$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft File: asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json) Hash identifier: U2BPAXRPZICLoKsPSxuaSOwfh0cc0KkdZxrtTESJaH0= Subject key identifier: 9A:B9:51:89:C1:D0:69:F3:6A:D9:77:5A:1F:07:82:31:E9:3E:28:62 Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 Certificate issuer: /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft Manifest number: 32 Signing time: Wed 05 Nov 2025 07:48:35 +0000 Manifest this update: Wed 05 Nov 2025 07:48:34 +0000 Manifest next update: Wed 12 Nov 2025 07:48:34 +0000 Files and hashes: 1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: GraottuA1uDPVmeOx2hmjpK5DKWoasU1BEo6Mw1ZZAo=) 2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: rZBaMYyqsgdUbj2Kc1VUQWs/4+3J/zfoVLydL5l2mZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Validity Not Before: Nov 5 07:48:34 2025 GMT Not After : Nov 12 07:48:34 2025 GMT Subject: CN=690b0152-1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:f8:82:a7:36:7d:bb:61:47:36:92:4e:0d: 31:d3:80:1b:9b:a8:a5:f0:2a:e6:60:36:92:51:a0: 3e:43:59:85:98:c2:e6:cf:58:ff:e2:f0:ed:2f:5b: d9:41:f7:e5:90:b8:46:0b:ab:5b:13:0a:27:e6:42: 06:59:37:de:0a:ae:a1:8f:98:b5:31:cf:2c:33:37: ef:1a:b5:01:6a:e4:bf:97:bb:6e:3e:8f:a0:54:de: 62:c5:5a:a5:20:cf:dc:e6:20:61:16:fc:61:2f:d4: 9e:1a:2f:f6:7d:93:a0:95:4d:f3:20:b1:fe:4e:a4: ef:97:98:7b:64:be:e4:e3:c6:ad:6c:95:88:25:13: a8:90:c2:72:1a:f8:f3:02:7f:42:45:65:35:3b:10: d0:c0:da:5e:3e:f0:ac:c8:a0:96:d5:f6:91:09:fa: 0e:75:8e:ca:c9:86:af:d3:1f:55:d0:44:90:12:43: 40:21:c2:92:8c:70:dd:12:95:08:b7:d8:44:25:cb: e7:17:d9:25:9a:10:65:22:57:4d:03:3c:d8:57:67: 96:15:98:b9:23:fb:45:1a:3e:70:d6:dd:4f:de:ed: 28:25:5c:4b:df:2e:3d:63:c0:45:d3:02:3e:ae:bb: 8c:a3:ad:d6:7a:23:0a:d8:61:b2:47:1a:cd:42:ad: 95:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B9:51:89:C1:D0:69:F3:6A:D9:77:5A:1F:07:82:31:E9:3E:28:62 X509v3 Authority Key Identifier: keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:df:1f:8c:c7:ab:9d:1b:6e:d4:7c:db:e5:70:51:28:7c:5c: da:b2:76:45:5f:ff:7d:e0:c1:a0:5f:24:4e:47:ee:81:bc:92: 47:db:bf:04:4a:19:96:a1:dc:68:5a:87:22:7c:a2:c3:b6:19: ab:c6:e3:7d:b8:59:be:55:6a:e2:ac:d1:37:47:f3:5d:f1:e6: b3:81:af:a6:45:0c:5f:67:25:f6:d2:cc:f6:17:bf:10:b2:2d: 3d:86:05:ed:41:7f:0c:86:4a:29:12:f6:90:07:1b:e7:55:cb: df:80:ce:f7:17:32:49:a9:ef:6b:97:ce:47:ab:3e:87:b2:e1: 85:80:0f:77:f5:88:74:f1:30:01:fe:7a:bb:ab:85:4f:dd:18: 71:3a:0f:b7:0b:d7:ff:94:09:e5:2e:61:60:eb:8a:06:7c:70: 1a:d4:ad:32:84:d9:3c:cd:48:07:9a:e8:10:66:eb:56:86:05: 18:dc:e0:62:ec:f0:c7:86:51:34:99:92:d8:54:6b:aa:72:c7: 5a:89:7c:26:29:1f:a2:62:7f:3f:c2:05:94:b5:de:21:a3:f6: dc:c7:f0:27:e2:35:6f:4a:f8:fa:14:6c:1f:11:8c:bb:c1:d2: f2:14:53:c9:26:3c:fb:50:f6:90:39:cd:c1:ab:36:37:d0:73: f6:e2:d0:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoNkFDQTExMjlCMjM4QzdBMUYxNzkxQjc1Q0Q0OUFENkJE NkFERkE3NzAeFw0yNTExMDUwNzQ4MzRaFw0yNTExMTIwNzQ4MzRaMBgxFjAUBgNV BAMTDTY5MGIwMTUyLTEyMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvPviCpzZ9u2FHNpJODTHTgBubqKXwKuZgNpJRoD5DWYWYwubPWP/i8O0vW9lB 9+WQuEYLq1sTCifmQgZZN94KrqGPmLUxzywzN+8atQFq5L+Xu24+j6BU3mLFWqUg z9zmIGEW/GEv1J4aL/Z9k6CVTfMgsf5OpO+XmHtkvuTjxq1slYglE6iQwnIa+PMC f0JFZTU7ENDA2l4+8KzIoJbV9pEJ+g51jsrJhq/TH1XQRJASQ0AhwpKMcN0SlQi3 2EQly+cX2SWaEGUiV00DPNhXZ5YVmLkj+0UaPnDW3U/e7SglXEvfLj1jwEXTAj6u u4yjrdZ6IwrYYbJHGs1CrZWjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmrlRicHQ afNq2XdaHweCMek+KGIwHwYDVR0jBBgwFoAUasoRKbI4x6HxeRt1zUmta9at+ncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2LzkxM0NBNkU4NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZIeGVSdDF6VW10YTlhdC1u Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXNvUktiSTR4Nkh4ZVJ0MXpVbXRhOWF0LW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2LzkxM0NBNkU4NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZI eGVSdDF6VW10YTlhdC1uYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC3fH4zHq50bbtR82+VwUSh8XNqydkVf/33gwaBfJE5H7oG8kkfbvwRK GZah3GhahyJ8osO2GavG4324Wb5VauKs0TdH813x5rOBr6ZFDF9nJfbSzPYXvxCy LT2GBe1BfwyGSikS9pAHG+dVy9+AzvcXMkmp72uXzkerPoey4YWAD3f1iHTxMAH+ erurhU/dGHE6D7cL1/+UCeUuYWDrigZ8cBrUrTKE2TzNSAea6BBm61aGBRjc4GLs 8MeGUTSZkthUa6pyx1qJfCYpH6Jifz/CBZS13iGj9tzH8CfiNW9K+PoUbB8RjLvB 0vIUU8kmPPtQ9pA5zcGrNjfQc/bi0JA= -----END CERTIFICATE-----Generated at Thu Nov 6 03:33:03 2025 by rpki-client