$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: bfKiXw2aWMod8lD1S0bbjG2/ZLpm9TnxNtQ68QE0rm0= Subject key identifier: 95:92:C8:9D:6F:55:3D:03:F5:A8:0D:A6:7C:CB:EA:88:FC:B7:39:1E Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 0A53 Signing time: Tue 04 Nov 2025 19:46:13 +0000 Manifest this update: Tue 04 Nov 2025 19:46:13 +0000 Manifest next update: Tue 11 Nov 2025 19:46:13 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: r52eOjMVL2/djxb4WBxlwfFI+i4IdRf2x06na80PvFU=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: yZGCclZoBxnBhfhgaEtvdMtpamiVGJaHMeM0i3edazA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: Nov 4 19:46:13 2025 GMT Not After : Nov 11 19:46:13 2025 GMT Subject: CN=690a5805-bd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:18:73:4d:87:ce:b9:cb:ef:2b:c7:22:61: c0:e3:fd:57:6d:34:f7:86:81:be:21:ca:b4:6b:0b: 89:af:b4:12:1e:97:d1:e1:fe:55:3d:a6:57:15:78: a4:f5:19:a3:2c:23:e4:76:f8:96:b8:ba:a4:34:10: 83:92:39:7c:c4:21:8e:7b:d9:81:71:aa:13:e7:3c: ac:17:b5:7a:c9:36:2c:65:1e:e0:c2:57:c4:33:20: 5b:de:ef:01:9a:a1:a5:fc:c7:e0:39:ff:dc:3f:1e: 1a:d8:56:76:b7:54:64:fe:c1:f2:b8:13:cd:9e:b8: c9:b8:d8:bd:fd:cf:0c:7d:3c:b4:7d:95:08:c5:97: ab:87:16:43:09:32:d6:b2:c2:4a:f1:3a:a7:c3:ac: fd:93:78:07:03:9e:66:9f:86:07:5e:62:38:ab:81: f8:a7:c2:ef:c3:9e:b7:4c:6d:4f:b0:38:2c:ec:6e: cf:50:43:6b:48:33:28:66:b2:b3:1e:45:15:35:88: 27:27:35:5f:d3:a7:a1:37:fe:b4:ba:62:a4:1d:79: 95:4b:37:20:2d:32:bc:05:95:cc:f7:96:5e:1f:2e: 72:27:36:13:18:b0:29:ae:9f:0b:7a:8e:7c:69:d1: a1:2d:79:3a:af:ba:0c:fb:13:dd:84:c6:d5:40:2c: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:92:C8:9D:6F:55:3D:03:F5:A8:0D:A6:7C:CB:EA:88:FC:B7:39:1E X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cd:d7:c9:e4:e7:3e:15:c1:5e:a0:d4:1b:03:b7:6c:d1:52: f3:62:13:b6:fd:f3:fd:07:55:0c:58:64:83:0b:80:be:d5:94: ce:a2:21:f2:ee:93:b9:ab:57:45:f8:b9:8b:b5:b8:46:87:fc: 08:f3:1a:30:22:c8:9b:c6:b1:70:16:bb:c9:09:dc:37:aa:21: 6e:8d:47:0b:71:e0:5a:c9:21:bf:69:5e:77:4a:15:7e:ce:bc: 69:5c:6d:74:1d:de:be:d2:56:06:de:72:8b:91:95:fd:8a:3b: 24:a2:9a:36:9e:8d:af:d1:ac:a9:57:f0:5c:97:07:50:47:49: 05:79:93:7c:bb:57:d0:12:7a:93:b8:8b:5b:67:9e:43:d7:eb: 85:56:14:27:ed:eb:30:2c:18:5a:ce:2a:a0:67:76:7d:2e:0f: ee:b8:ab:d4:ea:13:61:e6:d4:d5:2f:a3:ab:8f:18:c1:34:4c: 90:1d:0e:0c:4b:26:ba:f5:df:2a:6b:ae:0f:41:3e:3f:43:a5: 33:e1:42:bc:51:29:52:3d:b3:d6:d2:59:76:04:ec:c2:03:a7: 5d:9c:d5:b5:3e:1e:5c:77:ff:71:3d:98:d9:5d:0f:47:29:18: fc:ed:2b:89:c0:d5:48:d2:89:71:59:dc:11:ca:38:2b:7f:06: 40:1d:c4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjUxMTA0MTk0NjEzWhcNMjUxMTExMTk0NjEzWjAYMRYwFAYD VQQDEw02OTBhNTgwNS1iZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I0Yc02HzrnL7yvHImHA4/1XbTT3hoG+Icq0awuJr7QSHpfR4f5VPaZXFXik 9RmjLCPkdviWuLqkNBCDkjl8xCGOe9mBcaoT5zysF7V6yTYsZR7gwlfEMyBb3u8B mqGl/MfgOf/cPx4a2FZ2t1Rk/sHyuBPNnrjJuNi9/c8MfTy0fZUIxZerhxZDCTLW ssJK8Tqnw6z9k3gHA55mn4YHXmI4q4H4p8Lvw563TG1PsDgs7G7PUENrSDMoZrKz HkUVNYgnJzVf06ehN/60umKkHXmVSzcgLTK8BZXM95ZeHy5yJzYTGLAprp8Leo58 adGhLXk6r7oM+xPdhMbVQCxEEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWSyJ1v VT0D9agNpnzL6oj8tzkeMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCzdfJ5Oc+FcFeoNQbA7ds0VLzYhO2/fP9B1UMWGSDC4C+1ZTOoiHy 7pO5q1dF+LmLtbhGh/wI8xowIsibxrFwFrvJCdw3qiFujUcLceBaySG/aV53ShV+ zrxpXG10Hd6+0lYG3nKLkZX9ijskopo2no2v0aypV/BclwdQR0kFeZN8u1fQEnqT uItbZ55D1+uFVhQn7eswLBhaziqgZ3Z9Lg/uuKvU6hNh5tTVL6OrjxjBNEyQHQ4M Sya69d8qa64PQT4/Q6Uz4UK8USlSPbPW0ll2BOzCA6ddnNW1Ph5cd/9xPZjZXQ9H KRj87SuJwNVI0olxWdwRyjgrfwZAHcR+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:01 2025 by rpki-client