$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json) Hash identifier: KhyYK7WDlkRXzHiWXnIENqkL4GpRr0nlyl1tKaOHWiI= Subject key identifier: 51:F0:5F:2E:30:BD:92:65:0F:9A:D8:37:4C:C4:7A:5D:F6:46:16:71 Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft Manifest number: 44 Signing time: Wed 05 Nov 2025 07:35:41 +0000 Manifest this update: Wed 05 Nov 2025 07:35:41 +0000 Manifest next update: Wed 12 Nov 2025 07:35:41 +0000 Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: NPJM9uQucCSuwTgdd6/fKklGDunMacnbscPEK6khztg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Validity Not Before: Nov 5 07:35:41 2025 GMT Not After : Nov 12 07:35:41 2025 GMT Subject: CN=690afe4d-4021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bc:d1:5d:72:96:3c:2d:a9:a8:cb:e3:ad:5c: 05:0f:eb:fe:3f:4c:2e:e8:20:c5:16:2d:4a:2b:a6: fb:66:ce:28:7b:06:83:dc:50:b9:c1:3d:25:aa:de: 6c:75:7a:e8:8c:dd:36:9c:cc:93:3d:32:21:62:21: c7:9e:4c:da:7d:06:57:ee:ed:70:63:de:c6:f0:fb: cf:7b:7b:08:ae:dc:36:30:f6:21:93:96:16:54:cb: ce:ef:3e:33:2f:3b:f3:06:8a:0e:ae:d6:46:a4:83: f1:aa:57:d1:eb:a0:d2:e5:f4:71:67:45:a7:c9:00: 27:c5:00:ac:4b:28:2c:f2:f1:0e:6e:5c:73:93:44: fd:9e:53:a8:01:eb:6f:9f:be:f8:81:bb:f4:f7:96: 4f:93:fc:b7:46:8d:d7:8b:37:85:13:85:0a:89:2d: 2a:bd:92:57:87:75:0e:e8:d6:79:50:13:5e:3a:da: 77:3e:fe:ff:dc:52:8c:69:28:94:42:3b:73:e8:0a: 9d:f3:fd:6e:f7:e2:11:86:45:5f:fe:53:1c:8f:e3: 9e:70:08:1b:26:0e:a9:88:cc:0a:53:a8:0f:85:e0: f5:44:af:ab:a7:f9:ed:fb:55:c8:38:7f:e8:a1:25: 25:69:62:77:83:a8:25:7c:ce:0e:81:7f:f7:b7:8f: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:5F:2E:30:BD:92:65:0F:9A:D8:37:4C:C4:7A:5D:F6:46:16:71 X509v3 Authority Key Identifier: keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:49:00:ca:7f:14:2e:2c:4e:5e:4e:3e:e7:27:b2:6d:cb:1d: c9:68:bd:70:17:87:ee:7e:85:b9:31:91:b7:02:3d:f5:70:73: bd:9f:93:4d:37:85:1c:d7:a3:c8:26:ef:3e:d4:92:57:c7:0f: 51:5c:e2:51:10:80:38:92:d5:62:0c:ae:34:b7:59:11:13:07: f2:b5:e5:85:b7:f0:58:9d:df:0b:4f:cf:59:32:a9:e2:8d:2b: da:96:8f:ed:50:8b:fb:5d:69:4b:4e:c1:4c:40:e7:09:df:fd: bb:12:f0:4b:19:dc:97:b0:11:43:4f:d6:9c:95:df:de:db:66: 1b:5e:18:e2:07:92:b6:7f:90:7d:45:0b:26:1a:08:13:8f:72: 47:50:6a:a2:99:90:cd:2e:32:27:b4:2d:72:94:ef:e1:d2:1b: 38:cc:06:9b:f2:25:99:72:f8:4c:e5:6f:96:72:5e:c3:1d:e3: 3c:8a:ab:5a:09:97:62:86:d1:26:13:47:2d:89:b6:29:f4:20: f2:30:4b:55:b7:94:e3:fb:c6:58:42:75:a1:34:d1:4a:c3:a2: da:c7:3d:1d:eb:a9:ff:a6:d7:2c:65:c5:7e:b1:4b:9e:52:33: af:64:dc:28:f5:9e:ad:ce:d0:e6:bf:19:24:38:c8:0e:4e:51: 96:d3:46:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjVDODExMC8GA1UEBRMoQ0Y2RjEyREJERTRCRTkxMzQ1ODE1OEY1Qzc3ODVDNzEy OTA4NTU1QzAeFw0yNTExMDUwNzM1NDFaFw0yNTExMTIwNzM1NDFaMBgxFjAUBgNV BAMTDTY5MGFmZTRkLTQwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDovNFdcpY8Lamoy+OtXAUP6/4/TC7oIMUWLUorpvtmzih7BoPcULnBPSWq3mx1 euiM3TaczJM9MiFiIceeTNp9Blfu7XBj3sbw+897ewiu3DYw9iGTlhZUy87vPjMv O/MGig6u1kakg/GqV9HroNLl9HFnRafJACfFAKxLKCzy8Q5uXHOTRP2eU6gB62+f vviBu/T3lk+T/LdGjdeLN4UThQqJLSq9kleHdQ7o1nlQE1462nc+/v/cUoxpKJRC O3PoCp3z/W734hGGRV/+UxyP455wCBsmDqmIzApTqA+F4PVEr6un+e37Vcg4f+ih JSVpYneDqCV8zg6Bf/e3j5KzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUfBfLjC9 kmUPmtg3TMR6XfZGFnEwHwYDVR0jBBgwFoAUz28S295L6RNFgVj1x3hccSkIVVww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNUM4LzNCQ0QxQkVBNTU5 NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZW dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejI4UzI5NUw2Uk5GZ1ZqMXgzaGNjU2tJVlZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NUM4LzNCQ0QxQkVBNTU5NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJO RmdWajF4M2hjY1NrSVZWdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABRJAMp/FC4sTl5OPucnsm3LHclovXAXh+5+hbkxkbcCPfVwc72fk003 hRzXo8gm7z7UklfHD1Fc4lEQgDiS1WIMrjS3WRETB/K15YW38Fid3wtPz1kyqeKN K9qWj+1Qi/tdaUtOwUxA5wnf/bsS8EsZ3JewEUNP1pyV397bZhteGOIHkrZ/kH1F CyYaCBOPckdQaqKZkM0uMie0LXKU7+HSGzjMBpvyJZly+Ezlb5ZyXsMd4zyKq1oJ l2KG0SYTRy2Jtin0IPIwS1W3lOP7xlhCdaE00UrDotrHPR3rqf+m1yxlxX6xS55S M69k3Cj1nq3O0Oa/GSQ4yA5OUZbTRiM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:23 2025 by rpki-client