$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: irhWZcR2iyu3YSuJyrDWBhNvbsXQaYCw6zqqgUTsQLc= Subject key identifier: 76:C0:BF:AC:58:54:6D:7D:F7:C6:98:89:EA:FF:E6:98:94:55:43:05 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0CF5 Signing time: Tue 04 Nov 2025 18:10:45 +0000 Manifest this update: Tue 04 Nov 2025 18:10:44 +0000 Manifest next update: Tue 11 Nov 2025 18:10:44 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: p8iWHdb50HIHL43S/tQWimaPStxFVB+N8SbwQSBn+kE=) 2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: vuIx5uN5ZZTHGHOWV+i45uzSngomzzsL58ntfcnGCEs=) 3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Nov 4 18:10:44 2025 GMT Not After : Nov 11 18:10:44 2025 GMT Subject: CN=690a41a5-385a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:23:c4:71:e5:ef:f2:18:b6:27:ba:c3:2f: c5:d5:5d:e6:43:25:32:8a:44:7f:56:9e:f7:bf:52: 8b:eb:25:24:13:8c:67:aa:51:73:a9:7e:81:ea:a3: a7:96:fa:8d:f9:9a:a9:1a:be:3d:33:a7:f5:71:df: 20:4b:30:f9:5c:5b:59:b3:e0:56:a6:cd:6e:bc:a6: 37:2f:89:94:3e:23:f3:a3:5f:e1:1b:28:c9:39:0a: 0e:5e:63:1f:e9:66:7b:dc:75:b8:6f:de:22:d3:3b: 9f:5d:85:ef:6e:3a:fa:6b:45:e8:54:37:55:60:12: fe:5c:46:89:63:88:7b:23:9b:0e:6c:8d:a2:65:d5: 31:0a:01:63:7b:85:82:04:14:70:0c:18:f3:ef:c7: 6a:bd:d6:08:27:6b:9a:7e:1b:12:0f:11:2d:d7:cf: e4:d8:0a:7d:b6:79:a7:3e:6a:76:f5:d5:0e:7c:58: ba:ca:cc:0d:44:61:c7:8d:91:34:5a:bb:05:25:fa: 53:e5:e0:10:e6:12:ce:54:ee:32:ac:43:da:e3:9c: ae:9d:c3:17:3c:eb:d7:8b:1f:8a:1f:36:39:e5:34: bb:12:ed:38:51:c8:d5:f1:da:63:5a:f1:31:62:c0: 27:03:ec:a5:4e:82:01:a0:86:2e:6d:97:da:c0:bd: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C0:BF:AC:58:54:6D:7D:F7:C6:98:89:EA:FF:E6:98:94:55:43:05 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d2:e7:95:2d:18:d8:5c:f2:62:d1:28:cc:b7:de:12:d8:29: 7e:dd:02:08:41:0c:5e:7e:ad:e1:76:f9:c6:86:ee:3b:a9:45: a0:aa:c3:d5:e2:08:fb:75:6a:33:ec:2a:2c:03:ce:af:f1:60: c4:da:14:0a:5c:bc:be:0b:ce:9e:f1:6c:9f:0e:c0:a8:08:2c: d8:ee:ed:18:d1:83:39:40:b4:bc:95:d0:af:dd:63:72:b1:f4: 2f:6c:1f:2f:c8:5e:63:40:3b:11:14:6f:40:63:1a:d1:fe:c6: 6e:84:f2:32:c1:cb:ec:71:af:d2:3c:b5:66:0d:15:96:f1:65: d2:10:a2:ec:1c:cd:85:eb:64:c3:a2:a2:99:8b:1b:cc:17:2d: ae:00:f6:cf:ee:72:29:6f:ce:04:3f:48:4b:c4:12:69:28:49: 37:24:38:72:8d:df:31:20:ca:66:d3:d2:63:1b:61:69:c1:bd: 7b:a7:33:ce:be:67:c8:ee:e5:f2:34:db:c7:ff:d6:15:d3:9f: cf:22:de:9a:6a:b8:8a:83:c4:72:b3:62:c7:39:10:2a:c0:e9: 1d:d5:f5:33:1d:5d:0a:c0:55:4b:13:38:cf:c3:49:63:32:98: 19:25:63:20:ac:bf:16:27:24:a6:14:f9:a1:c6:1c:fa:e3:b5: bd:b4:68:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjUxMTA0MTgxMDQ0WhcNMjUxMTExMTgxMDQ0WjAYMRYwFAYD VQQDEw02OTBhNDFhNS0zODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA250jxHHl7/IYtie6wy/F1V3mQyUyikR/Vp73v1KL6yUkE4xnqlFzqX6B6qOn lvqN+ZqpGr49M6f1cd8gSzD5XFtZs+BWps1uvKY3L4mUPiPzo1/hGyjJOQoOXmMf 6WZ73HW4b94i0zufXYXvbjr6a0XoVDdVYBL+XEaJY4h7I5sObI2iZdUxCgFje4WC BBRwDBjz78dqvdYIJ2uafhsSDxEt18/k2Ap9tnmnPmp29dUOfFi6yswNRGHHjZE0 WrsFJfpT5eAQ5hLOVO4yrEPa45yuncMXPOvXix+KHzY55TS7Eu04UcjV8dpjWvEx YsAnA+ylToIBoIYubZfawL06WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbAv6xY VG1998aYier/5piUVUMFMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA0ueVLRjYXPJi0SjMt94S2Cl+3QIIQQxefq3hdvnGhu47qUWgqsPV 4gj7dWoz7CosA86v8WDE2hQKXLy+C86e8WyfDsCoCCzY7u0Y0YM5QLS8ldCv3WNy sfQvbB8vyF5jQDsRFG9AYxrR/sZuhPIywcvsca/SPLVmDRWW8WXSEKLsHM2F62TD oqKZixvMFy2uAPbP7nIpb84EP0hLxBJpKEk3JDhyjd8xIMpm09JjG2Fpwb17pzPO vmfI7uXyNNvH/9YV05/PIt6aariKg8Rys2LHORAqwOkd1fUzHV0KwFVLEzjPw0lj MpgZJWMgrL8WJySmFPmhxhz647W9tGiT -----END CERTIFICATE-----Generated at Wed Nov 5 21:18:39 2025 by rpki-client