$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: WcxPSvku0NcZIaFPCXOXzdNxCQULrOmTwjwQgC+uF9k= Subject key identifier: 96:01:3C:BB:81:1C:C1:B0:C0:9A:46:8F:7B:5C:CF:BC:BE:7C:62:A5 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0CBF Signing time: Tue 04 Nov 2025 18:21:58 +0000 Manifest this update: Tue 04 Nov 2025 18:21:57 +0000 Manifest next update: Tue 11 Nov 2025 18:21:57 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: LkdKMzURykbZxrouHwlD0WjuyhiEyl9tFrKXKYo+Dz0=) 2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +t2OsFQRgFf0c7jNBR5fu1U2IpPKMIuwM5iZNaY//qo=) 3: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: Uur2jCKI44RTppdHPrBOV4rDdME7NfVW8X3JWQwRDe0=) 4: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: coEgjngsR/Ce6vFWSBZaZ5rCfdvEVYlwbgZyFrxHv0s=) 5: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: 5MqZOZoSVhwobP4LcJgxINFesjcjTvuIMp43rKBprmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Nov 4 18:21:57 2025 GMT Not After : Nov 11 18:21:57 2025 GMT Subject: CN=690a4445-f852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1c:5c:b8:f2:cd:bc:9b:64:e3:ef:2e:b6:44: 30:3d:00:49:36:70:06:03:11:81:9c:60:29:f0:f2: 58:ca:62:be:f1:43:47:d0:1c:f4:1b:28:c4:e3:bf: 95:19:ce:8b:74:8e:25:ae:4e:6c:65:30:bd:04:53: e3:00:1d:bb:e5:f2:20:a6:5b:3f:23:ae:07:8b:f6: 7f:83:03:8a:ae:aa:f2:9c:c3:17:5e:30:28:ee:00: 1d:eb:a8:66:06:a2:14:9a:25:6b:28:db:cf:c9:29: 3e:3e:45:06:fe:66:1f:bd:e4:4d:35:e6:48:e6:84: aa:78:7c:01:2e:fd:ba:fa:62:1f:4b:e7:c2:8d:f1: f8:a8:1d:d7:bb:95:0b:4c:a9:0f:d1:93:cd:5e:d6: fb:97:7a:ff:dd:d2:ec:5d:01:c0:c8:30:e0:b7:e5: 6c:a1:f0:66:58:6f:c0:2d:90:09:d3:89:c4:74:a2: 1b:ac:37:cd:31:5c:2c:98:c9:d7:31:51:ff:8d:7d: 4f:e4:14:81:78:c6:8f:b3:7c:81:4b:c1:4e:10:94: 0a:93:39:94:a4:7a:c4:fd:62:e2:fa:02:f5:60:c7: 8a:0e:de:96:71:88:57:4d:47:e0:44:2b:2d:be:2e: 7d:6d:b7:8d:9e:ed:14:d5:e5:1d:65:0d:a3:80:34: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:3C:BB:81:1C:C1:B0:C0:9A:46:8F:7B:5C:CF:BC:BE:7C:62:A5 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c9:2c:72:8e:b7:d3:e4:9e:80:56:61:71:a8:9a:1b:ec:2c: 17:87:83:28:78:89:72:53:f9:be:21:ea:a7:85:4c:85:37:7b: 01:20:58:68:1b:f3:e2:b3:06:37:5f:1f:17:da:a3:09:f3:4f: c6:60:15:85:81:7e:c0:24:70:67:a7:dd:25:36:e8:b0:e9:c9: ef:bb:fc:91:6a:1a:d7:ff:f3:ba:22:fc:3f:08:74:14:0c:ae: 7d:66:e6:80:a5:40:c8:ed:89:bd:ba:b6:a2:77:83:58:3f:23: 75:b7:f1:37:49:f6:3c:74:d7:b9:58:56:9e:9c:35:bc:27:01: bd:10:5e:d1:72:64:42:62:0d:5c:21:47:23:33:7c:c8:4f:f2: 3c:18:f2:6d:7b:e4:31:3f:ad:64:e5:93:4f:f6:68:1b:cb:b6: 49:43:82:fb:06:1b:2d:4a:ba:fb:f6:b5:08:bf:ad:1e:61:df: 84:09:39:8f:72:9b:94:4e:7f:b3:ed:57:b0:7f:af:5a:12:f5: ca:ac:e6:44:b7:c2:59:39:d2:de:47:47:2c:eb:d7:ee:04:83: d6:93:bc:65:c6:7b:3b:13:ea:2c:e1:ee:5b:4e:99:85:7a:56: 60:3c:27:1f:d3:a8:d9:ae:33:96:7d:01:bf:fe:e5:f0:55:4c: 89:1b:3f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjUxMTA0MTgyMTU3WhcNMjUxMTExMTgyMTU3WjAYMRYwFAYD VQQDEw02OTBhNDQ0NS1mODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+RxcuPLNvJtk4+8utkQwPQBJNnAGAxGBnGAp8PJYymK+8UNH0Bz0GyjE47+V Gc6LdI4lrk5sZTC9BFPjAB275fIgpls/I64Hi/Z/gwOKrqrynMMXXjAo7gAd66hm BqIUmiVrKNvPySk+PkUG/mYfveRNNeZI5oSqeHwBLv26+mIfS+fCjfH4qB3Xu5UL TKkP0ZPNXtb7l3r/3dLsXQHAyDDgt+VsofBmWG/ALZAJ04nEdKIbrDfNMVwsmMnX MVH/jX1P5BSBeMaPs3yBS8FOEJQKkzmUpHrE/WLi+gL1YMeKDt6WcYhXTUfgRCst vi59bbeNnu0U1eUdZQ2jgDTBhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYBPLuB HMGwwJpGj3tcz7y+fGKlMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApySxyjrfT5J6AVmFxqJob7CwXh4MoeIlyU/m+IeqnhUyFN3sBIFho G/PiswY3Xx8X2qMJ80/GYBWFgX7AJHBnp90lNuiw6cnvu/yRahrX//O6Ivw/CHQU DK59ZuaApUDI7Ym9uraid4NYPyN1t/E3SfY8dNe5WFaenDW8JwG9EF7RcmRCYg1c IUcjM3zIT/I8GPJte+QxP61k5ZNP9mgby7ZJQ4L7BhstSrr79rUIv60eYd+ECTmP cpuUTn+z7Vewf69aEvXKrOZEt8JZOdLeR0cs69fuBIPWk7xlxns7E+os4e5bTpmF elZgPCcf06jZrjOWfQG//uXwVUyJGz8a -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:03 2025 by rpki-client