$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json) Hash identifier: 9ARfQC3eP/U5W+8bs11TP5HvLmor8wBk2aPpvz8RRbk= Subject key identifier: 73:E8:A3:AF:04:1F:24:4D:6A:E3:D8:44:08:E0:FA:FF:B9:99:32:38 Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft Manifest number: 63 Signing time: Sun 19 Oct 2025 10:23:42 +0000 Manifest this update: Sun 19 Oct 2025 10:23:42 +0000 Manifest next update: Sun 26 Oct 2025 10:23:41 +0000 Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: +eJXO7l/ROmQZkl0Tj8xu1c0dmC1F4Zm4UayVe9B5TA=) 2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: WNVrInNAUMIDrW85MacHTXC8HeXu1LqrkLU97EbnyxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Validity Not Before: Oct 19 10:23:42 2025 GMT Not After : Oct 26 10:23:41 2025 GMT Subject: CN=68f4bc2e-44e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:2b:f3:a7:85:cc:d1:14:b6:8f:9b:12:15: d0:80:df:9b:1c:08:a1:a5:08:7f:47:c4:0e:de:5c: 73:ac:9d:76:3b:a5:6f:ac:e1:2c:50:28:e7:49:cf: d2:50:95:ff:a5:c7:d6:e4:13:3b:00:0c:df:d9:16: 12:39:d3:fa:5f:61:05:56:1c:71:66:1c:e1:75:a8: 40:c1:4d:ae:74:ed:85:dc:c0:52:b6:60:80:b7:af: 20:fa:71:8b:f5:18:1e:a6:d1:8f:9a:ec:e0:8f:27: 96:97:da:eb:31:d5:e9:1d:0d:c1:c6:e6:6c:ad:ac: 4c:d9:90:59:9b:dc:c9:34:90:dc:0b:10:8f:2b:b5: c4:25:d0:b9:aa:ec:88:62:a1:cb:47:70:0d:94:d1: 3b:25:78:b7:c2:4f:2f:a5:9a:fe:84:fe:00:95:cc: a6:d1:6d:66:db:3f:33:8d:48:5b:0e:26:93:40:bc: c2:cc:74:44:5f:6a:df:b8:f5:9f:cd:18:70:f1:4d: cd:61:99:e5:45:15:d3:64:50:e1:c7:77:a2:66:83: f3:66:a4:35:b2:db:ce:7d:d2:a7:29:01:bb:f1:b4: 8b:cc:f0:02:25:1b:58:7f:a4:4d:34:9e:8d:00:e7: d5:6b:d0:ab:ce:b7:17:65:92:0c:56:c1:59:f2:c1: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:A3:AF:04:1F:24:4D:6A:E3:D8:44:08:E0:FA:FF:B9:99:32:38 X509v3 Authority Key Identifier: keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a4:a5:16:01:b0:16:53:bf:67:e0:f8:9d:49:88:53:23:cc: 12:ce:f1:46:56:10:45:01:f5:cd:ac:8b:d0:47:c1:42:9e:7f: c5:58:53:e7:0e:f5:09:86:51:81:d1:50:44:2c:88:eb:c3:52: e4:bc:b2:03:21:cc:77:4a:f7:8c:75:fe:55:90:85:ba:36:a0: aa:1e:79:60:34:ee:39:da:20:51:c9:5c:cc:61:b7:c5:75:87: a0:6c:7c:05:90:db:25:ab:14:92:ff:f7:88:d1:52:41:64:05: b0:2c:66:24:bb:f1:ba:52:46:db:76:1b:e8:89:89:7e:eb:af: e6:a4:03:21:80:11:6b:b6:27:38:7f:82:4d:1b:eb:c0:91:44: 60:7f:98:3f:ea:2d:5b:2f:85:37:42:24:39:80:6b:ff:22:a0: 6d:9b:4d:15:79:0c:e3:3b:2c:9f:26:bd:dd:31:20:06:52:e4: bd:4b:6f:57:e3:84:b2:da:9b:d7:9c:57:42:3a:fe:21:e4:68: e5:52:e5:d9:79:ab:ed:f4:8b:38:ca:b5:d7:11:35:18:48:6d: 74:45:da:d2:60:6c:1c:24:dd:50:4b:4d:80:5c:9e:3d:87:0a: 9e:97:5c:3f:ca:49:28:e6:7b:e8:a8:5e:97:c6:a2:72:f4:04: de:52:c3:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUVDRTExMC8GA1UEBRMoMzA0QjAyQTI1NjZBMTYzQURBQ0UxRkE1MjFBMzBBN0U2 MjZBQzExRTAeFw0yNTEwMTkxMDIzNDJaFw0yNTEwMjYxMDIzNDFaMBgxFjAUBgNV BAMTDTY4ZjRiYzJlLTQ0ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAiyvzp4XM0RS2j5sSFdCA35scCKGlCH9HxA7eXHOsnXY7pW+s4SxQKOdJz9JQ lf+lx9bkEzsADN/ZFhI50/pfYQVWHHFmHOF1qEDBTa507YXcwFK2YIC3ryD6cYv1 GB6m0Y+a7OCPJ5aX2usx1ekdDcHG5mytrEzZkFmb3Mk0kNwLEI8rtcQl0Lmq7Ihi octHcA2U0TsleLfCTy+lmv6E/gCVzKbRbWbbPzONSFsOJpNAvMLMdERfat+49Z/N GHDxTc1hmeVFFdNkUOHHd6Jmg/NmpDWy28590qcpAbvxtIvM8AIlG1h/pE00no0A 59Vr0KvOtxdlkgxWwVnywd9fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc+ijrwQf JE1q49hECOD6/7mZMjgwHwYDVR0jBBgwFoAUMEsColZqFjrazh+lIaMKfmJqwR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRUNFLzNERjREQzkyMTM0 QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpyYXpoLWxJYU1LZm1KcXdS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUVzQ29sWnFGanJhemgtbElhTUtmbUpxd1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB RUNFLzNERjREQzkyMTM0QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpy YXpoLWxJYU1LZm1KcXdSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIikpRYBsBZTv2fg+J1JiFMjzBLO8UZWEEUB9c2si9BHwUKef8VYU+cO 9QmGUYHRUEQsiOvDUuS8sgMhzHdK94x1/lWQhbo2oKoeeWA07jnaIFHJXMxht8V1 h6BsfAWQ2yWrFJL/94jRUkFkBbAsZiS78bpSRtt2G+iJiX7rr+akAyGAEWu2Jzh/ gk0b68CRRGB/mD/qLVsvhTdCJDmAa/8ioG2bTRV5DOM7LJ8mvd0xIAZS5L1Lb1fj hLLam9ecV0I6/iHkaOVS5dl5q+30izjKtdcRNRhIbXRF2tJgbBwk3VBLTYBcnj2H Cp6XXD/KSSjme+ioXpfGonL0BN5Sw+0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:17 2025 by rpki-client