$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: hnTzr4Z+brwlKtK7WCTcnTAptnXZ1kk5KGyvHVPtUi4= Subject key identifier: A5:1B:DA:71:5B:78:77:2A:41:97:DE:FC:6F:DF:60:2F:6F:94:E4:C6 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 04:49:45 +0000 Manifest this update: Wed 05 Nov 2025 04:49:45 +0000 Manifest next update: Wed 12 Nov 2025 04:49:45 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: KFQaunq/Di6g9MWpb/977XGuy/ovnzuh8j5+RmZgfxs=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: v7IuFE0BzPTXRSJLbaCUBczf3498SLFTOxfRoorPtF0=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: fRP3NJ69rLlQTm+x/tKrEfvNNM+dik3rM5J3rzquHdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Nov 5 04:49:45 2025 GMT Not After : Nov 12 04:49:45 2025 GMT Subject: CN=690ad769-c51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:6c:ec:46:1b:af:5b:01:66:a9:fe:3f:8d: 8d:23:c0:e8:4b:f2:d0:9c:e4:dc:b6:30:8b:10:67: 35:4f:a6:45:10:12:4f:a4:e4:f6:9a:3c:e3:ac:e1: a1:32:48:f0:32:59:66:d5:c5:c2:2d:2a:5c:38:6d: 84:83:05:ee:ad:32:fe:ac:f2:13:69:1d:4f:b5:a7: 44:81:03:4f:87:ea:ce:fe:b3:82:6d:2b:3d:bc:91: 84:47:34:f0:d3:40:dc:7f:e9:25:50:ef:33:61:50: 51:71:95:70:5d:1b:9b:29:01:12:e0:65:d4:2f:96: 2c:aa:26:b4:12:6e:40:4b:2e:82:98:52:e6:85:c8: 8c:17:37:2c:65:cc:27:fe:9a:b4:93:7e:b9:d0:a3: fc:c2:8b:00:88:1f:8e:4a:9e:79:a7:80:b8:a6:bf: 4d:cb:6b:9c:b9:10:10:fd:f4:10:10:0e:e0:68:db: a2:dc:66:48:b3:d3:f0:dd:bb:f2:a1:5a:a4:e7:1b: c8:12:8d:b5:f5:76:0d:35:8b:f8:5b:1c:55:55:3e: ed:71:5d:fe:1e:a8:05:a3:73:ba:cc:b5:56:7e:30: 86:3f:ef:54:26:55:9c:bd:68:01:24:dc:68:fa:32: a4:97:ef:d2:a2:e0:64:b2:4b:35:75:17:18:07:40: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1B:DA:71:5B:78:77:2A:41:97:DE:FC:6F:DF:60:2F:6F:94:E4:C6 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e1:1a:21:df:c3:0b:7d:a7:e2:fc:fa:35:b5:4d:c6:05:1d: 80:3b:e1:ab:62:52:44:37:60:37:ed:99:fb:b1:d6:82:6b:d8: 55:bb:61:2b:e3:46:f1:b8:27:b3:1b:72:87:34:04:f1:e7:dc: ec:aa:e9:76:f9:8e:0c:04:7a:01:54:ea:0d:1b:ed:11:aa:73: 96:36:4f:c5:ba:32:5b:1c:bc:9a:0d:f5:b9:9e:ec:bf:6e:ce: 63:9d:bd:dc:c2:bf:d0:0e:1b:44:b8:c0:85:7e:d8:00:a2:08: 38:97:f9:02:21:32:a6:12:e7:86:5f:f3:b4:f8:5c:8d:c6:84: ca:6b:3f:6f:cd:8e:00:58:48:d6:da:96:f6:1a:e3:29:d8:b9: 4d:15:c4:eb:cf:b8:24:b4:89:d8:e8:29:e6:41:1c:ca:d2:42: 20:3e:35:46:10:c4:45:86:f9:a5:f8:8a:6d:97:7c:6a:68:eb: 7d:aa:67:6f:b7:ea:cb:1e:91:97:ca:98:a2:2b:17:c5:af:d1: 9a:0c:ad:fc:40:9f:94:73:7d:d5:ee:8d:7d:18:0a:a0:da:c4: 39:6b:6d:24:0b:16:ba:73:0d:6d:0f:b0:c0:23:ab:47:b7:d1: 8d:d7:0c:fe:1e:bf:a4:f4:57:d7:48:71:c8:96:cd:6d:44:0b: 22:b8:27:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUxMTA1MDQ0OTQ1WhcNMjUxMTEyMDQ0OTQ1WjAYMRYwFAYD VQQDEw02OTBhZDc2OS1jNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zJs7EYbr1sBZqn+P42NI8DoS/LQnOTctjCLEGc1T6ZFEBJPpOT2mjzjrOGh MkjwMllm1cXCLSpcOG2EgwXurTL+rPITaR1PtadEgQNPh+rO/rOCbSs9vJGERzTw 00Dcf+klUO8zYVBRcZVwXRubKQES4GXUL5Ysqia0Em5ASy6CmFLmhciMFzcsZcwn /pq0k3650KP8wosAiB+OSp55p4C4pr9Ny2ucuRAQ/fQQEA7gaNui3GZIs9Pw3bvy oVqk5xvIEo219XYNNYv4WxxVVT7tcV3+HqgFo3O6zLVWfjCGP+9UJlWcvWgBJNxo +jKkl+/SouBksks1dRcYB0DuQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUb2nFb eHcqQZfe/G/fYC9vlOTGMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW4Roh38MLfafi/Po1tU3GBR2AO+GrYlJEN2A37Zn7sdaCa9hVu2Er 40bxuCezG3KHNATx59zsqul2+Y4MBHoBVOoNG+0RqnOWNk/FujJbHLyaDfW5nuy/ bs5jnb3cwr/QDhtEuMCFftgAogg4l/kCITKmEueGX/O0+FyNxoTKaz9vzY4AWEjW 2pb2GuMp2LlNFcTrz7gktInY6CnmQRzK0kIgPjVGEMRFhvml+Iptl3xqaOt9qmdv t+rLHpGXypiiKxfFr9GaDK38QJ+Uc33V7o19GAqg2sQ5a20kCxa6cw1tD7DAI6tH t9GN1wz+Hr+k9FfXSHHIls1tRAsiuCeE -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:27 2025 by rpki-client