$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json) Hash identifier: /KsNlCOTaCaA+tLs9NC4giUyPCP9xUsedyBlz6t6rjs= Subject key identifier: D3:1C:0E:C6:1B:BA:59:1E:EB:12:E7:DB:05:5A:B5:FC:52:5C:39:82 Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft Manifest number: 01C3 Signing time: Wed 05 Nov 2025 03:07:24 +0000 Manifest this update: Wed 05 Nov 2025 03:07:23 +0000 Manifest next update: Wed 12 Nov 2025 03:07:23 +0000 Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: mW0sVSY+f8zi+z3xhJXAB1LCk4/ctIR9VbY7bx0uYo8=) 2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: 9gR2lRbVVIU22KEWmoGtOBdRGANvKvJYg+mYVptNNuo=) 3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: UlpJBRG/slW4YmDu7jI0m8GwClz9FqM/W/iTuDuu4YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Validity Not Before: Nov 5 03:07:23 2025 GMT Not After : Nov 12 03:07:23 2025 GMT Subject: CN=690abf6b-888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:cd:ac:94:41:6a:12:2e:39:12:2d:c9:22: 69:03:6e:44:a2:95:8d:83:f8:e1:b8:be:2e:5c:14: d2:7b:6b:3a:62:bd:a1:11:f9:34:9f:5c:63:a8:99: 5a:9d:5a:7b:44:3c:1e:4c:40:37:aa:e5:67:f8:08: a7:ab:b0:0f:f0:82:60:56:f3:7d:f4:ff:cf:91:fd: d3:58:5b:fc:c0:5f:63:1f:76:7c:cd:e6:20:4a:59: 31:b4:c9:0a:e9:60:3f:88:1e:a0:b0:50:c3:f7:77: fd:eb:8c:29:6a:ba:92:2f:5d:b0:11:85:87:06:dc: 2b:e1:f9:3f:ea:bf:62:68:e8:59:8d:95:0f:cb:be: 77:8e:1e:67:4f:85:8d:63:0f:55:26:1d:1a:0b:ed: 4d:56:e9:b5:2d:67:18:eb:7e:dc:85:35:a4:2b:a3: 7d:a6:45:dc:b7:ee:41:35:d8:fa:f1:44:cc:6e:ed: 52:48:81:dc:c2:69:5d:92:a9:46:5c:52:e3:de:8e: d4:d6:57:ad:61:6e:95:c2:c1:16:7c:9d:bc:39:17: 1c:4f:4a:3e:21:97:73:52:dc:d8:1b:8a:86:ff:59: d0:c4:b9:d0:47:b6:36:25:9c:5a:16:75:b8:ce:38: fb:32:8b:81:2e:74:b0:cf:c5:4a:f0:42:47:d5:e3: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:0E:C6:1B:BA:59:1E:EB:12:E7:DB:05:5A:B5:FC:52:5C:39:82 X509v3 Authority Key Identifier: keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3c:03:c5:a0:37:d4:7d:f0:2f:8d:c4:cd:fb:df:e9:75:e8: aa:ac:9f:e0:6c:f2:57:e2:c3:9b:6f:b8:ba:2e:ba:45:80:f8: 39:1d:46:a1:1c:05:ae:ab:4c:ed:c1:9f:3b:9c:67:2b:3f:1c: 7a:3e:3f:9a:2f:cb:07:4b:1b:47:f3:a7:fa:bb:e4:65:4d:a6: 6e:80:a5:f8:e6:c5:3b:f0:74:c8:11:0e:6d:00:c2:e3:7a:f5: d9:35:e3:b4:8d:45:31:6f:1a:b4:35:b1:b2:20:32:75:e4:bf: ee:31:9d:cc:12:67:62:b6:8f:dd:4a:75:fe:67:b1:35:30:4d: af:c1:42:fe:81:75:5e:9c:7d:89:8d:fe:83:89:96:8f:23:d8: 4c:2d:2c:13:8a:f9:63:27:0c:56:4f:22:d6:06:04:4b:5b:71: d8:e1:e1:07:10:92:ee:19:4b:5d:7f:19:45:98:13:64:6b:71: be:22:3a:19:51:34:3e:85:88:e6:19:f4:75:6b:09:87:fd:84: 2a:e0:23:7e:c4:89:8b:4b:aa:d1:a3:f0:cf:c6:71:df:ed:44: 9f:83:7b:c6:cb:fd:31:ff:14:22:9a:e4:b2:bf:44:7d:b7:bf: 98:8a:e8:08:67:c6:4f:92:38:30:83:b8:d5:9c:a6:86:3f:7a: de:8e:1f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MkUxMTAvBgNVBAUTKEVGNjcwMkE3RDBBRUM4MzRERUZCOEY0MTY4QjJGRThG NEQ1ODQzRTgwHhcNMjUxMTA1MDMwNzIzWhcNMjUxMTEyMDMwNzIzWjAYMRYwFAYD VQQDEw02OTBhYmY2Yi04ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeHNrJRBahIuORItySJpA25EopWNg/jhuL4uXBTSe2s6Yr2hEfk0n1xjqJla nVp7RDweTEA3quVn+Ainq7AP8IJgVvN99P/Pkf3TWFv8wF9jH3Z8zeYgSlkxtMkK 6WA/iB6gsFDD93f964wparqSL12wEYWHBtwr4fk/6r9iaOhZjZUPy753jh5nT4WN Yw9VJh0aC+1NVum1LWcY637chTWkK6N9pkXct+5BNdj68UTMbu1SSIHcwmldkqlG XFLj3o7U1letYW6VwsEWfJ28ORccT0o+IZdzUtzYG4qG/1nQxLnQR7Y2JZxaFnW4 zjj7MouBLnSwz8VK8EJH1eM0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMcDsYb ulke6xLn2wVatfxSXDmCMB8GA1UdIwQYMBaAFO9nAqfQrsg03vuPQWiy/o9NWEPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyRS9EQzMzNTk3QzBC NjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlEVGUtNDlCYUxMLWowMVlR LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyY0NwOUN1eURUZS00OUJhTEwtajAxWVEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyRS9EQzMzNTk3QzBCNjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlE VGUtNDlCYUxMLWowMVlRLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcPAPFoDfUffAvjcTN+9/pdeiqrJ/gbPJX4sObb7i6LrpFgPg5HUah HAWuq0ztwZ87nGcrPxx6Pj+aL8sHSxtH86f6u+RlTaZugKX45sU78HTIEQ5tAMLj evXZNeO0jUUxbxq0NbGyIDJ15L/uMZ3MEmdito/dSnX+Z7E1ME2vwUL+gXVenH2J jf6DiZaPI9hMLSwTivljJwxWTyLWBgRLW3HY4eEHEJLuGUtdfxlFmBNka3G+IjoZ UTQ+hYjmGfR1awmH/YQq4CN+xImLS6rRo/DPxnHf7USfg3vGy/0x/xQimuSyv0R9 t7+YiugIZ8ZPkjgwg7jVnKaGP3rejh/O -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:17 2025 by rpki-client