$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft File: d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json) Hash identifier: Zrzt5MmHdYhzz90LmXicdZQo+fzVI99klltQAplkOzg= Subject key identifier: 00:5E:0C:4C:3C:73:A2:5F:EC:7D:89:CC:5B:8D:24:83:AF:9A:69:43 Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 Certificate issuer: /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft Manifest number: 4F Signing time: Mon 03 Nov 2025 07:17:54 +0000 Manifest this update: Mon 03 Nov 2025 07:17:53 +0000 Manifest next update: Mon 10 Nov 2025 07:17:53 +0000 Files and hashes: 1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: JRuCtKMdyYjHjDOgumf5dD/ZZImojpG59OxjFN+7jaY=) 2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: OOybTQy1tXbxj/OFzkMaOGN0e7LlqdktJQlDDwMZpUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Validity Not Before: Nov 3 07:17:53 2025 GMT Not After : Nov 10 07:17:53 2025 GMT Subject: CN=69085721-8663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:c7:b2:bc:bd:16:df:72:87:ad:82:70:d4: 4a:eb:2d:2a:fd:a4:9f:e2:08:32:33:1d:fc:79:cb: 2a:3e:30:27:40:f3:55:ac:bf:37:7e:04:e1:33:90: 74:1b:17:90:a9:78:a2:aa:d8:f1:45:24:7a:b8:05: 38:24:73:3d:08:20:08:d5:bc:25:2d:ab:78:cc:fe: ac:d8:8a:4c:93:dc:8f:00:f9:7a:92:b8:8c:2b:8d: b5:3b:08:1b:c4:46:0e:5b:f6:d4:df:80:37:70:2e: 1f:7b:91:62:a9:b4:21:f4:2c:54:5a:87:0d:d1:e3: d2:39:2c:f0:61:e7:41:60:0f:9d:2f:53:2a:98:bc: 3d:16:77:5d:71:8e:e1:db:a0:89:23:80:21:33:ff: f4:bb:43:77:eb:8b:df:3b:6e:4b:f3:ee:fb:e9:95: fa:cd:2f:aa:f5:14:9b:cb:36:16:56:4e:26:10:fa: 64:64:c5:64:27:89:b2:26:5e:16:5a:8b:b2:05:14: 23:ee:81:30:46:b1:16:a7:ce:df:ad:2f:eb:32:95: 32:27:87:58:6a:3e:e2:62:d6:9f:87:4d:a4:b5:08: 89:78:d6:67:d0:96:5b:49:e5:c5:a1:c4:f8:ed:fb: 87:0e:ac:6a:5b:87:82:16:eb:18:9e:36:53:1f:fe: e9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5E:0C:4C:3C:73:A2:5F:EC:7D:89:CC:5B:8D:24:83:AF:9A:69:43 X509v3 Authority Key Identifier: keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:29:3f:cd:ef:c7:fa:31:09:9d:28:f7:48:27:0a:ff:64:a7: 56:37:24:da:36:14:8b:22:68:2e:5d:46:84:26:e9:cc:53:4b: 4f:41:91:8b:b9:d4:9b:c0:0d:a6:5e:56:ff:d0:f1:fe:0b:5e: fe:6f:34:fa:90:f7:c4:4b:f3:7f:19:8f:3d:7b:6f:96:4a:b8: b2:2f:65:15:38:18:54:4d:0a:d3:8e:24:7b:d3:92:a1:db:f6: f0:df:57:5b:bf:b6:03:60:74:cc:4a:9e:0b:a8:86:bb:73:6d: 9e:a3:9b:28:6a:80:5d:0e:a1:b1:93:1d:54:54:5c:b3:b5:ba: b0:bf:23:c3:9e:bc:9a:51:ae:9b:f8:03:6e:4c:e1:49:f6:61: c5:1b:9b:02:68:d4:9b:a8:c3:71:c9:f9:14:1b:8d:e0:f0:e6: 71:0e:a0:41:21:77:d5:a5:36:24:a5:6f:8a:48:55:10:a3:2b: e2:df:67:0f:16:ad:de:35:8e:f7:72:c3:91:e5:da:e3:6b:a6: b8:82:f8:09:96:a2:82:55:88:31:9c:be:90:db:20:65:0b:d8: d7:06:d5:2c:2f:1c:48:b9:56:31:8a:f6:63:52:cc:10:6b:b2: d1:97:6b:34:a9:64:1b:63:ff:4a:cf:68:43:1d:36:6a:a1:4a: 1b:d2:85:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QkEyNzExMC8GA1UEBRMoNzc3RDU0MEUxNjFGQTY3MUZCMjQ1OEEzM0ZGRTRCRjMz RDZBNzAxNTAeFw0yNTExMDMwNzE3NTNaFw0yNTExMTAwNzE3NTNaMBgxFjAUBgNV BAMTDTY5MDg1NzIxLTg2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQbMeyvL0W33KHrYJw1ErrLSr9pJ/iCDIzHfx5yyo+MCdA81Wsvzd+BOEzkHQb F5CpeKKq2PFFJHq4BTgkcz0IIAjVvCUtq3jM/qzYikyT3I8A+XqSuIwrjbU7CBvE Rg5b9tTfgDdwLh97kWKptCH0LFRahw3R49I5LPBh50FgD50vUyqYvD0Wd11xjuHb oIkjgCEz//S7Q3fri987bkvz7vvplfrNL6r1FJvLNhZWTiYQ+mRkxWQnibImXhZa i7IFFCPugTBGsRanzt+tL+sylTInh1hqPuJi1p+HTaS1CIl41mfQlltJ5cWhxPjt +4cOrGpbh4IW6xieNlMf/ulNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAF4MTDxz ol/sfYnMW40kg6+aaUMwHwYDVR0jBBgwFoAUd31UDhYfpnH7JFijP/5L8z1qcBUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCQTI3L0VBNEU2NjlDNDU4 QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNC VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDMxVURoWWZwbkg3SkZpalBfNUw4ejFxY0JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC QTI3L0VBNEU2NjlDNDU4QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5I N0pGaWpQXzVMOHoxcWNCVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFspP83vx/oxCZ0o90gnCv9kp1Y3JNo2FIsiaC5dRoQm6cxTS09BkYu5 1JvADaZeVv/Q8f4LXv5vNPqQ98RL838Zjz17b5ZKuLIvZRU4GFRNCtOOJHvTkqHb 9vDfV1u/tgNgdMxKnguohrtzbZ6jmyhqgF0OobGTHVRUXLO1urC/I8OevJpRrpv4 A25M4Un2YcUbmwJo1Juow3HJ+RQbjeDw5nEOoEEhd9WlNiSlb4pIVRCjK+LfZw8W rd41jvdyw5Hl2uNrpriC+AmWooJViDGcvpDbIGUL2NcG1SwvHEi5VjGK9mNSzBBr stGXazSpZBtj/0rPaEMdNmqhShvShZY= -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:05 2025 by rpki-client