$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: nI/6l5iZx+qJUrHqqpUTwU9v7osblEwaXTePVuGliEo= Subject key identifier: 6F:3C:5B:FA:BA:B3:F8:9F:59:B2:C2:26:28:FD:EF:3C:16:54:32:0B Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 34D8 Signing time: Tue 04 Nov 2025 15:14:47 +0000 Manifest this update: Tue 04 Nov 2025 15:14:46 +0000 Manifest next update: Tue 11 Nov 2025 15:14:46 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: 2ip8ApB71CmJ6GppXzSU6rRYnnIIgCEBQcKBJmwEr5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Nov 4 15:14:46 2025 GMT Not After : Nov 11 15:14:46 2025 GMT Subject: CN=690a1866-bc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:80:de:c1:b4:f0:78:15:81:85:3d:37:49:0b: 6c:be:82:02:e9:bc:83:92:83:76:80:3b:c5:ca:de: 37:7b:8d:49:7b:c0:df:76:05:df:f8:10:db:5b:60: a5:09:5e:6b:75:4e:08:f4:86:90:15:d5:0a:47:bc: 5f:b2:fc:1d:40:81:45:b4:b6:56:69:82:3c:47:dd: 9e:df:8a:4b:42:ff:74:e1:4e:a3:1c:4a:e3:96:84: 9a:fb:d9:a5:5c:c8:27:4c:dc:d2:96:01:97:8d:05: 74:f4:62:b1:9a:07:e7:9b:50:ac:df:39:3c:85:e6: c5:81:83:ad:bc:39:3f:b1:15:a4:ea:dd:a5:d6:5d: ff:08:41:c6:dc:11:78:26:c4:b0:cb:d9:6f:7c:8b: e6:fa:56:be:44:69:b1:5b:b0:ae:93:38:f5:6e:eb: 30:fe:7e:e7:5e:90:03:03:3c:b1:24:7c:5c:8e:c2: 75:9a:2e:57:db:5e:18:33:f2:59:a1:9b:40:c5:af: 91:dd:b8:6e:33:70:a3:91:ae:7c:ca:8e:60:4e:eb: f9:5a:61:26:02:5f:c1:1a:9b:3b:b3:64:b9:50:fe: 8c:d2:f8:5a:b5:6c:6b:1f:c0:38:7a:cf:92:c5:ee: da:cf:85:b5:d4:41:41:3a:8a:fd:6b:24:02:90:48: 9e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3C:5B:FA:BA:B3:F8:9F:59:B2:C2:26:28:FD:EF:3C:16:54:32:0B X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:47:0e:98:c2:ca:bc:d1:ea:2d:46:fb:8d:da:c2:1f:9c:dd: 2d:0b:2a:88:40:0e:16:60:3e:73:c7:57:a0:e4:b0:ce:4d:45: 65:04:f9:42:df:3b:27:9e:f5:d3:ba:48:34:6a:20:d0:0e:a1: 3a:8a:75:4c:32:05:20:38:37:b5:40:67:1d:74:75:d5:28:da: ce:91:ed:73:f3:75:02:c6:48:c7:0a:bf:22:41:07:bd:d9:35: 56:e1:41:6b:3e:11:d1:11:64:21:6f:81:62:dd:7d:92:de:5f: 73:78:c4:b7:ff:3d:ab:43:72:31:c7:ac:57:78:bc:76:72:47: 3d:70:73:5e:ac:4b:b5:35:a3:d4:b7:1d:bd:7f:d5:75:a0:e9: 47:db:74:05:23:1c:ff:cb:e5:9a:c5:c9:4b:f2:74:f7:dc:3a: dc:47:5f:7d:e4:16:af:4c:c1:31:3e:18:f4:c0:53:07:2e:17: d2:89:55:66:c5:2a:62:b8:e6:a3:70:44:21:cf:3e:e6:43:8c: ec:46:5b:6a:73:8e:cb:05:1c:e0:ac:67:6b:66:74:63:80:f9: c5:23:b4:31:85:44:cc:1b:de:ac:0f:5d:58:1c:eb:86:d7:38: 3e:48:7d:f4:09:04:4a:6c:12:94:17:61:c3:bd:c5:63:0d:a0: 1b:1e:97:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUxMTA0MTUxNDQ2WhcNMjUxMTExMTUxNDQ2WjAYMRYwFAYD VQQDEw02OTBhMTg2Ni1iYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoDewbTweBWBhT03SQtsvoIC6byDkoN2gDvFyt43e41Je8DfdgXf+BDbW2Cl CV5rdU4I9IaQFdUKR7xfsvwdQIFFtLZWaYI8R92e34pLQv904U6jHErjloSa+9ml XMgnTNzSlgGXjQV09GKxmgfnm1Cs3zk8hebFgYOtvDk/sRWk6t2l1l3/CEHG3BF4 JsSwy9lvfIvm+la+RGmxW7Cukzj1busw/n7nXpADAzyxJHxcjsJ1mi5X214YM/JZ oZtAxa+R3bhuM3Cjka58yo5gTuv5WmEmAl/BGps7s2S5UP6M0vhatWxrH8A4es+S xe7az4W11EFBOor9ayQCkEie7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG88W/q6 s/ifWbLCJij97zwWVDILMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXRw6Ywsq80eotRvuN2sIfnN0tCyqIQA4WYD5zx1eg5LDOTUVlBPlC 3zsnnvXTukg0aiDQDqE6inVMMgUgODe1QGcddHXVKNrOke1z83UCxkjHCr8iQQe9 2TVW4UFrPhHREWQhb4Fi3X2S3l9zeMS3/z2rQ3Ixx6xXeLx2ckc9cHNerEu1NaPU tx29f9V1oOlH23QFIxz/y+WaxclL8nT33DrcR1995BavTMExPhj0wFMHLhfSiVVm xSpiuOajcEQhzz7mQ4zsRltqc47LBRzgrGdrZnRjgPnFI7QxhUTMG96sD11YHOuG 1zg+SH30CQRKbBKUF2HDvcVjDaAbHpd6 -----END CERTIFICATE-----Generated at Wed Nov 5 18:04:55 2025 by rpki-client