$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json) Hash identifier: YvRUJDFCouksz4kqygAVnEYKaowQ5tjG8xFjk7TF+eA= Subject key identifier: 06:93:D8:FC:EA:F9:8B:37:F4:10:2A:1B:2B:A8:07:5D:01:D0:64:81 Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Certificate serial: 0A19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft Manifest number: 0A11 Signing time: Tue 04 Nov 2025 19:55:26 +0000 Manifest this update: Tue 04 Nov 2025 19:55:26 +0000 Manifest next update: Tue 11 Nov 2025 19:55:26 +0000 Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: cNz+DP2IO/FtKODHljb7cOZKU+TsOTxoTUoXOkR58v0=) 2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: OT+54b9b887njSEqmuExUbEj0TJJUhjKtfKkhce9QUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Validity Not Before: Nov 4 19:55:26 2025 GMT Not After : Nov 11 19:55:26 2025 GMT Subject: CN=690a5a2e-be95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:88:83:ca:5b:fd:7e:cd:dc:95:3f:8a:86: 08:d5:3f:17:b3:a1:d2:91:fe:28:3d:a8:72:7e:36: 26:18:bd:9f:8e:95:da:8e:be:39:35:e9:a3:c6:82: b9:8e:50:02:b8:07:46:4d:64:e4:ea:6a:d9:0a:0b: 02:e5:93:b7:15:93:55:ac:ed:00:97:42:c8:49:0e: 3a:46:42:07:1c:af:ae:5c:fa:51:0d:b3:2c:cb:ac: eb:f3:2d:bd:7b:86:c3:ce:b2:37:14:5a:49:a3:d8: 47:fb:16:b1:9c:6c:b0:b4:ae:71:aa:1b:17:3e:85: df:83:ef:85:62:83:51:56:52:85:bb:e9:47:b6:a6: 46:d1:fc:37:54:44:77:49:dc:33:52:af:37:44:d5: 03:f1:9e:59:cd:4d:11:56:a2:ac:85:f4:26:81:c1: b3:85:c6:30:b3:37:95:4a:cd:f0:2d:49:e4:3d:a3: c7:b7:e7:27:b2:73:8e:e5:d1:3d:e4:8d:3a:a1:f7: d2:22:9f:5c:af:e4:58:9c:b8:82:a9:00:e9:5c:ae: c5:c7:f0:db:a2:6f:97:a6:32:dc:8f:fb:b2:c4:a9: cc:be:62:db:d9:60:40:4f:e9:40:98:88:a0:66:4e: 47:a1:fd:6d:71:0c:f5:64:a5:cd:95:26:81:55:8e: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:93:D8:FC:EA:F9:8B:37:F4:10:2A:1B:2B:A8:07:5D:01:D0:64:81 X509v3 Authority Key Identifier: keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a3:6a:fc:eb:d4:bb:6c:66:98:6e:16:7b:cf:66:46:0e:08: 05:94:b4:e0:7d:c3:ae:29:aa:10:88:ac:02:fa:6f:c5:8b:bb: 90:32:13:52:91:de:60:db:47:40:9d:4b:d0:02:7c:67:7e:a1: a3:1b:b9:06:52:83:e5:6a:a8:6d:c5:c8:ed:6f:d2:92:f5:f1: f4:cf:18:62:7e:5a:c8:38:e5:e2:59:b9:6c:15:83:8e:39:f5: 14:33:5c:a7:e6:b2:f4:7b:b1:d2:ec:da:2d:cd:ad:e0:c1:82: ed:c1:64:ed:90:61:da:1f:ff:e2:22:b7:17:29:06:ae:cd:4e: b3:c2:d5:6b:15:64:71:ad:cc:1e:f3:89:65:96:a1:63:aa:95: 02:c1:e0:e2:f8:8d:7c:76:8c:f0:09:05:10:4c:50:c0:a3:c4: a2:92:53:75:78:bb:6a:9f:ef:52:bc:e2:2f:b7:39:f2:c4:b9: bd:a7:78:e5:63:4d:1e:16:a7:77:1a:68:16:fe:49:24:0e:b3: d8:1e:b4:13:4c:19:fa:4f:6e:d6:75:42:c3:da:a2:72:91:07: 3a:b6:cb:84:95:58:ec:4b:2f:b4:d1:35:cc:44:59:52:ca:b6: 8a:76:8c:ce:cd:2c:cc:3e:cf:ad:e7:8d:1d:16:07:e9:35:3d: 3b:81:11:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE QkIwNTdCNTUwHhcNMjUxMTA0MTk1NTI2WhcNMjUxMTExMTk1NTI2WjAYMRYwFAYD VQQDEw02OTBhNWEyZS1iZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArduIg8pb/X7N3JU/ioYI1T8Xs6HSkf4oPahyfjYmGL2fjpXajr45NemjxoK5 jlACuAdGTWTk6mrZCgsC5ZO3FZNVrO0Al0LISQ46RkIHHK+uXPpRDbMsy6zr8y29 e4bDzrI3FFpJo9hH+xaxnGywtK5xqhsXPoXfg++FYoNRVlKFu+lHtqZG0fw3VER3 SdwzUq83RNUD8Z5ZzU0RVqKshfQmgcGzhcYwszeVSs3wLUnkPaPHt+cnsnOO5dE9 5I06offSIp9cr+RYnLiCqQDpXK7Fx/Dbom+XpjLcj/uyxKnMvmLb2WBAT+lAmIig Zk5Hof1tcQz1ZKXNlSaBVY5iQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaT2Pzq +Ys39BAqGyuoB10B0GSBMB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS81MzQ0NzJDQzgzQjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05H OUJkZS1zYzBTVXJic0ZlMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRo2r869S7bGaYbhZ7z2ZGDggFlLTgfcOuKaoQiKwC+m/Fi7uQMhNS kd5g20dAnUvQAnxnfqGjG7kGUoPlaqhtxcjtb9KS9fH0zxhiflrIOOXiWblsFYOO OfUUM1yn5rL0e7HS7Notza3gwYLtwWTtkGHaH//iIrcXKQauzU6zwtVrFWRxrcwe 84lllqFjqpUCweDi+I18dozwCQUQTFDAo8SiklN1eLtqn+9SvOIvtznyxLm9p3jl Y00eFqd3GmgW/kkkDrPYHrQTTBn6T27WdULD2qJykQc6tsuElVjsSy+00TXMRFlS yraKdozOzSzMPs+t540dFgfpNT07gRGb -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:24 2025 by rpki-client