6e:73:8c:bc:a0:f9:56:43:6b:70: 01:a0:74:6d:90:2b:37:e2:89:86:be:c4:2e:1b:7b: f8:c9:48:7e:df:b5:5c:d7:7a:72:ab:d0:d3:6d:51: c9:78:1d:d7:ef:0d:fe:47:f8:92:8b:1c:ac:f0:a1: 48:78:d4:21:25:58:3f:43:b9:df:0d:d4:c1:4d:8b: 4c:c3:3e:02:a4:e5:54:92:27:85:62:d3:5f:07:cf: 0e:6c:5c:04:e8:53:48:3f:0a:03:fa:ec:fd:d9:19: 52:76:fc:fa:2f:cb:87:9e:9f:15:23:cc:03:ac:81: 8e:4e:19:4f:13:94:38:3a:b3:3f:d2:00:26:34:6f: ff:f2:e8:7c:b4:d2:ab:8d:01:a6:62:6f:01:00:7f: bc:68:59:67:aa:81:14:20:3e:04:bb:9d:4d:cb:b9: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:62:0C:0B:46:88:F7:B2:85:49:BA:3E:55:DF:AA:0A:9C:43:4D:A2 X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:ae:d6:09:9e:ff:c0:cb:1a:44:3a:1b:87:b6:e5:29:71:73: e7:9a:6d:2d:89:83:20:a7:ed:74:1b:9c:82:1e:84:e0:85:ca: c1:0e:9d:96:77:e5:af:20:1d:2c:09:c5:6b:b2:76:de:50:38: 2b:e3:12:42:28:0c:2b:10:80:e2:dd:67:78:2d:35:c4:64:81: fa:50:a5:e1:8e:c0:ea:39:06:e8:a8:57:6a:7d:f4:e3:8c:d7: fe:bc:4f:f7:0b:34:3d:6e:df:02:60:f6:0d:b0:ce:70:58:b1: 00:a1:3a:f5:d4:4e:de:87:18:1d:5a:16:58:80:89:84:74:8d: 5e:64:77:29:19:fc:c0:b4:ee:d3:6d:a3:31:22:18:56:34:8a: 6b:aa:ec:99:6f:14:eb:78:1c:36:f4:e9:da:df:ca:24:0d:81: aa:fd:7c:21:72:96:3f:a0:90:0c:57:81:24:2a:6d:80:56:37: af:42:9e:34:6a:da:8a:69:37:1e:0e:7b:06:56:69:cc:62:49: 15:e1:79:87:9b:88:0a:67:13:ea:d6:44:05:2f:a0:44:61:54: ab:fd:52:54:f2:19:66:b7:a4:e1:12:78:89:57:b5:bb:69:c4: 09:d7:00:c9:27:7b:bf:db:a5:67:77:16:ac:c5:e3:64:34:f4: 20:37:5b:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEyMTMxRTNEOUE4 N0MyOTQ1QzAwHhcNMjUxMTAxMDYyMDQ5WhcNMjUxMTA4MDYyMDQ5WjAYMRYwFAYD VQQDEw02OTA1YTZjMi1jNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjv8/A7fqVPSje1btGlLGDowwu4ME/LXR9ulNeRaGgUbXVqMq+97vgS7BF7e bujrXY2YV4TXQ5ft3CSoouYdIuy84B0r+0DDUKa3ZABvGszPU347kdiXaDk6DaHP L25zjLyg+VZDa3ABoHRtkCs34omGvsQuG3v4yUh+37Vc13pyq9DTbVHJeB3X7w3+ R/iSixys8KFIeNQhJVg/Q7nfDdTBTYtMwz4CpOVUkieFYtNfB88ObFwE6FNIPwoD +uz92RlSdvz6L8uHnp8VI8wDrIGOThlPE5Q4OrM/0gAmNG//8uh8tNKrjQGmYm8B AH+8aFlnqoEUID4Eu51Ny7l9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1iDAtG iPeyhUm6PlXfqgqcQ02iMB8GA1UdIwQYMBaAFKy3AlHrFbddQimqITHj2ah8KUXA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9CMTQ0OUM0RTk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQxMUNLYW9oTWVQWnFId3BS Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQx MUNLYW9oTWVQWnFId3BSY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOrtYJnv/AyxpEOhuHtuUpcXPnmm0tiYMgp+10G5yCHoTghcrBDp2W d+WvIB0sCcVrsnbeUDgr4xJCKAwrEIDi3Wd4LTXEZIH6UKXhjsDqOQboqFdqffTj jNf+vE/3CzQ9bt8CYPYNsM5wWLEAoTr11E7ehxgdWhZYgImEdI1eZHcpGfzAtO7T baMxIhhWNIprquyZbxTreBw29Ona38okDYGq/XwhcpY/oJAMV4EkKm2AVjevQp40 atqKaTceDnsGVmnMYkkV4XmHm4gKZxPq1kQFL6BEYVSr/VJU8hlmt6ThEniJV7W7 acQJ1wDJJ3u/26VndxasxeNkNPQgN1v5 -----END CERTIFICATE-----Generated at Sun Nov 2 05:06:38 2025 by rpki-client