$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: W+HiU4ABqML7fvPxC2NWaCnKe1JdR3UHQXz7QnxolWg= Subject key identifier: DA:6C:5A:34:B2:2C:19:36:76:7B:EC:80:AC:2C:5E:29:31:97:CA:E5 Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 01F1 Signing time: Mon 03 Nov 2025 02:29:56 +0000 Manifest this update: Mon 03 Nov 2025 02:29:56 +0000 Manifest next update: Mon 10 Nov 2025 02:29:56 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: KzGHtg/XH6HdcmsFjpE/c7txUD7Z01ToAqhyvauifD0=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Nov 3 02:29:56 2025 GMT Not After : Nov 10 02:29:56 2025 GMT Subject: CN=690813a4-d1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:98:8e:91:5d:82:ba:78:5f:ec:e0:a4:f1: 26:8d:71:46:c4:82:f3:ad:fd:da:5b:81:62:18:4a: 39:4f:0b:23:01:e8:44:f6:57:66:f2:66:8b:bc:da: 39:4f:2d:50:86:dd:6c:b1:6b:03:14:f3:a3:b5:71: 13:69:c3:fc:21:c8:34:0e:9b:56:46:38:d3:00:08: 7e:d0:f1:3c:5e:a8:3e:8c:44:b8:ee:ec:d6:d4:68: 1d:b3:80:6a:07:fd:f4:66:58:b8:d8:ec:43:e3:e1: b8:6b:87:da:39:bc:3a:a8:5e:cd:f4:83:01:09:30: f7:cd:1d:33:4a:0d:b8:7e:63:7c:e7:85:3b:0a:81: c9:04:01:2d:a0:21:19:8e:a3:4b:73:de:c0:51:e3: 08:9b:95:6c:9a:4f:df:43:17:3c:13:9f:bb:f8:c5: 10:6c:d7:52:19:79:9f:b1:6a:a1:dc:1b:43:66:a5: 5d:33:2c:d4:40:03:2e:9e:39:60:fe:d4:0d:73:f7: f1:9f:99:0f:9c:43:87:fc:6c:70:ac:4c:b4:11:c4: b2:d8:0b:b4:c0:7c:70:eb:f1:03:87:80:27:49:a4: 05:5f:df:49:b8:7c:3e:00:04:9e:c2:24:5b:2d:9e: 74:2d:c4:f2:8c:ff:15:4a:6e:e3:5a:e1:f0:5e:76: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:5A:34:B2:2C:19:36:76:7B:EC:80:AC:2C:5E:29:31:97:CA:E5 X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:24:a0:59:78:16:86:20:d0:02:8e:60:53:2e:37:8e:b7: 24:48:92:fa:c0:61:dc:eb:55:cb:bc:54:fb:60:1c:e3:79:20: 99:ea:b4:db:a0:d5:fd:e6:09:9a:d8:5b:a5:ae:22:e8:05:41: 05:44:a3:43:d0:1f:ef:40:84:03:d5:f3:34:72:83:29:9d:f1: 78:42:bd:7a:e8:30:5f:68:33:9a:65:a1:18:e0:cf:78:fd:e8: f7:bc:95:e2:a6:cc:96:0b:80:8c:cc:34:2f:bd:27:db:a4:a1: 2d:09:de:ac:1f:ec:9f:50:d5:e7:64:d9:10:84:63:64:cb:f5: 67:40:5a:78:d5:57:92:9a:40:31:79:5b:b0:ef:58:1e:b3:e0: ed:97:41:02:fc:9a:c7:48:d6:83:2e:62:e7:ec:6a:c8:c2:8b: 57:9f:2d:82:24:25:94:65:02:5b:45:9c:b5:2a:92:52:ef:39: d3:7b:dd:60:a3:85:44:11:1f:4b:1c:fa:93:84:4a:f5:11:33: 80:8b:9f:6d:8a:8d:f2:6f:2c:dc:e1:0d:1f:e6:12:47:09:73: 9a:78:ab:9e:78:db:0e:f1:f8:46:52:20:de:33:97:69:27:f2: e3:e2:db:3a:74:45:54:51:84:be:3d:f4:3d:37:d3:75:c3:7d: 02:5c:04:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUxMTAzMDIyOTU2WhcNMjUxMTEwMDIyOTU2WjAYMRYwFAYD VQQDEw02OTA4MTNhNC1kMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPmYjpFdgrp4X+zgpPEmjXFGxILzrf3aW4FiGEo5TwsjAehE9ldm8maLvNo5 Ty1Qht1ssWsDFPOjtXETacP8Icg0DptWRjjTAAh+0PE8Xqg+jES47uzW1Ggds4Bq B/30Zli42OxD4+G4a4faObw6qF7N9IMBCTD3zR0zSg24fmN854U7CoHJBAEtoCEZ jqNLc97AUeMIm5Vsmk/fQxc8E5+7+MUQbNdSGXmfsWqh3BtDZqVdMyzUQAMunjlg /tQNc/fxn5kPnEOH/GxwrEy0EcSy2Au0wHxw6/EDh4AnSaQFX99JuHw+AASewiRb LZ50LcTyjP8VSm7jWuHwXnbJMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpsWjSy LBk2dnvsgKwsXikxl8rlMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+PSSgWXgWhiDQAo5gUy43jrckSJL6wGHc61XLvFT7YBzjeSCZ6rTb oNX95gma2FulriLoBUEFRKND0B/vQIQD1fM0coMpnfF4Qr166DBfaDOaZaEY4M94 /ej3vJXipsyWC4CMzDQvvSfbpKEtCd6sH+yfUNXnZNkQhGNky/VnQFp41VeSmkAx eVuw71ges+Dtl0EC/JrHSNaDLmLn7GrIwotXny2CJCWUZQJbRZy1KpJS7znTe91g o4VEER9LHPqThEr1ETOAi59tio3ybyzc4Q0f5hJHCXOaeKueeNsO8fhGUiDeM5dp J/Lj4ts6dEVUUYS+PfQ9N9N1w30CXAQA -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:34 2025 by rpki-client