$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json) Hash identifier: sM2myLbEe6BS69rTVnma9fmhA0iIOzb9d3BVPWW2mGA= Subject key identifier: A6:67:E7:23:6F:20:DC:22:AD:B8:8D:BF:DC:F7:65:96:E9:BF:DD:08 Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft Manifest number: 0125 Signing time: Wed 05 Nov 2025 04:48:42 +0000 Manifest this update: Wed 05 Nov 2025 04:48:41 +0000 Manifest next update: Wed 12 Nov 2025 04:48:41 +0000 Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: 1imiDkvtcphigvfhL6SCSbZ9YM2b7mLksp8+T7iS2Eo=) 2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: BonjniXMbmI4yDYc3ynOZLv8pgVSOdRZa/c5jpsq0Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Validity Not Before: Nov 5 04:48:41 2025 GMT Not After : Nov 12 04:48:41 2025 GMT Subject: CN=690ad72a-a959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:a5:91:52:80:a2:c5:7c:34:1e:ce:39:e7: 13:d8:89:e7:05:31:3f:0f:65:a8:5c:68:54:ab:b5: f1:46:48:9e:54:48:d8:9b:94:38:7c:dd:b1:33:fd: a9:cc:72:67:f2:11:ea:90:93:e7:cb:26:60:a6:2e: 62:c6:d2:96:54:24:f4:cc:a2:27:60:bd:3f:b7:f4: e8:04:b6:ef:17:14:e7:77:81:7b:56:81:77:5b:5e: 74:65:98:a2:63:2f:6a:4a:0e:3c:31:9e:13:7a:f4: 73:c2:f1:d0:22:06:08:6b:57:48:41:10:43:86:32: d2:76:96:34:06:4a:a8:08:a3:37:fa:c1:53:4b:f2: 08:2f:04:1e:5b:a0:35:fb:e6:9d:a1:a4:a8:fc:b1: 16:d2:60:71:dc:f4:9e:a7:37:e3:e9:82:6f:1d:4d: 82:10:a2:10:38:02:e9:40:24:85:f1:0e:86:6c:48: 51:0e:5f:14:fb:76:a0:83:8f:07:b5:8a:47:65:04: cb:91:bc:dc:29:56:e2:64:2e:de:46:9f:21:2c:f1: 62:00:ec:69:5e:12:45:d8:a1:8d:69:c8:d5:f7:02: 03:50:65:ae:da:a6:33:a3:64:67:3c:7f:48:46:c0: f4:17:19:5a:f3:b7:37:df:25:0c:85:36:9b:ee:0e: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:67:E7:23:6F:20:DC:22:AD:B8:8D:BF:DC:F7:65:96:E9:BF:DD:08 X509v3 Authority Key Identifier: keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:77:09:99:cf:b7:ce:98:6a:af:36:e7:bb:32:92:fc:87:bc: 75:1f:3a:ac:e7:ef:03:aa:5b:b3:a1:68:69:bd:b7:1e:ae:76: 74:57:e3:d4:92:29:85:90:fb:46:54:19:c3:4c:a1:64:e0:89: b5:79:cf:7c:96:7b:35:b3:78:c7:4a:f3:40:38:fd:1f:e5:17: 37:67:1d:4d:f9:c2:fa:f6:63:76:54:94:95:11:7d:a9:78:d5: b0:fa:de:92:54:72:23:ce:c1:4f:ea:4b:77:cc:72:50:6b:7d: 22:96:fb:da:e3:34:bf:66:70:ba:3a:44:9e:b3:06:5d:1f:e4: 15:2b:ac:36:5d:31:f1:fb:ae:14:cc:a7:3c:b7:bf:d1:66:54: 1f:3f:6a:79:83:07:d6:75:af:19:25:4b:9d:97:e1:de:9e:c3: 0b:a3:fd:fe:d8:d5:d6:d4:60:1d:dd:05:47:d5:ce:26:78:50: a6:49:df:00:99:e7:09:73:65:1d:cc:ef:e3:ba:00:16:18:15: 32:46:05:86:7d:6f:47:10:54:d9:31:bf:9f:64:9b:6d:c1:4b: 14:d4:52:f5:9b:2f:af:86:c8:91:e5:a3:26:17:f1:9b:61:c9: 74:61:50:04:90:20:b8:48:04:01:0c:9e:d5:d1:86:fd:70:8d: e6:a1:a8:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5 MzNEOTgwNDAwHhcNMjUxMTA1MDQ0ODQxWhcNMjUxMTEyMDQ0ODQxWjAYMRYwFAYD VQQDEw02OTBhZDcyYS1hOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfmlkVKAosV8NB7OOecT2InnBTE/D2WoXGhUq7XxRkieVEjYm5Q4fN2xM/2p zHJn8hHqkJPnyyZgpi5ixtKWVCT0zKInYL0/t/ToBLbvFxTnd4F7VoF3W150ZZii Yy9qSg48MZ4TevRzwvHQIgYIa1dIQRBDhjLSdpY0BkqoCKM3+sFTS/IILwQeW6A1 ++adoaSo/LEW0mBx3PSepzfj6YJvHU2CEKIQOALpQCSF8Q6GbEhRDl8U+3agg48H tYpHZQTLkbzcKVbiZC7eRp8hLPFiAOxpXhJF2KGNacjV9wIDUGWu2qYzo2RnPH9I RsD0Fxla87c33yUMhTab7g6Z4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZn5yNv INwirbiNv9z3ZZbpv90IMB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1 NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqdwmZz7fOmGqvNue7MpL8h7x1Hzqs5+8DqluzoWhpvbcernZ0V+PU kimFkPtGVBnDTKFk4Im1ec98lns1s3jHSvNAOP0f5Rc3Zx1N+cL69mN2VJSVEX2p eNWw+t6SVHIjzsFP6kt3zHJQa30ilvva4zS/ZnC6OkSeswZdH+QVK6w2XTHx+64U zKc8t7/RZlQfP2p5gwfWda8ZJUudl+HensMLo/3+2NXW1GAd3QVH1c4meFCmSd8A mecJc2UdzO/jugAWGBUyRgWGfW9HEFTZMb+fZJttwUsU1FL1my+vhsiR5aMmF/Gb Ycl0YVAEkCC4SAQBDJ7V0Yb9cI3moai0 -----END CERTIFICATE-----Generated at Thu Nov 6 04:12:04 2025 by rpki-client