$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: ZQRe35QfS9W1aDY/QqnJBjFsx1D0z/4mRFUp5s1V6pE= Subject key identifier: 8A:41:0E:B1:77:31:FA:B2:69:71:8E:3A:69:B1:1B:4C:F4:52:E9:D8 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0D2B Signing time: Tue 04 Nov 2025 18:08:19 +0000 Manifest this update: Tue 04 Nov 2025 18:08:18 +0000 Manifest next update: Tue 11 Nov 2025 18:08:18 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: fX5sdcCiHuMy8ZbVzWjsxeObNF9UUEtrOIMjWdMzxso=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: eWcvHOUT67GedsanEfBHjHteAl5xPcgw0p372As4/K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Nov 4 18:08:18 2025 GMT Not After : Nov 11 18:08:18 2025 GMT Subject: CN=690a4113-f3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:74:8a:07:f3:94:66:c9:2b:d6:d3:a9:3f: 44:cb:22:e4:5d:2c:3f:7b:9b:dc:47:a2:f6:33:1c: 47:ce:7b:ab:a2:f7:41:99:9d:68:3b:a8:d9:b9:cb: dc:2c:bc:19:c3:6f:fe:17:87:25:7e:85:28:d3:3b: db:47:c4:92:b7:f6:cd:6d:85:a0:a7:9a:a0:cb:13: 85:73:f7:8b:97:d5:d6:48:bd:6d:36:2e:f6:1b:25: 34:ee:1f:65:11:dc:96:e8:81:ba:59:d8:90:ef:81: a7:4a:98:50:f8:05:2e:47:39:c4:47:2a:c3:e5:cd: 38:cf:8e:e0:59:74:d0:28:f3:5a:e4:f7:53:a1:3a: 88:bf:9f:53:0f:bc:2c:07:6a:25:9e:62:2a:59:cf: 91:20:e3:39:3b:4b:5b:a5:21:6f:26:e4:b2:88:79: cf:7b:06:9b:63:6a:fd:1d:18:63:2f:36:36:55:6b: ac:98:bb:dc:17:6f:9f:7d:5a:06:f8:58:ec:0e:1a: 34:52:37:23:32:dc:7c:75:7e:a3:d4:2d:ae:c9:27: ec:ad:c5:ea:44:3b:0c:fa:2d:25:e7:65:6b:9b:88: ed:f2:f6:20:67:c1:de:a7:5b:11:9f:7f:69:57:9e: 1c:1f:43:fa:bb:3d:87:4a:42:3b:cf:98:66:07:81: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:41:0E:B1:77:31:FA:B2:69:71:8E:3A:69:B1:1B:4C:F4:52:E9:D8 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4b:65:2b:a0:08:1c:64:9b:20:ad:5a:ed:ff:12:d4:c1:8b: a1:c2:b1:c5:8e:55:aa:87:cb:53:c6:8f:c4:c1:73:e4:8c:28: 05:8d:aa:bb:86:b5:f5:c3:94:37:b7:2f:30:56:e3:22:73:40: 14:c6:83:89:d6:80:b2:31:31:f9:1f:37:a0:45:a1:44:42:2a: fd:79:b9:f5:3e:83:63:b3:fd:3d:4e:b0:c5:e5:50:05:f2:90: 34:fd:2b:bc:c0:4a:34:35:70:e9:fc:c0:ed:ff:43:91:95:2a: d8:d2:d3:20:00:ff:91:2a:ab:79:5a:27:f1:30:53:17:d4:23: 3b:81:9d:e2:72:49:1e:5d:40:99:26:b0:08:b7:2e:6d:d5:48: 89:08:77:76:79:5b:eb:17:ce:61:3c:5d:78:d0:80:44:79:a7: 6b:1b:00:33:33:d8:e3:df:94:9a:4f:8e:91:ed:83:d9:22:5f: ff:4b:b0:de:53:d5:07:a8:d5:62:d5:4d:0e:e9:2a:a1:a4:8c: 9c:5a:14:c2:44:10:38:38:b9:20:1c:a8:59:58:08:34:45:56: 7d:f4:45:d8:65:fd:0e:cc:bc:ec:97:87:31:1f:3a:c5:aa:d2: c3:68:70:af:61:5d:fb:f9:bc:63:5e:b6:1e:de:42:a8:9c:3a: 63:3c:49:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUxMTA0MTgwODE4WhcNMjUxMTExMTgwODE4WjAYMRYwFAYD VQQDEw02OTBhNDExMy1mM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGd0igfzlGbJK9bTqT9EyyLkXSw/e5vcR6L2MxxHznurovdBmZ1oO6jZucvc LLwZw2/+F4clfoUo0zvbR8SSt/bNbYWgp5qgyxOFc/eLl9XWSL1tNi72GyU07h9l EdyW6IG6WdiQ74GnSphQ+AUuRznERyrD5c04z47gWXTQKPNa5PdToTqIv59TD7ws B2olnmIqWc+RIOM5O0tbpSFvJuSyiHnPewabY2r9HRhjLzY2VWusmLvcF2+ffVoG +FjsDho0UjcjMtx8dX6j1C2uySfsrcXqRDsM+i0l52Vrm4jt8vYgZ8Hep1sRn39p V54cH0P6uz2HSkI7z5hmB4GLcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpBDrF3 MfqyaXGOOmmxG0z0UunYMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeS2UroAgcZJsgrVrt/xLUwYuhwrHFjlWqh8tTxo/EwXPkjCgFjaq7 hrX1w5Q3ty8wVuMic0AUxoOJ1oCyMTH5HzegRaFEQir9ebn1PoNjs/09TrDF5VAF 8pA0/Su8wEo0NXDp/MDt/0ORlSrY0tMgAP+RKqt5WifxMFMX1CM7gZ3ickkeXUCZ JrAIty5t1UiJCHd2eVvrF85hPF140IBEeadrGwAzM9jj35SaT46R7YPZIl//S7De U9UHqNVi1U0O6SqhpIycWhTCRBA4OLkgHKhZWAg0RVZ99EXYZf0OzLzsl4cxHzrF qtLDaHCvYV37+bxjXrYe3kKonDpjPEmD -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:16 2025 by rpki-client