$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: uAoQbt9Gy3C4yOaewv2VfBDHF7hxjyHYCJoaa4frf9I= Subject key identifier: 0A:C9:C4:F5:E3:BB:C7:24:DB:07:AE:64:64:CD:82:73:36:99:74:AD Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 94 Signing time: Wed 05 Nov 2025 06:39:35 +0000 Manifest this update: Wed 05 Nov 2025 06:39:34 +0000 Manifest next update: Wed 12 Nov 2025 06:39:34 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: a9aUfpTEsVE/rudVCWElxEPkavjvGufGfB0cE5so7nE=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Nov 5 06:39:34 2025 GMT Not After : Nov 12 06:39:34 2025 GMT Subject: CN=690af127-50aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:d8:86:41:17:bd:d3:d3:35:71:c3:75:dd: 19:45:d7:ea:79:aa:63:37:32:c8:12:3f:f1:42:f7: ca:1a:b3:fe:48:a5:a3:f1:6d:41:88:35:d5:f9:0e: d8:c6:8d:cd:08:e6:2c:bb:ea:cd:7b:94:e7:a8:0f: 81:42:d5:9a:c7:fa:68:d2:c8:3b:90:11:14:ba:fa: c6:1f:9d:4d:5a:9b:e0:58:0c:f6:f6:33:e2:d4:3b: 4a:50:d8:a0:4b:fb:12:5d:bb:2b:17:d0:87:15:a9: cb:3e:b6:fd:e1:2a:1d:53:ab:02:46:f7:2b:f2:72: bb:d2:1c:06:e6:f6:02:0c:48:d9:86:27:a7:88:2c: 88:0b:9c:33:29:12:d5:3f:3b:ac:c4:41:5c:2c:93: 5f:bf:f6:7f:40:f0:5e:2f:ce:a7:16:ad:a4:a7:2d: d3:4f:26:f1:9c:bf:97:1e:0d:3d:17:e2:e0:3d:23: 90:9c:d2:81:11:04:b8:5d:8e:de:5f:e1:39:d7:9e: 18:99:1d:59:1b:4d:03:98:24:7c:db:2f:25:59:32: cb:9d:51:09:2a:da:00:7b:02:cf:84:bf:51:36:11: af:19:57:ea:01:93:00:3a:56:a9:d1:7d:40:2d:fa: cf:af:96:f0:28:b4:02:cd:71:18:46:fd:df:cf:22: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C9:C4:F5:E3:BB:C7:24:DB:07:AE:64:64:CD:82:73:36:99:74:AD X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:13:01:91:c7:80:6d:20:c5:67:2c:89:33:15:05:f6:d4:8b: 01:ff:d9:22:c3:a0:bd:8e:ef:00:17:69:37:06:88:a2:db:37: dd:ec:66:7b:9c:ff:91:40:cf:cb:ab:9e:5e:b3:10:f1:cc:64: 4a:de:71:c3:a6:da:b3:e3:50:eb:0e:8a:e2:e6:bc:2f:cd:11: cd:c2:d3:09:10:3c:04:26:2d:cc:04:45:4c:08:0a:33:01:65: 85:92:28:71:d6:9a:d7:b5:58:f9:9c:64:24:b0:a5:2c:fb:39: a8:4f:71:17:41:3d:74:4f:45:fa:0e:8e:71:0f:66:45:e0:32: b4:2a:64:8a:03:43:c9:5c:2e:04:de:c8:f3:8a:13:4f:9e:1b: 66:af:cf:bd:d6:9a:80:a6:ec:02:5b:d1:7e:c2:7d:ae:a0:0a: 3e:38:9c:44:84:1a:9f:37:95:62:ec:56:5d:36:93:9e:02:91: c6:b6:6f:e0:e2:ef:3e:d0:73:53:96:c4:dd:b3:72:3d:87:6f: 15:1f:59:f4:84:b7:1b:3c:b2:f0:e8:26:1c:5e:e3:60:f5:26: 5c:f2:f2:e1:ed:15:fa:1f:98:13:db:e9:4c:5a:4e:c6:d9:3a: 5f:ad:e4:6f:fe:2a:2a:ab:0e:b1:f7:e4:a6:6a:9d:26:a7:fd: e1:ad:cb:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMxRjUxMTAvBgNVBAUTKDQ5MTM2Njc1RTdFMjM0RTdEMkY4ODQ1OTk4RTJDNjJE QjQ4ODgyQ0EwHhcNMjUxMTA1MDYzOTM0WhcNMjUxMTEyMDYzOTM0WjAYMRYwFAYD VQQDEw02OTBhZjEyNy01MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7LYhkEXvdPTNXHDdd0ZRdfqeapjNzLIEj/xQvfKGrP+SKWj8W1BiDXV+Q7Y xo3NCOYsu+rNe5TnqA+BQtWax/po0sg7kBEUuvrGH51NWpvgWAz29jPi1DtKUNig S/sSXbsrF9CHFanLPrb94SodU6sCRvcr8nK70hwG5vYCDEjZhieniCyIC5wzKRLV PzusxEFcLJNfv/Z/QPBeL86nFq2kpy3TTybxnL+XHg09F+LgPSOQnNKBEQS4XY7e X+E5154YmR1ZG00DmCR82y8lWTLLnVEJKtoAewLPhL9RNhGvGVfqAZMAOlap0X1A LfrPr5bwKLQCzXEYRv3fzyJ+gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArJxPXj u8ck2weuZGTNgnM2mXStMB8GA1UdIwQYMBaAFEkTZnXn4jTn0viEWZjixi20iILK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BNzU0RDM4MEQ2 RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5PZlMtSVJabU9MR0xiU0ln c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5P ZlMtSVJabU9MR0xiU0lnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEEwGRx4BtIMVnLIkzFQX21IsB/9kiw6C9ju8AF2k3Boii2zfd7GZ7 nP+RQM/Lq55esxDxzGRK3nHDptqz41DrDori5rwvzRHNwtMJEDwEJi3MBEVMCAoz AWWFkihx1prXtVj5nGQksKUs+zmoT3EXQT10T0X6Do5xD2ZF4DK0KmSKA0PJXC4E 3sjzihNPnhtmr8+91pqApuwCW9F+wn2uoAo+OJxEhBqfN5Vi7FZdNpOeApHGtm/g 4u8+0HNTlsTds3I9h28VH1n0hLcbPLLw6CYcXuNg9SZc8vLh7RX6H5gT2+lMWk7G 2TpfreRv/ioqqw6x9+Smap0mp/3hrcsX -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:48 2025 by rpki-client