$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: ku5fp25dqYlvKQ8afVw/dcL9DLFsgyPlWYT/M41vpJw= Subject key identifier: BE:A2:EF:12:C9:F0:AA:11:4C:19:5A:E6:F6:28:B1:67:15:58:F6:22 Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 073C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 072D Signing time: Tue 04 Nov 2025 21:52:17 +0000 Manifest this update: Tue 04 Nov 2025 21:52:16 +0000 Manifest next update: Tue 11 Nov 2025 21:52:16 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: OB1Vp/5CUotmteuWtyqwDTQ0/mAFYvNBJnj/bsIdXIs=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: Nov 4 21:52:16 2025 GMT Not After : Nov 11 21:52:16 2025 GMT Subject: CN=690a7591-f7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:48:50:2c:aa:5d:79:74:50:69:22:3c:7b: 20:71:f8:92:ae:c2:b4:53:53:6d:a4:71:ba:6d:ca: 05:00:4f:6c:4d:65:35:f0:b9:2c:4b:45:59:4b:e4: 4e:c8:a5:46:26:ae:f6:f6:11:a2:02:96:bb:28:a0: 5a:11:f2:a8:b1:71:5b:e8:9b:0f:40:1c:93:14:da: 18:8f:3d:9a:d9:70:7b:81:18:80:fb:8c:c5:66:c6: 68:4f:67:b4:1d:77:b7:a4:f9:5c:cc:f2:67:31:39: cb:61:2f:55:eb:c4:a2:58:95:5d:c8:e0:45:71:00: 54:44:d3:e9:6d:ce:df:2b:a5:d4:9a:30:7c:a3:0f: 67:09:5b:52:7f:ab:70:7b:b8:2f:83:c4:5b:43:f8: f3:a0:0f:81:13:30:b2:01:8f:82:ba:17:79:ab:a7: c6:25:1b:71:56:37:3e:98:ca:6b:d2:cb:50:80:ac: 42:05:6e:33:32:be:4e:f6:f2:a7:79:ec:03:8d:83: 67:91:cf:7b:f6:ad:e5:6d:03:92:a3:a8:c2:4f:86: 70:4e:6c:0e:5b:8d:d2:08:c4:16:87:65:5e:9e:bb: 60:2b:a7:fc:49:f3:cf:b0:d5:db:6e:ab:9f:f1:35: ec:58:e7:a6:ba:6d:69:97:fe:30:50:52:2a:58:26: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:EF:12:C9:F0:AA:11:4C:19:5A:E6:F6:28:B1:67:15:58:F6:22 X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2c:8b:38:46:63:85:79:cb:ba:20:07:32:18:df:8a:4f:36: c9:a2:9c:e6:95:30:ff:d0:90:c3:d2:95:5b:94:17:1b:b8:29: 23:ed:a7:5f:4a:e6:04:00:d1:df:65:7d:06:82:07:74:86:20: aa:5f:0d:01:0e:a3:04:91:85:06:30:f5:f9:2d:37:8f:6c:6a: d7:c4:14:0d:63:f0:64:66:e5:c3:fb:76:f4:64:66:3b:f5:a6: c4:88:b4:07:94:cc:63:50:a2:d4:1c:e8:1b:f1:96:46:12:1f: 62:9c:91:15:49:c9:a5:08:1b:61:e8:24:28:35:97:5b:cc:ce: 5c:bb:32:3a:89:1b:55:99:6d:96:24:7c:a8:61:41:bf:0c:72: 47:7e:1e:28:ca:03:c0:99:3f:2a:8f:e9:1e:34:44:9c:4d:e5: 6e:c4:23:3b:8b:b3:e2:2a:d3:59:62:28:38:d9:94:b2:5c:b3: 93:47:d0:f7:bc:bb:c6:c7:d3:e8:41:c7:6d:f2:8d:b7:28:21: f9:49:67:3c:ac:fa:4b:04:be:50:c3:7f:2e:4b:0a:b5:cc:00: b9:8f:d6:d9:b3:ea:8b:d5:23:9d:45:3d:a5:5c:35:eb:3d:1c: 62:38:50:73:6b:48:fd:b7:b6:b0:7e:4b:b8:f9:d5:8c:24:15: 2e:0a:42:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjUxMTA0MjE1MjE2WhcNMjUxMTExMjE1MjE2WjAYMRYwFAYD VQQDEw02OTBhNzU5MS1mN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZZIUCyqXXl0UGkiPHsgcfiSrsK0U1NtpHG6bcoFAE9sTWU18LksS0VZS+RO yKVGJq729hGiApa7KKBaEfKosXFb6JsPQByTFNoYjz2a2XB7gRiA+4zFZsZoT2e0 HXe3pPlczPJnMTnLYS9V68SiWJVdyOBFcQBURNPpbc7fK6XUmjB8ow9nCVtSf6tw e7gvg8RbQ/jzoA+BEzCyAY+Cuhd5q6fGJRtxVjc+mMpr0stQgKxCBW4zMr5O9vKn eewDjYNnkc979q3lbQOSo6jCT4ZwTmwOW43SCMQWh2VenrtgK6f8SfPPsNXbbquf 8TXsWOemum1pl/4wUFIqWCa1vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6i7xLJ 8KoRTBla5vYosWcVWPYiMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYLIs4RmOFecu6IAcyGN+KTzbJopzmlTD/0JDD0pVblBcbuCkj7adf SuYEANHfZX0Gggd0hiCqXw0BDqMEkYUGMPX5LTePbGrXxBQNY/BkZuXD+3b0ZGY7 9abEiLQHlMxjUKLUHOgb8ZZGEh9inJEVScmlCBth6CQoNZdbzM5cuzI6iRtVmW2W JHyoYUG/DHJHfh4oygPAmT8qj+keNEScTeVuxCM7i7PiKtNZYig42ZSyXLOTR9D3 vLvGx9PoQcdt8o23KCH5SWc8rPpLBL5Qw38uSwq1zAC5j9bZs+qL1SOdRT2lXDXr PRxiOFBza0j9t7awfku4+dWMJBUuCkL3 -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:17 2025 by rpki-client