$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json) Hash identifier: 8LAStY0dBdGXL2d0fbnIec7BFimDqcnowWYXb7gXowI= Subject key identifier: 34:00:42:ED:5A:0D:DE:67:AE:32:57:B5:86:1B:65:E5:AE:78:63:CD Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft Manifest number: 3D7F Signing time: Tue 04 Nov 2025 15:15:42 +0000 Manifest this update: Tue 04 Nov 2025 15:15:42 +0000 Manifest next update: Tue 11 Nov 2025 15:15:42 +0000 Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: ujs2K5eOAb44lMLo+G+/1y84fwwyAX3+DZIe+iZ/zkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB, serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Validity Not Before: Nov 4 15:15:42 2025 GMT Not After : Nov 11 15:15:42 2025 GMT Subject: CN=690a189e-f2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:cd:ad:b0:5c:b6:ed:7c:6c:74:57:54:5a: a8:54:8c:35:d6:1a:a5:7c:2a:ff:8b:16:aa:b4:51: c6:d2:bf:3b:8a:5d:83:23:88:f6:02:10:66:0b:e1: 75:19:0d:f0:c2:a0:cc:57:a8:9f:e1:94:dd:52:0f: 89:f4:54:99:05:4f:f5:6e:dc:70:47:98:e6:a9:b4: d0:6c:d9:52:c1:35:63:ee:04:50:52:7a:7c:9e:30: 65:73:22:7d:84:8c:be:df:39:0c:40:77:6a:c9:5f: 05:fe:2a:7a:72:40:86:52:00:3f:9e:47:5e:5e:ff: 25:ee:46:6c:e0:e5:83:d0:05:2b:fc:9d:60:1a:00: 08:ff:2b:91:dd:61:1c:7c:30:b0:1b:a3:7b:ed:57: d3:0e:41:62:9f:ab:64:ea:af:e5:2a:4b:7d:52:58: 37:27:61:68:d8:f7:91:fb:74:0c:99:c5:52:6e:47: 15:45:c2:48:4b:a4:6e:b0:96:46:41:ce:4d:b7:e6: 4c:3b:0a:8e:40:4a:1d:52:cb:10:57:08:53:d7:c6: 2c:e4:eb:33:51:4f:b0:7e:4f:96:ad:dc:f9:6b:09: 79:3d:d2:87:48:34:64:0f:cc:ad:d5:a5:3d:da:83: 89:4b:c4:67:b5:dc:36:bb:b8:3a:a3:62:3d:59:13: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:00:42:ED:5A:0D:DE:67:AE:32:57:B5:86:1B:65:E5:AE:78:63:CD X509v3 Authority Key Identifier: keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0b:72:fe:5d:79:83:05:66:c3:d4:90:86:33:28:48:7c:78: fa:3e:7a:bc:b1:df:44:66:28:2e:08:cc:c6:aa:cf:d1:7f:a5: 90:ed:96:39:80:7d:7f:b4:04:76:67:a5:d4:e8:ba:f4:8d:00: 72:ca:26:d9:c1:95:0e:f2:10:28:88:95:81:5e:51:ef:40:0c: 10:ee:14:a9:57:94:cc:d6:87:89:ca:51:e5:69:65:49:f2:1a: 0b:37:cf:51:a9:7a:b8:61:67:e6:a1:16:89:de:bd:5e:06:7f: a9:ee:9b:b1:69:2d:82:c8:0a:81:4e:ec:47:48:5d:71:ef:db: 89:d6:7a:c1:b6:51:de:f7:14:c7:5f:4d:89:ab:0f:15:c3:18: 85:39:bf:8f:3b:a9:7d:b4:18:d9:22:d4:29:55:c2:b9:98:f4: 31:55:c1:98:ec:34:b3:5c:b0:cf:ce:48:85:25:b5:84:48:91: 81:ec:e3:34:91:3a:11:5d:50:b5:e3:9b:b9:6f:da:b6:ee:ba: 3b:5e:08:5c:f4:12:20:d5:f6:c7:66:9d:7e:a3:74:bb:7d:01: 66:80:7c:6f:9b:17:9f:30:e7:1b:a2:9c:07:dc:04:0f:75:e5: 88:96:ac:a9:67:04:07:82:1b:b6:f6:f1:f0:bb:cc:17:f2:b4: b9:e0:1c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD MkUyNUU0QjAwHhcNMjUxMTA0MTUxNTQyWhcNMjUxMTExMTUxNTQyWjAYMRYwFAYD VQQDEw02OTBhMTg5ZS1mMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/3NrbBctu18bHRXVFqoVIw11hqlfCr/ixaqtFHG0r87il2DI4j2AhBmC+F1 GQ3wwqDMV6if4ZTdUg+J9FSZBU/1btxwR5jmqbTQbNlSwTVj7gRQUnp8njBlcyJ9 hIy+3zkMQHdqyV8F/ip6ckCGUgA/nkdeXv8l7kZs4OWD0AUr/J1gGgAI/yuR3WEc fDCwG6N77VfTDkFin6tk6q/lKkt9Ulg3J2Fo2PeR+3QMmcVSbkcVRcJIS6RusJZG Qc5Nt+ZMOwqOQEodUssQVwhT18Ys5OszUU+wfk+Wrdz5awl5PdKHSDRkD8yt1aU9 2oOJS8Rntdw2u7g6o2I9WRN2TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQAQu1a Dd5nrjJXtYYbZeWueGPNMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPC3L+XXmDBWbD1JCGMyhIfHj6Pnq8sd9EZiguCMzGqs/Rf6WQ7ZY5 gH1/tAR2Z6XU6Lr0jQByyibZwZUO8hAoiJWBXlHvQAwQ7hSpV5TM1oeJylHlaWVJ 8hoLN89RqXq4YWfmoRaJ3r1eBn+p7puxaS2CyAqBTuxHSF1x79uJ1nrBtlHe9xTH X02Jqw8VwxiFOb+PO6l9tBjZItQpVcK5mPQxVcGY7DSzXLDPzkiFJbWESJGB7OM0 kToRXVC145u5b9q27ro7Xghc9BIg1fbHZp1+o3S7fQFmgHxvmxefMOcbopwH3AQP deWIlqypZwQHghu29vHwu8wX8rS54BwJ -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:18 2025 by rpki-client