$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: mL3s6+K+YRaDISC7AgX4VK18NGC8RB8LbAskYD8IYGA= Subject key identifier: 63:FA:8A:3D:62:F1:08:B9:1D:43:47:52:54:FF:B4:10:86:39:78:21 Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 04FC Signing time: Sun 02 Nov 2025 23:39:20 +0000 Manifest this update: Sun 02 Nov 2025 23:39:19 +0000 Manifest next update: Sun 09 Nov 2025 23:39:19 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: pV9qyu+Z0v9qwq+27J6kdRaE1O79tNbPkp/5mj6HuvM=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Nov 2 23:39:19 2025 GMT Not After : Nov 9 23:39:19 2025 GMT Subject: CN=6907eba7-b627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:33:84:cf:d8:fe:95:2f:18:4f:bd:6c:dc: 56:7f:60:f0:93:67:4b:ba:0c:a7:50:26:6d:b2:a0: 30:2a:70:c0:59:c0:06:dd:13:8e:6b:76:18:53:46: a3:98:f9:be:f4:45:62:65:69:69:43:35:36:45:60: 22:f7:d6:c3:f0:ef:4c:e3:a1:68:cc:03:02:f9:dc: 4c:a6:70:5d:89:22:38:f1:58:79:e2:7c:6c:ed:a8: 2d:bf:97:7a:8e:68:72:46:f7:c6:5d:42:cb:ce:5a: 3c:59:9a:58:52:3b:d7:cc:a6:3b:fc:b7:61:00:42: 34:b2:9d:c7:5b:d5:6a:f3:b2:00:d6:23:db:aa:d0: d2:3b:1a:12:f8:06:b3:eb:eb:7f:8e:b7:74:a7:ff: 1e:2c:98:98:0d:03:63:51:4f:54:ab:47:24:b2:3e: 2a:a5:ec:e2:4c:b2:0a:7a:65:e7:d0:98:32:fb:5b: c6:99:e9:58:15:3e:54:d4:cf:1a:1d:a8:f3:2f:a3: 90:79:3b:7e:ca:80:ae:c1:d5:5e:fd:ee:e4:95:ab: 8f:19:5a:8f:cc:b8:ad:c8:53:ea:d7:42:e0:93:0e: f9:a4:2a:b4:c8:05:13:51:9f:59:b4:c8:b5:25:17: 5c:ff:b2:b8:67:0d:04:d7:28:86:7d:3c:fe:ea:9e: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FA:8A:3D:62:F1:08:B9:1D:43:47:52:54:FF:B4:10:86:39:78:21 X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6c:ae:cb:ae:48:a8:07:62:5c:2e:31:0c:3a:50:69:d9:bf: 72:ec:a2:b0:7d:cd:3c:65:19:6a:56:8f:ec:f6:92:d9:8c:a0: 6d:1e:25:d8:d8:ac:d7:66:ea:47:2e:20:4e:9c:ca:9a:44:40: f1:d7:93:4e:b5:7b:f1:53:ef:17:e4:64:be:bb:ac:a2:b3:96: 71:7e:91:e2:ec:cf:b0:a0:22:8b:52:98:43:05:e8:1e:2c:9f: be:ae:29:96:de:f7:c2:b9:a1:5d:56:bb:f2:38:d5:81:5b:bc: 3b:34:76:6a:dc:14:e0:88:a9:28:d5:e7:29:67:7a:06:59:a9: 37:65:d6:39:73:2f:59:be:c0:54:4d:dc:50:e0:c0:65:5d:31: bf:6e:4e:66:21:52:ea:f8:ac:d6:da:b8:6e:c2:2b:49:06:cd: f5:16:81:c7:23:1c:d7:3a:c5:d5:14:cf:24:ac:25:6f:65:8f: b7:ec:81:fb:d9:26:05:55:a0:65:e0:23:09:5f:0e:b1:99:56: bf:e0:43:ac:e6:a8:24:e8:3e:2b:53:f8:c7:5a:8c:1a:95:18: 57:8a:31:cd:06:35:c7:4e:48:93:3b:71:24:33:3c:3b:c8:ca: 15:57:a1:60:d8:de:14:0d:db:9f:ca:85:a0:89:83:29:8e:11: 9a:2a:bd:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUxMTAyMjMzOTE5WhcNMjUxMTA5MjMzOTE5WjAYMRYwFAYD VQQDEw02OTA3ZWJhNy1iNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDEzhM/Y/pUvGE+9bNxWf2Dwk2dLugynUCZtsqAwKnDAWcAG3ROOa3YYU0aj mPm+9EViZWlpQzU2RWAi99bD8O9M46FozAMC+dxMpnBdiSI48Vh54nxs7agtv5d6 jmhyRvfGXULLzlo8WZpYUjvXzKY7/LdhAEI0sp3HW9Vq87IA1iPbqtDSOxoS+Aaz 6+t/jrd0p/8eLJiYDQNjUU9Uq0cksj4qpeziTLIKemXn0Jgy+1vGmelYFT5U1M8a HajzL6OQeTt+yoCuwdVe/e7klauPGVqPzLityFPq10Lgkw75pCq0yAUTUZ9ZtMi1 JRdc/7K4Zw0E1yiGfTz+6p7JHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP6ij1i 8Qi5HUNHUlT/tBCGOXghMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGbK7LrkioB2JcLjEMOlBp2b9y7KKwfc08ZRlqVo/s9pLZjKBtHiXY 2KzXZupHLiBOnMqaREDx15NOtXvxU+8X5GS+u6yis5ZxfpHi7M+woCKLUphDBege LJ++rimW3vfCuaFdVrvyONWBW7w7NHZq3BTgiKko1ecpZ3oGWak3ZdY5cy9ZvsBU TdxQ4MBlXTG/bk5mIVLq+KzW2rhuwitJBs31FoHHIxzXOsXVFM8krCVvZY+37IH7 2SYFVaBl4CMJXw6xmVa/4EOs5qgk6D4rU/jHWowalRhXijHNBjXHTkiTO3EkMzw7 yMoVV6Fg2N4UDdufyoWgiYMpjhGaKr2o -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:53 2025 by rpki-client