$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json) Hash identifier: r+xXVpvOdhg7hnDafSlM5QW2BX/7hRcebsc5RRgPmU8= Subject key identifier: 29:E6:CA:CB:65:78:94:AE:5E:9D:92:15:D8:9A:51:62:3B:85:CF:AC Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft Manifest number: 0AF5 Signing time: Sun 02 Nov 2025 19:22:56 +0000 Manifest this update: Sun 02 Nov 2025 19:22:56 +0000 Manifest next update: Sun 09 Nov 2025 19:22:56 +0000 Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: xIW6WSdK1rE7OAUeKUp2xM4+elQ9n77Ud+LJCmB8UEo=) 2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: Nov 2 19:22:56 2025 GMT Not After : Nov 9 19:22:56 2025 GMT Subject: CN=6907af90-dfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:77:55:80:41:45:a0:d8:09:f5:b4:4f:94: a7:63:a0:d6:04:30:43:9a:63:7b:50:94:ef:15:7d: 4f:c5:20:e5:37:09:44:b8:af:0e:63:de:3a:be:03: a3:8d:e6:a7:48:c3:9b:a9:19:5f:9e:dd:97:b2:36: 18:ce:12:b0:1d:43:fd:b8:0c:cf:a6:91:f6:05:57: e3:c5:4b:dc:6e:cb:89:df:73:b0:f7:51:3f:0d:72: 21:73:3d:05:f3:69:79:cb:90:fc:45:0d:a1:b1:9b: 60:f5:d3:32:f2:b9:8c:19:1d:98:bb:b7:ea:0a:fc: 2b:c0:ee:98:3f:c4:a7:75:9b:84:32:57:2e:85:d7: 89:fd:e9:43:67:ba:9d:56:02:17:6c:ee:1a:dc:cc: 20:02:02:86:d5:5c:ab:3c:52:44:13:5f:ca:58:f7: fa:fd:09:2b:7b:33:8a:5d:5d:85:78:cf:25:b1:b1: d8:be:21:29:4b:ec:92:75:1f:16:40:bf:84:71:f0: e0:0d:c6:4d:94:50:ad:30:12:b9:d1:54:d3:a9:d1: 64:e0:f2:cb:73:bb:03:9b:d6:db:f8:74:01:af:fa: 03:c7:43:f3:1d:7a:02:a8:7b:34:ef:44:0a:9e:c7: 45:3c:ed:ed:2e:81:e5:a0:db:ad:d1:bb:ea:54:2f: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E6:CA:CB:65:78:94:AE:5E:9D:92:15:D8:9A:51:62:3B:85:CF:AC X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:88:48:e5:e5:5a:49:37:f3:c2:95:13:1e:b0:35:ad:56:16: 71:f3:86:04:4e:42:39:d4:4e:14:6c:ae:8e:71:06:4a:99:41: e7:be:7d:f8:c7:f5:97:e4:db:ba:3e:93:be:87:0f:16:ba:69: e4:e7:46:b7:5e:06:71:92:5f:36:b4:66:33:d2:a0:ec:04:15: aa:0e:4c:ee:0f:20:cc:c9:f7:d8:e0:79:c3:9d:b9:29:3b:7c: 99:fc:63:be:11:b0:ef:f9:ed:1b:30:98:ee:98:82:9d:03:b9: 45:c4:a9:f6:c1:a0:7c:51:ce:5f:ce:be:d5:dd:5d:50:37:be: 4e:8c:b0:5e:97:f2:fc:c5:d1:63:bb:eb:46:05:75:e2:3c:c6: 3a:6c:40:21:f3:c8:3f:81:6c:99:52:6b:16:19:76:69:94:ee: e7:e4:f0:b7:a7:02:cd:1a:c1:2b:47:c6:04:e2:d8:c1:8b:b7: 15:66:58:e8:38:18:a7:0a:84:dd:62:13:7c:8b:95:c3:44:30: 60:76:11:83:12:5a:3a:0b:60:cb:98:ff:91:df:63:f5:10:80: 9b:be:28:21:52:5f:d9:36:4d:27:92:53:c5:e7:0c:29:43:34: c9:31:59:bb:ed:ad:ee:3a:b9:35:a1:47:56:25:53:e5:6f:a7: 3f:d4:ec:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjUxMTAyMTkyMjU2WhcNMjUxMTA5MTkyMjU2WjAYMRYwFAYD VQQDEw02OTA3YWY5MC1kZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sB3VYBBRaDYCfW0T5SnY6DWBDBDmmN7UJTvFX1PxSDlNwlEuK8OY946vgOj jeanSMObqRlfnt2XsjYYzhKwHUP9uAzPppH2BVfjxUvcbsuJ33Ow91E/DXIhcz0F 82l5y5D8RQ2hsZtg9dMy8rmMGR2Yu7fqCvwrwO6YP8SndZuEMlcuhdeJ/elDZ7qd VgIXbO4a3MwgAgKG1VyrPFJEE1/KWPf6/QkrezOKXV2FeM8lsbHYviEpS+ySdR8W QL+EcfDgDcZNlFCtMBK50VTTqdFk4PLLc7sDm9bb+HQBr/oDx0PzHXoCqHs070QK nsdFPO3tLoHloNut0bvqVC8PLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnmystl eJSuXp2SFdiaUWI7hc+sMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdiEjl5VpJN/PClRMesDWtVhZx84YETkI51E4UbK6OcQZKmUHnvn34 x/WX5Nu6PpO+hw8Wumnk50a3XgZxkl82tGYz0qDsBBWqDkzuDyDMyffY4HnDnbkp O3yZ/GO+EbDv+e0bMJjumIKdA7lFxKn2waB8Uc5fzr7V3V1QN75OjLBel/L8xdFj u+tGBXXiPMY6bEAh88g/gWyZUmsWGXZplO7n5PC3pwLNGsErR8YE4tjBi7cVZljo OBinCoTdYhN8i5XDRDBgdhGDElo6C2DLmP+R32P1EICbvighUl/ZNk0nklPF5wwp QzTJMVm77a3uOrk1oUdWJVPlb6c/1Oyt -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:03 2025 by rpki-client