$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json) Hash identifier: h9eRiZuYdEHvqRnZ71bK7GcQh/Z4gNPRWtWcWOU2PkA= Subject key identifier: C8:45:60:E7:16:61:AF:8F:49:69:A2:4C:3B:FA:0F:C5:1F:20:65:B2 Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft Manifest number: 01C7 Signing time: Wed 05 Nov 2025 03:03:06 +0000 Manifest this update: Wed 05 Nov 2025 03:03:05 +0000 Manifest next update: Wed 12 Nov 2025 03:03:05 +0000 Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: LJDEk1keMzVrDMf8x60Wosnls2peNf2Uv4ktXBciCoY=) 2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: a6qqO3amLPBWrWsiageKzRj9w8Ftk/NLdlmIk76Re5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Validity Not Before: Nov 5 03:03:05 2025 GMT Not After : Nov 12 03:03:05 2025 GMT Subject: CN=690abe6a-d091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:42:c7:89:0c:88:3f:a7:f6:c6:d3:73:51: c9:c3:e5:c3:cf:9b:b6:6c:b7:53:82:51:ad:34:ed: bf:dd:ca:9b:43:83:e9:e2:25:6c:20:fb:bf:7b:92: 22:41:1e:c7:8c:a9:06:bb:d9:b3:c9:3e:f1:eb:b2: 49:62:67:dd:39:6c:a3:8d:77:17:b4:0e:21:fb:f3: 47:f5:48:5d:4d:04:8d:78:4f:e3:51:8a:20:bd:2c: c2:99:d0:29:35:9e:65:77:63:82:27:0a:c2:68:1f: 2a:d3:04:02:17:90:5a:52:43:2d:1a:19:73:54:83: 36:0d:c7:4a:d4:e2:93:57:18:33:23:3e:c6:2b:20: e7:31:b4:b4:28:68:44:89:67:21:a8:3a:32:ef:7e: af:b5:83:ec:f1:aa:ca:e1:40:65:66:dd:b5:cf:a5: 1c:38:66:6b:23:8d:43:84:a4:99:2b:ef:3d:1f:0e: 52:de:3d:1d:d4:1f:76:aa:22:87:79:8b:30:71:88: b3:dd:ae:5d:05:3f:8e:57:7d:e9:1a:b4:eb:c1:bc: 6b:c9:7c:d9:98:e9:a5:f6:c0:e0:c1:b6:5a:f5:9e: 78:eb:4e:b4:34:9d:51:7d:22:d6:88:b1:98:10:73: f3:72:7b:7f:ab:a0:07:70:05:60:24:4d:b4:45:2e: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:45:60:E7:16:61:AF:8F:49:69:A2:4C:3B:FA:0F:C5:1F:20:65:B2 X509v3 Authority Key Identifier: keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:65:b2:cf:ab:e1:84:1a:30:a6:43:04:66:7d:f4:17:19:7b: c0:29:13:17:c1:c5:db:52:7b:37:bc:fe:d7:6a:72:04:9f:97: 8e:a6:aa:64:6d:4b:85:2a:e2:05:d3:a5:79:4b:c2:79:8d:ba: fd:58:ab:06:d9:b3:36:39:3f:25:f3:af:5f:57:04:3c:af:00: 11:05:ad:eb:83:c5:b3:e3:c9:7b:4e:bb:69:98:c2:d0:0a:52: 3e:f5:0c:cd:bb:f2:01:b4:b1:62:d1:26:0b:a8:b2:41:ae:57: c1:e6:18:68:3c:9c:64:0b:b1:39:95:a6:dd:73:dc:a1:47:5a: b9:b6:cd:5f:8e:23:fb:06:55:31:ce:07:b8:c2:09:53:ca:24: b4:15:ca:2b:45:a2:45:17:b5:65:71:c4:06:6a:db:09:3d:3d: 5b:af:48:14:91:51:fb:97:63:2a:0d:a3:0c:c5:ea:e7:76:5b: dd:ac:5b:b5:96:bf:d2:14:cd:e4:13:92:64:4c:8c:9a:e7:02: 11:15:8b:ef:71:3a:94:c8:e5:ac:d2:39:18:f3:90:25:4d:1a: ef:e5:7a:f8:94:fd:d0:72:fa:91:70:78:d0:46:f2:48:c3:de: bf:ad:38:d0:86:72:72:65:74:e7:6c:95:b2:68:1a:6d:58:67: 19:14:87:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2 RTZFNDE5RkUwHhcNMjUxMTA1MDMwMzA1WhcNMjUxMTEyMDMwMzA1WjAYMRYwFAYD VQQDEw02OTBhYmU2YS1kMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwNCx4kMiD+n9sbTc1HJw+XDz5u2bLdTglGtNO2/3cqbQ4Pp4iVsIPu/e5Ii QR7HjKkGu9mzyT7x67JJYmfdOWyjjXcXtA4h+/NH9UhdTQSNeE/jUYogvSzCmdAp NZ5ld2OCJwrCaB8q0wQCF5BaUkMtGhlzVIM2DcdK1OKTVxgzIz7GKyDnMbS0KGhE iWchqDoy736vtYPs8arK4UBlZt21z6UcOGZrI41DhKSZK+89Hw5S3j0d1B92qiKH eYswcYiz3a5dBT+OV33pGrTrwbxryXzZmOml9sDgwbZa9Z546060NJ1RfSLWiLGY EHPzcnt/q6AHcAVgJE20RS5l2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhFYOcW Ya+PSWmiTDv6D8UfIGWyMB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0 MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEZbLPq+GEGjCmQwRmffQXGXvAKRMXwcXbUns3vP7XanIEn5eOpqpk bUuFKuIF06V5S8J5jbr9WKsG2bM2OT8l869fVwQ8rwARBa3rg8Wz48l7TrtpmMLQ ClI+9QzNu/IBtLFi0SYLqLJBrlfB5hhoPJxkC7E5labdc9yhR1q5ts1fjiP7BlUx zge4wglTyiS0FcorRaJFF7VlccQGatsJPT1br0gUkVH7l2MqDaMMxerndlvdrFu1 lr/SFM3kE5JkTIya5wIRFYvvcTqUyOWs0jkY85AlTRrv5Xr4lP3QcvqRcHjQRvJI w96/rTjQhnJyZXTnbJWyaBptWGcZFIfa -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:03 2025 by rpki-client